Privacy policy

Version: 0.4.

Effective date: 1 October 2026

This policy covers RH Finals, RH Stats and Fantasy: websites, accounts, gameplay, subscriptions, support and sporting records.

The Developer, identified in the legal notice, is the controller. Contact info@rhfinals.com for privacy questions and requests.

• Websites and Arena
• Newsletter
• Accounts and gameplay
• Purposes and legal bases
• Sporting records
• Children and parents
• Recipients and providers
• International transfers
• Retention
• Request account deletion
• Your choices and rights

Websites and Arena

You can browse and contact us without subscribing or creating an account. A form needs sufficient information to reply, but not a password, card number or unnecessary identity document. Required and optional fields are distinguished at collection. We do not take contact-form submission as an agreement to receive promotions.

Arena uses a random browser-session identifier and stores a derived browser key with your comparison choices, timestamps and technical selection information. These records support the requested voting feature, duplicate controls, undo and provisional comparisons. They do not contain your email or a game account, but the browser key is pseudonymous rather than proof of anonymity. Our legitimate interests are operating the requested comparison feature and preventing duplicate/abusive votes with proportionate records; the session storage follows its applicable access rules. Retention is up to 90 days from the vote. Clearing browser storage creates a new identity; it does not erase existing vote records.

Aggregate athlete rankings and the detailed vote audit are available to authorized operators; the public comparison view does not show the administrative ranking.

Audience measurement and browser choices

We use anonymous statistics to improve our platform. If optional analytics involves personal data, we ask for your permission first. Cookies and audience measurement provides the site-specific inventory and choices. Declining optional measurement does not prevent ordinary browsing or contact.

Newsletter

The newsletter contains RH Finals, Fantasy and RH Stats news, offers and promotions.

Newsletter and game-waitlist choices are separate from account terms. Subscription checkboxes start unchecked, and email confirmation proves control of the mailbox. Newsletter signup initially selects all three topics and the current page language. You can use email preferences to change the language, topics and channels through a private email link. Contact messages do not subscribe you, and a subscription does not create a game account. Joining the waitlist does not subscribe you to the newsletter; the waitlist ends when the game launches.

Withdrawal stops the relevant marketing. We keep only separately justified consent evidence and the suppression information needed to respect refusal.

Unsubscribe using the link in a promotional email or write to info@rhfinals.com. You can still receive necessary account/security messages if you have an account. Marketing is not personalized using game telemetry or advertising profiles.

The newsletter checkbox is off by default. Selecting it asks to subscribe your verified email to RH Finals, Fantasy and Stats updates in your chosen language. A separate email confirmation is required before marketing messages are sent. Leaving it off does not prevent account creation and does not change an existing subscription.

Accounts and gameplay

Information you provide and account information

We use your email, username, enabled sign-in identifiers and session information to create and protect access to your account. The shared-account service also uses your birthdate, public name and language. For email/password access it stores a password hash, not your password. Google or Apple sign-in returns the verified provider identifier and email address; we do not receive your provider password. Existing Fantasy accounts migrate with their original identifier and enabled sign-in methods, as described in the Terms. Provider accounts and notices remain separate. Linking methods requires confirmation rather than an automatic merge based on a matching email.

We record the accepted terms version, privacy notice version, submission action, language and time.

Country and minimal age/category/transition information support age-appropriate capabilities. Where required, we process guardian contact and the result/evidence of a specific authorization. The RH account does not store the underlying identity verification documents supplied through the verification provider.

We receive support messages, reports and optional diagnostic files that you submit, as well as preferences such as language, appearance, favorite sporting subjects and notification categories when you choose those features. Do not include unnecessary private information in names or support attachments.

Gameplay service and purchase information

The relevant service stores the progress, squads, leagues, memberships, invitations, trades, results and other state needed for its functions. League members and opponents can see the username, team name and gameplay information relevant to that context. They do not receive your sign-in email, credentials or guardian records. Authorized staff may inspect private game records as necessary for support or abuse review under restricted access.

Where paid products are offered, we receive order/payment references, purchase status, entitlement, restoration, refund and necessary tax information from the relevant payment/store flow. Hosted or native payment providers handle payment credentials; we do not receive raw card details through those flows. Payer and beneficiary may differ for a league-wide benefit.

Technical information and usage analytics

Requests can include the client/platform, app and OS version, build/distribution, broad device class and optional model, language, time zone and installation/session context. Network/security logs can contain IP and authentication information needed to protect the service. These signals are not proof of account identity and are handled according to their particular purpose.

Product usage events contain a named event, time, screen/service and limited allowlisted properties, with resettable installation and session identifiers. We do not associate those analytics events with your account, login-provider identity or a reverse account mapping. Identifiers remain pseudonymous; this does not make every raw event anonymous. Clients can queue permitted events offline and send them on reconnection. Applicable expiry and choices also cover those queues.

We use anonymous statistics to improve our platform. If optional analytics involves personal data, we ask for your permission first.

