Privacy Policy
Last updated 8 September 2026
This policy explains what Chains Out collects, why, and what you can do about it. It is written to be read, not to be survived.
The short version. We keep your email address, your name if you give one, and your fantasy football answers. We do not sell anything to anybody. We show adverts, and the advertising network sets cookies to do that. You can delete everything at any time by emailing us.
Who we are
Chains Out is run by Dale Evans, a sole trader based in the United Kingdom. For anything in this policy, including a request to see or delete your data, write to privacy@chainsout.com.
For UK GDPR purposes we are the data controller for the information described here.
What we collect
| What | Why | Legal basis |
|---|---|---|
| Your email address | It is how you sign in, and how we would reach you about your account | Necessary to provide the service you asked for (contract) |
| Your name, if you give one | So the app can greet you properly | Contract |
| Your password, as a one-way hash | To check it is you. We never store the password itself and cannot see it | Contract |
| Your answers, rankings, teams and saved drafts | This is the product. It is the thing you are here to build | Contract |
| Your sign-up answers about how you play | To set the app up correctly for you, and to understand who uses it | Legitimate interests |
| Rough usage counts, and failed sign-in attempts | To know the service is working and to stop people guessing passwords | Legitimate interests |
What we deliberately do not collect
- No third-party analytics. There is no Google Analytics on this site.
- No tracking of you across other websites by us.
- No location, no contacts, no device fingerprinting.
- No payment card details ever reach us — a payment provider handles those and we are only told whether a subscription is active.
Advertising and cookies
Chains Out is free, and advertising is what pays for it. We use Google AdSense to show adverts.
Google, as a third-party vendor, uses cookies to serve adverts on this site. Google's use of advertising cookies enables it and its partners to serve adverts to you based on your visit to this site and other sites on the internet.
You can opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info.
If you subscribe to the ad-free plan, the advertising scripts are not loaded at all on your account.
The cookies we set ourselves
| Cookie | What it does | How long |
|---|---|---|
dy_session | Keeps you signed in. It contains a random value and nothing about you | 90 days |
The app also stores your board in your browser's local storage so it works offline and loads instantly. That stays on your device; it is not a cookie and it is not sent anywhere except to your own account when you are signed in.
Where your data is kept
On Cloudflare's network. Cloudflare stores and processes data in facilities around the world, including outside the UK and the European Economic Area. Those transfers are covered by Cloudflare's standard contractual clauses. Cloudflare acts as our data processor and does not use your data for its own purposes.
How long we keep it
- Your account and your board — until you delete it. This is your work and we are not going to throw it away on a timer.
- Sign-in sessions — 90 days, then automatically removed.
- Failed sign-in records — kept briefly, purely to slow down password guessing.
- If you delete your account — everything above goes within 30 days, including backups.
Your rights
Under UK GDPR you can ask us to:
- Show you everything we hold about you
- Correct anything that is wrong
- Delete your account and everything in it
- Give you a copy in a portable format — the app's Export screen already does this for your board, instantly, without asking us
- Stop us processing your data for our legitimate interests
Email privacy@chainsout.com and we will act within 30 days. There is no charge.
If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office at ico.org.uk.
Children
Chains Out is not intended for anyone under 13, and we do not knowingly collect information from children. If you believe a child has created an account, email us and we will remove it.
Security
- Passwords are stored as PBKDF2-SHA256 hashes with a unique random salt for each account. We cannot see your password and neither could anyone who obtained our database.
- Session tokens are stored only as a hash, so a copy of our database could not be used to sign in as you.
- The whole site is served over HTTPS and nothing works over plain HTTP.
No system is perfect. If you find a security problem, please email security@chainsout.com rather than posting it publicly, and we will fix it and credit you if you would like us to.
Changes
If this policy changes in a way that matters, the date at the top changes and we will say so in the app. We will not quietly broaden what we do with your data.