Privacy Notice
Who is responsible
RealityFan is run by Mark Løfgren, a private individual based in Denmark. I am the data controller for everything described here, and you can reach me at contact@realityfan.app. RealityFan is not yet a registered company. When it becomes one, the registered entity and its address will be named here.
RealityFan is a small project. I don't sell data, I don't share it with advertisers, and there is no analytics or tracking product running on the site.
What I store
- Your email address and password. Handled by Supabase Auth. The password is stored hashed — I never see it.
- Your display name, shown to other people in your leagues.
- Your avatar choice — one animal and one colour, both picked from a fixed set. There is no photo upload for players; nothing of yours is uploaded as an image.
- Whether you agreed to product emails, and when you agreed.
- Your play: the leagues you belong to, when you joined or left, your draft picks, which episodes you have marked as watched, invites you created, and join requests you sent or received.
- Show requests you submit, including any note, tied to your account.
- Blocks you set against other people.
That is the whole list. There is no location tracking, no device fingerprinting, no advertising identifiers, and no third-party analytics cookies. The only cookie RealityFan sets is the one that keeps you signed in.
Why I store it, and on what legal basis
- To run your account and the game — your email, name, avatar and play history. Legal basis: performance of the contract between us (the Terms of Use).
- To send you product emails about new features and new seasons. Legal basis: your consent, which you gave by ticking the box and can withdraw at any time on your profile page. Withdrawing it changes nothing else about your account.
- To keep the service working and secure, and to handle abuse reports and blocks. Legal basis: my legitimate interest in a service that functions and is safe to use.
Emails you get regardless of consent — password resets, and invite links you asked for — are part of running the service, not marketing.
Who else processes it
Two providers, both acting on my instructions as processors:
- Supabase — the database and authentication behind RealityFan. Everything in the list above lives there.
- Vercel — hosting. Vercel processes ordinary server logs, which include IP addresses, in the course of serving the site.
Depending on their infrastructure regions, these providers may process data outside the EEA, under the transfer safeguards they offer (standard contractual clauses). Nobody else receives your data. It is not sold, rented, or shared for advertising.
What other people can see
People in a league with you see your display name, avatar, picks and score. Anyone who has ever shared a league with you counts as a friend in RealityFan and can see that you are playing a given show — the fact of it, not your scores or rosters. You can turn that visibility off in your settings, and you can block an individual. Nothing about your account is public to the open internet, and there is no public profile page.
How long it is kept
For as long as your account exists. If you ask me to delete your account, I delete it and the personal data attached to it. Note that leagues are shared history: your past picks and scores may remain visible to the people you played with as part of their own league records, with your name removed where I can do so without destroying their results.
Your rights
Under the GDPR you can ask me to give you a copy of your data, correct it, delete it, export it, restrict what I do with it, or object to processing based on legitimate interest. You can withdraw email consent whenever you want. There is no automated decision-making here that produces legal effects for you.
Email contact@realityfan.app and I will deal with it — you do not need a form or a particular wording. If you think I have handled your data badly, you can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
Children
RealityFan is not intended for children under 13, and I don't knowingly hold data on anyone younger. If you believe a child has created an account, email me and I will remove it.
Changes to this notice
If this notice changes, the updated version appears here with a new date at the top.