Updated 2026-10-08 · UK adults aged 18+
What we keep
An account stores your email, workshop name, date of birth, country eligibility, password hash, acceptance records, balance, rounds, preferences and saved favourites. Session records protect signed-in access. Support requests retain the supplied contact details, topic and message. Password reset and verification links are stored as protected, expiring records.
Why it is used
Account and session information operates the service and keeps balances consistent. Eligibility information enforces the adult UK boundary. Security records support fraud prevention and service integrity. Contact details let us handle a request you submit. Optional analytics is controlled by your choice when configured. Marketing is disabled, and no advertising tags from another site are reused.
What stays on the device
Casual scores, completed challenges, Pocket List and your cookie preference can be stored in this browser. They are separate from server-kept account data. Clearing browser storage removes them. Preview does not save a casual score.
Access and service providers
Access is limited to service operation, account support and security needs. Configured hosting and transactional email providers process relevant information for those purposes. We do not sell personal information. If a provider processes data outside the UK, appropriate lawful safeguards must be used for that processing.
Retention and your choices
Active account information is retained while needed to provide the account. Expired tokens and sessions are removed during maintenance. Support and security records are kept only while relevant to the request or legitimate operational requirements. You can ask for access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests.
Contact and complaints
Send a privacy request to care@un-pop.com or choose Privacy request in the support form. We may verify account ownership before disclosing data. You can also raise a complaint with the UK Information Commissioner’s Office at ico.org.uk.
Infrastructure providers
Brevo delivers password recovery and support messages. ImprovMX forwards messages to our public contact address. Cloudflare provides DNS and HTTPS security. These providers may process technical or message information outside the United Kingdom.