The Fantasy games
Last updated 29 September 2026
This policy is issued by Lyve Wyre Group Limited (company number 13966596), registered in England and Wales at 17 Ringshall, Berkhamsted, Hertfordshire, HP4 1ND.
We are the data controller for the personal data described below. Contact us about anything in this policy at info@cultivahq.com.
This is a single joint policy covering all fantasy game products. It applies equally to every title listed below, including any TestFlight or beta version, and to their websites.
This list is added to as new titles launch. A title is covered by this policy from the day it is released, whether or not this list has caught up — but we will keep it current, and we will change the date at the top when we do.
Fautor and Valata Index have their own policies, because they do different things with different data. You can read Fautor’s at getfautor.app/privacy.
You use one account across all of our games, so the account details in section 3 are the same wherever you play, and your Solidus balance travels with you.
| What | Why we need it |
|---|---|
| Email address | To create and secure your account, sign you in, and reset your password |
| Password | To sign you in. Stored only as a salted hash — we never see or store your actual password |
| Manager name and avatar | To identify you to other players on leaderboards and in leagues. Choose a name you are happy for other players to see |
| Full name | To run your account across all our apps and to respond to requests about your data. Never shown to other players |
| Date of birth | To confirm you are 13 or over, which is a condition of using the games, to apply the protections in section 7, and to group players by age band in our aggregated analysis |
| Country and state / county | Self-declared, not taken from your device. To serve the right leagues, markets and legal terms, and to group players by region in our aggregated analysis |
| Gender (optional) | Only if you choose to tell us. Used solely in aggregated analysis. You can leave it blank or choose “prefer not to say” |
| What | Why we need it |
|---|---|
| Your saved game — budget, week, season, achievements | So you can stop and pick up where you left off, on any device |
| The acts, titles or teams you hold, what you paid, and when | To run the market: holdings are limited, so the game has to know who holds what |
| Your trades, offers and poaching activity | To settle trades between players and to show your history |
| Your league entries, lineups and standings | To run leagues and rank players against each other |
| Your Solidus balance and transaction history | To carry your in-game currency across all our games |
Solidus is the in-game currency shared across our games. You earn it by playing, and you spend it inside the games on scouting and intel. We keep your balance and a record of how you earned and spent it, so it works consistently everywhere you play.
Solidus can only ever be spent inside our games. It has no cash value, it cannot be bought, and it cannot be exchanged or redeemed for money, transferred to another player, or taken out of the games in any form.
We do not take payments. If that ever changes, we will update this policy and tell you before it does.
Our servers record ordinary technical information when your app connects — IP address, device type, operating system version, app version and timestamps — so we can deliver the service, diagnose faults, and detect abuse such as cheating or automated account creation.
We do not collect or process: your contacts, photos, calendar, microphone or camera; any advertising identifier; or any special-category data. We do not read your device’s location — the country and state or county on your profile are the ones you type in yourself. We do not track you across other apps or websites, and we do not sell personal data to anyone.
| What we do | Lawful basis under UK GDPR |
|---|---|
| Hold your account, save, holdings, trades and league entries | Performance of a contract — running the game you signed up to play |
| Hold your full name, date of birth and self-declared country / region | Performance of a contract — running your account, confirming you are old enough, serving the right markets |
| Show your manager name and results to other players in your leagues | Performance of a contract — a league without other players’ results is not a league |
| Hold your Solidus balance and its history | Performance of a contract |
| Technical data, and detecting cheating or abuse | Legitimate interests — keeping the games working and fair |
| Hold your gender, if you give it | Consent — it is optional, and you can remove it |
| Include you in aggregated trend analysis, if you are 18 or over | Legitimate interests — understanding our players as a group. You can switch this off at any time (section 6) |
| Include you in aggregated trend analysis, if you are under 18 | Consent — it is off by default and stays off unless you turn it on yourself (sections 6 and 7) |
| Send you the weekly report email | Legitimate interests — keeping you up to date with a game you play. Every email has an unsubscribe link |
| Keep records to answer data requests and resolve disputes | Legal obligation; legitimate interests |
Values in the games are calculated from publicly available real-world activity about artists, titles and companies — not from data about you or other players. Nothing you do in the game changes anyone’s real-world value, and your gameplay is not used to profile you commercially.
A switch in your profile, “Include me in market-trend analysis”, controls whether your account is counted in our aggregate figures — how players of a given age band, gender, country or region behave in the market as a whole.
If you are 18 or over, it is on by default. If you are under 18, it is off by default and stays off unless you choose to turn it on. We will not turn it on for you when you turn 18: if you want to be included from then on, you have to say so yourself.