We do not sell personal data, build advertising profiles, collect GPS/contact-list/ photo-library data for these services, or use game telemetry to personalize commercial offers. Security checks do not include invasive device-memory or unrelated file/process inspection.

Purposes and legal bases

Optional choices are not a condition of basic gameplay. A required field is identified at collection; withholding information needed for an account, age restriction or purchase can prevent that requested function. A privacy notice or Terms checkbox is not blanket consent to the activities in this table.

Sporting records

We obtain sporting records from the corresponding official sources. These include publicly accessible competition, team, match and participant records. We also receive corrections from the person concerned or their authorized representative. Contact info@rhfinals.com to ask about the source of a particular record.

Saved records can include name, sporting identifier, nationality, recorded sporting category, team, competition and season history, match participation, statistics and birth information.

Player imagery is obtained from publicly available sources. Players or their authorized representatives may contact info@rhfinals.com at any time to request that an image be removed or updated, including replacement with an image they provide.

We use these records to provide sporting histories, statistics and game ratings in RH Stats, RH Finals and Fantasy. Published sporting information is accessible to visitors and users of these services. Ratings and Arena comparisons are calculated estimates or participant opinions. Our legal basis is our legitimate interest in providing accurate sporting information and these features, subject to the rights of the people concerned.

We retain historical sporting statistics while they remain necessary for the historical features of RH Stats and RH Finals products, and review that necessity annually.

Write to info@rhfinals.com to correct a fact, challenge an evaluation, object or request removal. Our product policy removes you from the relevant roster/presentation on objection by default. We explain any narrow retained categories and reasons.

Children and parents

The initial shared-account signup is for people aged 14 or older and offers email/password and available Google or Apple sign-in. Its account terms and account privacy notice describe registration, birthdate checks and the migration of existing Fantasy accounts. Younger-account and guardian flows described here are planned product safeguards; they do not open under-14 registration in the initial shared-account service.

Age country and access

We request country and minimal age information to apply the relevant restrictions. Consent ages, contractual capacity and platform permissions can differ. In Spain, where an under-14 child cannot provide the required data-processing consent, their representative must authorize that specific use. Other supported countries use their applicable rules. US registration is unavailable below 13.

The free beta includes supported minors and applies these safeguards from the start. Being able to play does not mean that a child can authorize every optional use or make every purchase. Parents should review the relevant agreement and available device/store family controls with the child.

Communication and safe defaults

Under-14 accounts cannot use text or voice chat, even after parental authorization. Teen accounts start with chat off; activation also depends on country and Epic/platform privileges. Mixed-age leagues can share gameplay without making chat available to children. Names must not reveal private contact details or impersonate a real athlete or another player.

Marketing starts off and has its own authorization. Paid random rewards are not part of the free beta or the launch features described here. Support and reporting work through info@rhfinals.com without a Discord or other social account.

Where enabled, Epic services handle text/voice and reporting. We do not independently archive general conversations or voice recordings. A report may involve relevant communication content handled through the provider; other participants can see/hear what you choose to communicate. Review the notice and restrictions shown for that feature.

Marketing begins off. Withdrawing it does not remove access to the core game or stop necessary security/service messages. OS notification permission is separate from account categories; choose which available optional channels to receive. Guardian contact supplied for authorization is not automatically subscribed to promotions.

Guardian verification and permission

Where required, the selected Epic Kids Web Services flow verifies adult status and the necessary authorization. Before a choice, the flow identifies the exact feature, required information, purpose and relevant privacy notice. Adult verification alone is not a grant of consent or an instruction to enable chat.

The RH account retains the necessary result/scoped authorization evidence, not the verification documents supplied to the provider. The provider explains its verification process and information handling. A representative's email is used for that process and necessary follow-up, not automatically for promotions.

Optional newsletter/promotions are available to supported ages only with the appropriate subscriber choice and specific guardian authorization when required. The child can play without a newsletter subscription. One permission does not authorize all future features, and receiving a privacy notice is not consenting.

Rights withdrawal and growing older

Contact info@rhfinals.com to ask about a child's account, exercise applicable rights or withdraw authorization. We verify authority proportionately and protect the child's rights and other people's information. Withdrawal stops the affected optional use; withdrawing permission necessary for a feature can disable that feature. It does not erase every separately justified record automatically.

As the applicable age threshold is reached, restrictions are reviewed and the eligible person is informed of available choices. Optional uses still require their applicable choice; a birthday does not silently grant every consent or leave a representative with unrestricted access forever.

A short explanation for younger players

Choose a nickname rather than your full name. Do not put your school, address, phone number or private contact details in a name or message. Keep your sign-in email and links private, and ask a trusted adult if you are unsure.

We save your progress, teams and leagues so the game can work. The people in your league or match can see your nickname, team and relevant gameplay, but not your private sign-in email or parental records. We use limited security information to protect the service. Optional usage measurement does not link events to your account; it still has privacy choices explained in the main notice.

Some features need a representative's permission and some stay unavailable even with permission. You do not have to receive promotions or send diagnostic files to play. You or your representative can contact us to ask about your information, correct it or request deletion. If another player worries you, tell a trusted adult and use our support/report route. For immediate danger, use local emergency help.

