Your data.
Our discipline.

This Privacy Policy explains how NOFTR. GAMES LIMITED ("NOFTR", "we", "us", "our") collects, uses and processes personal data in connection with the FANATIK platform, including our mobile application, websites (including fanatik.live), quizzes, and related services (the "Platform"). We comply with the UK GDPR, the Data Protection Act 2018, and, where applicable, the EU GDPR.

1. Who we are.

NOFTR. GAMES LIMITED is the data controller. We collect and process personal data when you:

• participate in quizzes or interactive features;
• enter your email to pre-register or receive updates;
• create an account on the FANATIK app;
• interact with us via email, website or marketing; or
• otherwise use the Platform.

The Platform is intended for individuals aged 18 and over. We do not knowingly collect personal data from individuals under 18.

2. Types of data we collect.

• Contact Data — email address.
• Usage and Interaction Data — quiz responses, selections, scores, timing.
• Technical Data — IP address, device type, browser, operating system, session information, collected automatically.
• Marketing and Communications Data — your preferences and engagement.
• Aggregated Data — anonymised data that does not directly identify you.

Where blockchain or wallet functionality is later used, additional categories of personal data may apply.

3. How we collect your data.

• directly from you;
• automatically through your use of the Platform (cookies, analytics tools, and similar technologies);
• from third-party marketing platforms (Meta, TikTok, Google) where you arrive via ads, providing pseudonymised identifiers for campaign measurement.

4. How we use your data.

• to provide and operate the quiz and interactive features;
• to analyse participation, scoring and engagement to improve content and user experience;
• to send launch updates and marketing where you have consented;
• to measure marketing effectiveness;
• to maintain security and prevent fraud or abuse;
• to support future onboarding into the app (account creation and continuity).

5. Legal bases for processing.

• Performance of a contract.
• Legitimate interests — operating, improving and securing the Platform, analysing engagement, developing features, and measuring performance.
• Consent — for direct marketing and non-essential cookies or tracking, withdrawable at any time.
• Legal obligations.

6. Data flow between website and app.

If you participate in quizzes or pre-register, your data may be used to create or link your account within the FANATIK app, ensuring continuity — recognition of prior participation, engagement, or status.

7. Disclosures.

We do not sell your personal data. We may share it with:

• service providers (hosting, analytics, email delivery) acting as processors under contractual safeguards;
• professional advisers;
• regulators and law enforcement where required.

8. International transfers.

Your data may be transferred outside the UK and EEA. Where it is, we use appropriate safeguards including Standard Contractual Clauses or equivalent.

9. Retention.

We retain personal data only as long as necessary:

• quiz and interaction data for a limited period;
• pre-registration and marketing data until consent is withdrawn or no longer required;
• account data for the duration of the account and a period thereafter for legal and regulatory compliance.

10. Cookies and tracking.

Our website does not use cookies. We use first-party local and session storage only for essential functions — anti-spam cooldown and remembering your language preference. No tracking, no advertising tags, no behavioural fingerprinting.

Site analytics, where used, are cookieless. Where any non-essential cookies or tracking technologies are introduced in future, we will obtain your consent in accordance with applicable law.

11. Data security.

We use appropriate technical and organisational measures, including access controls, encryption, and secure infrastructure. No system is completely secure.

12. Your legal rights.

• access;
• rectification;
• erasure;
• restrict or object to processing;
• data portability;
• withdraw consent at any time where processing is based on consent.

You also have the right to lodge a complaint with a supervisory authority, including the UK Information Commissioner's Office (ICO).

13. Contact us.

Data Protection / Privacy Enquiries.

14. Complaints.

Please contact us first at legal@noftr.games. You may also complain to the ICO (Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; tel 0303 123 1113; https://www.ico.org.uk). EU residents may also complain to their local supervisory authority.

15. Changes.

We may update this policy. The "last updated" date reflects the most recent revision.