This analysis is aggregated only. Any group of fewer than 20 people is suppressed before anyone can see it, including our own staff dashboard. No individual is identified, and no individual’s activity is ever shown to a third party.
Switching it off excludes you from every aggregate, immediately, with no effect on how you play.
Our games are not for children under 13. We check date of birth at sign-up and reject under-13 accounts at the database, not just the form. If you believe a child under 13 has an account, contact us and we will delete it.
Players aged 13 to 17 are welcome, and we treat their accounts as private by default, following the Information Commissioner’s Age Appropriate Design Code:
If you are under 18, please think before you choose a manager name — pick something that is not your real full name, and do not put personal details in it.
Your manager name and avatar, your lineups once a matchweek has locked, and your position on leaderboards are visible to other players in your leagues. Your email address, real name, age and location are never shown to other players.
We send a weekly report every Monday covering the games you are active in, to the email address on your account. Every one carries an unsubscribe link, and you can turn these off in your profile at any time without affecting your ability to play.
We also email you when you earn a reward, and for essential account matters such as password resets — the last of these cannot be switched off while you hold an account.
| Processor | What they handle | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage and server functions — everything in your account | EU |
| Cloudflare | DNS and traffic in front of our services | Global network |
| Resend | Sending your weekly report and reward emails, including your email address | EU / US |
| Expo | Delivering app updates to your device | US |
| Apple | Distributing the apps through the App Store and TestFlight, and handling any purchase | Global |
Each acts as our processor under contract and may only use your data to provide their service to us. We do not sell personal data and we do not share it with advertisers or data brokers. We will disclose data if we are legally required to, or where it is necessary to protect our rights, our players or the public.
Not a processor of your data: we use Anthropic’s Claude to read public news headlines about the acts and titles in the market and turn them into events that move prices. It never receives anything about you or how you play.
Some of our providers store data outside the UK. Where that happens the transfer is made under the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum, which is the safeguard UK GDPR Article 46 requires, so your information keeps an equivalent level of protection.
We keep your personal data for twelve (12) months after you stop playing, and then we delete it in full.
The twelve months runs from your last activity in any of our fantasy game products. If you come back within that time, nothing is deleted and the clock starts again from your return.
When the twelve months expires we delete everything this policy describes: your account and profile, your saved games, lineups and league entries, your holdings, trades and offers, your Solidus balance and its transaction history, your season history, and the record of the emails we sent you. This is a full deletion, not an archive.
One exception, and it is a limited one. Where you competed in a league, an anonymised record of that league’s final table — the finishing positions, with no name, handle or account attached to yours — is kept for a further six months, so the result stays intact for the other players. After those six months it is deleted too.
If you ask us to delete sooner, we will. You can delete your account from within any of the games, or write to us, and we will remove your personal records within 30 days rather than waiting for the twelve months to run. Deletion is irreversible: your progress cannot be recovered afterwards.
We may also delete your account sooner if you breach our Terms of Service — for example by repeatedly choosing an offensive manager name. We never do this without warning you: the account is suspended, we tell you why, and it is deleted 14 days later, so you have time to challenge the decision.
Warnings. If we warn you about your conduct we keep a record of it — what the warning was for and when we issued it — for 12 months, so we can tell a first occasion from a second. After 12 months the record expires and is deleted.
We may retain a minimal record where we are legally required to, and anonymous aggregated statistics that cannot identify you.
If you enter your email address into a sign-up form on one of our websites before launch, we store that address, which product you signed up from, and the date, so that we can email you when the game opens. Our lawful basis is your consent. You can withdraw it at any time by emailing us or using the unsubscribe link in any email. We keep those addresses until you unsubscribe or until 12 months after launch, whichever comes first.
Data is encrypted in transit. Passwords are stored as salted hashes. Access to our database is restricted by row-level security so that, in normal operation, an account can only reach its own records. No system is perfectly secure, but if a breach affects your rights we will notify you and the Information Commissioner’s Office as the law requires.
Under UK GDPR you can ask us to: give you a copy of your personal data; correct it; delete it; restrict or object to how we use it; or send it to another provider. You can withdraw consent where we rely on it, and complain to the Information Commissioner’s Office.
Ask us at info@cultivahq.com. We will respond within one month. You can also delete your account from within any of the games, which removes your personal records without needing to ask.
We will update this page when what we do changes, and change the date at the top. Where a change materially affects how we use your personal data, we will tell you in the app or by email before it takes effect.
Lyve Wyre Group Limited
17 Ringshall
Berkhamsted
Hertfordshire HP4 1ND
England
info@cultivahq.com