Privacy Policy

Version 1.0 — 15 February 2026

Who We Are

PlanPot is operated by Mynightoff Limited (Company Number: 06129966). We are the data controller for the personal data processed through this service.

Mynightoff Limited (Company Number: 06129966)

What We Collect

  • • Account information: Name, email address, and password when you register
  • • Profile information: Your chosen emoji avatar and tagline
  • • Game data: Your trades, portfolio holdings, and league memberships
  • • Technical data: Browser type, device information, and IP address (used for security purposes)

How We Use Your Data

We use your data to:

  • • Provide and maintain the PlanPot game (accounts, trading, leaderboards)
  • • Send account-related emails (sign-in notifications, password resets, league updates)
  • • Ensure security and prevent fraud

We do not sell your data. We do not send marketing emails.

Legal Basis

This policy complies with UK GDPR and the Data Protection Act 2018. The legal basis for processing:

  • • Account and game data: Contractual necessity — required to provide the service
  • • Account communications: Contractual necessity
  • • Security and fraud prevention: Legitimate interests — to protect the service and its users

What Other Users Can See

PlanPot is a social game. Other members of your leagues can see:

  • • Your name, emoji avatar, and tagline
  • • Your position and profit/loss on the leaderboard

Your email address is never shown to other users.

Third-Party Processors

We use a limited number of third-party service providers to operate PlanPot:

  • • Cloud hosting provider — stores your data on secure infrastructure within the EU/EEA
  • • Security and performance provider — protects the website from attacks and improves loading speeds. May process traffic data (IP addresses, browser info) in the UK, EU, and US under the EU-US Data Privacy Framework
  • • Transactional email provider — sends account-related emails. Processes only your email address and the message content

We do not use analytics tracking services or set analytics cookies.

Cookies

This website uses only essential cookies required for authentication and session management. We do not use analytics, advertising, or third-party tracking cookies. No cookie consent banner is required.

Data Retention

We retain your account and game data while your account is active. If you request account deletion, we remove your personal data within 30 days. Game data (trades, leaderboard positions) may be retained in anonymised form.

Your Rights (UK GDPR)

You have the right to:

  • • Access: Request a copy of your personal data
  • • Rectification: Correct inaccurate data
  • • Erasure: Request deletion of your data
  • • Portability: Receive your data in a portable format
  • • Object: Object to processing based on legitimate interests

To exercise these rights, contact us at [email protected]. We will respond within one month.

Data Security

We protect your data through encryption (in transit and at rest), secure password hashing, and regular security reviews.

Changes to This Policy

We may update this policy from time to time. The date at the top of this page shows when it was last updated.

Complaints

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or call 0303 123 1113.

Back to Home