Privacy Policy
Effective date: 30 September 2026
This policy explains what personal data Garbage Time collects, why, who helps us process it, how long we keep it and what you can do about it. It applies to the Garbage Time mobile apps and to the website at app.garbage-time.app.
Who we are
Garbage Time is a fantasy basketball game operated by VERGNAUD THOMAS, 44100 Nantes, France ("we", "us"). We are responsible for the personal data described in this policy.
Data we collect
•
Account data: your email address, your password (stored only in hashed form by our authentication provider — we never see it in plain text) and your manager name. Until you choose one, we suggest a manager name based on the part of your email address before the "@".
•
Sign-in provider data: if you sign in with Google, we receive the email address and basic profile information (such as your name and profile picture) that Google shares with us. We never receive your Google password.
•
League and game activity: the leagues you create or join, your drafts, rosters, lineups, trades, free-agent and injured-reserve moves, bonus card choices, scores, results and the league activity feed.
•
Device and notification data: an installation identifier generated by the app (not a hardware identifier), a push notification token, your device platform (iOS or Android), your notification settings and the delivery status of the notifications we send.
•
Logs and diagnostics: technical error records (what action failed, the screen or endpoint involved, an error code, a sanitized error message, the time and, if you are signed in, your user ID), and the request logs our hosting providers keep automatically (such as IP address, browser or device type and timestamps).
•
Session data on your device: the app keeps you signed in by storing a session in secure storage on mobile or in your browser's local storage on the web.
We do not collect payment information, precise location or your contacts, and the app contains no third-party advertising or analytics tools.
How we use your data
•
To create and secure your account and sign you in.
•
To run the game: leagues, drafts, lineups, scoring, standings, trades and the activity feed.
•
To send account emails, such as email confirmation and password reset.
•
To send push notifications about your leagues, according to your settings.
•
To keep the service secure, prevent abuse, and investigate and fix errors.
•
To tell you about important changes to the service or to these policies.
We do not sell your personal data and we do not use it for advertising.
What other players can see
Garbage Time is a social game. Members of a league you belong to can see your manager name, your team and roster, your lineups (according to the game's visibility rules), your results, and your moves in that league's activity feed. They cannot see your email address.
Service providers
We rely on the following providers to run Garbage Time. They process personal data on our behalf and only for the purposes of providing their service to us:
•
Supabase: authentication, database and server functions.
•
Vercel: hosting of the Garbage Time website.
•
Expo (EAS): building the mobile apps and delivering push notifications.
•
Google Firebase Cloud Messaging: delivering push notifications to Android devices (Apple Push Notification service does the same for iOS devices).
•
Google: sign-in, if you choose "Continue with Google".
•
Gandi: email services for the garbage-time.app domain, including sending account emails.
Some of these providers may process data in countries other than the one you live in.
Other disclosures
We may disclose personal data if the law requires it, to protect the rights, safety or security of our users or of the service, or as part of a transfer of the service to a new operator, in which case this policy will continue to apply to your data.
How long we keep data
•
Account data: for as long as your account exists.
•
League data: for as long as the league exists, because it is part of a history shared with the other members.
•
Device records: while your device is registered; when you sign out, the device is marked inactive, and the record is deleted when you delete your account.
•
Error records: automatically deleted after 30 days.
•
Provider logs and backups: kept for the limited periods set by each provider.
Deleting your account
You can delete your account at any time: in the app (Settings, then Delete account) or on the web at app.garbage-time.app/delete-account, after signing in. To protect your account, you may be asked to re-enter your password or sign in with Google again, and to type DELETE to confirm. Deletion is immediate and cannot be undone.
What is deleted: your email address, password and Google sign-in link are removed and every session is ended; your manager name, notifications, push notification devices and settings are deleted; your pending trade offers are cancelled; and your manager name is removed from notifications other players received about you.
What is kept, and why: in leagues that have already started, your team, roster, lineups, trades and results stay so the league, its matchups and its standings remain valid for the other players. They are shown as "Former manager" and are no longer linked to your email address or name. In leagues that have not drafted yet, your seat is released where possible; if you created such a league, its management passes to another member.
Deletion is not available while one of your leagues is in the middle of a draft; you can delete your account as soon as the draft ends. Technical error records are deleted automatically within 30 days, and provider backups expire on their own schedules.
Your choices and rights
You can change your manager name and your notification settings in the app, turn notifications off at any time in your device settings, and delete your account as described above.
Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. A dedicated contact channel is not available yet; it will be published on this page as soon as it is. You may also have the right to lodge a complaint with your local data protection authority.
Security
Data is encrypted in transit (HTTPS). Access to account and league data is restricted by database access rules so that players only reach data they are allowed to see, and privileged credentials are kept on our servers, never in the app. No system is perfectly secure, and we cannot guarantee absolute security.
Children
Garbage Time is not intended for anyone under 16. If we learn that an account belongs to someone under 16, we will close it.
Changes to this policy
We may update this policy as the service evolves. We will change the effective date above and, for significant changes, let you know in the app or by email.
Contact
Garbage Time is operated by VERGNAUD THOMAS, 44100 Nantes, France. A dedicated contact channel is not available yet; it will be published on this page as soon as it is.