Recipients and providers

Contact messages, including your reply address, optional name, subject, message and language, are delivered to the platform administrator to answer your enquiry. Hosting, notification and message-delivery providers process the information needed for that delivery. We manage newsletter and waitlist subscriptions, confirmation, preferences and delivery.

International transfers

Some service providers may process personal data outside the European Economic Area, including in the United States. We allow these transfers only where an applicable EU adequacy decision or appropriate safeguards, such as European Commission standard contractual clauses, cover the transfer. You can request information about these safeguards and a copy by emailing info@rhfinals.com.

Retention

Technical logs are kept for up to 14 days from the event and audience analytics for up to 90 days from the event. Contact enquiries and their delivery copies, including administrator notifications, are kept for up to 30 days after the case closes. We keep an active newsletter subscription until you unsubscribe or withdraw the relevant authorization. We then stop marketing; only separately justified suppression or consent evidence remains. Unconfirmed subscriptions are removed eight days after the last signup request. Confirmation and preference links expire after 24 hours; expired tokens and queued or failed deliveries are removed within seven further days. Successful delivery removes the token-bearing queued payload.

We keep a minimal record showing what permission was given and when, while that permission is active. After withdrawal, we keep it only where needed to meet a legal duty or handle a legal claim, with restricted access, and delete it when the applicable retention or claim period ends.

Account/game records are kept while needed to provide the account. After four years without account activity, we review the account for deletion. We send an email giving at least 30 days to return or contact us before ordinary deletion. Paid access is protected from automatic forfeiture; any records needed to preserve that access remain subject to necessity review. A specific legal duty or justified claim can require separately restricted records.

Raw usage events and ordinary security records are kept for up to 90 days from the event. Support messages and diagnostic attachments are kept for up to 30 days after the case closes.

Sign-in links expire after 15 minutes; provider handoffs expire after 10 minutes. Sessions stay valid until revoked, signed out or invalidated by account restrictions or password reset.

Minimal evidence of the accepted terms and privacy notice is retained where needed to show the applicable account agreement or meet a legal duty or justified claim, with restricted access and deletion when its justified period ends.

Backups expire within 30 days from creation. If restored, later deletions/suppressions are reapplied before returning those records to ordinary use.

Request account deletion

Delete my RH Finals account

Start a request

Where the account client provides it, use Settings → Account → Delete account. You can also email info@rhfinals.com with the subject “RH Finals account deletion”. The email route works without installing the app or joining a social community. Use your account email where possible and identify the relevant RH service.

After you confirm deletion with a recently verified sign-in, your account is deleted and you are signed out immediately. Cleanup in connected services is retried internally if needed. Limited legally justified records and expiring backups are handled as explained below. Requests made through support are verified proportionately and follow the privacy-rights response deadline measured from receipt; verification does not restart that deadline.

Do not send a password, card details, authentication token or an unnecessary ID document. If additional evidence is necessary, we explain a secure method.

What deletion affects

Deletion ends access to the RH account and addresses linked login identities, sessions, profile, push associations and account data no longer needed. We coordinate the affected RH services and relevant processors. League/game history is anonymized where that can actually prevent identification; otherwise any remaining identifiable records need a justified purpose and are explained.

Product analytics is not linked to accounts. Resettable installation/session identifiers may therefore require the relevant device/context to locate existing events. The analytics controls address identifiers and pending local events. We explain what can be located from the device/context information available.

Records that may remain

Limited purchase/accounting, legal claims, consent evidence or applicable blocked records can remain under restricted access for their justified period. They are not left in active use for unrelated purposes. We explain retained categories and reasons when confirming the outcome.

Other accounts purchases and help

This request concerns RH Finals, not your Google, Apple, Steam or Epic account. Store subscriptions/refunds are separate; follow the applicable cancellation process and contact us about paid access before deleting. Athlete records are not game accounts: use athlete privacy to correct/remove sporting information. Privacy rights explains response deadlines and complaint routes if you need further help.

Your choices and rights

Use Settings → Privacy → Usage analytics, or contact info@rhfinals.com, to stop applicable non-essential product analytics. Resettable installation/session identifiers and pending local events are covered by the available reset/objection controls. Necessary security and game-state processing remains separate. Where consent is required, refusal or withdrawal stops the relevant optional collection.

Send a request

Email info@rhfinals.com and identify the service, information and request. You can request access, correction, erasure, restriction, applicable portability and objection. Rights depend on the processing and legal conditions; we explain any limitation or refusal rather than treating every request as unconditional.

We verify identity/representative authority proportionately, protect other people's information and use secure delivery where needed. Do not include passwords, session tokens or unnecessary documents. A guardian can raise a child's request, with attention to the child's own rights and interests.

Response timing and scope

We act without undue delay and normally respond within one month. If lawful complexity/volume grounds require an extension, we tell you within the first month, explain the reason and may extend by up to two additional months. We explain any refusal and available complaint route.

Access and portability have different scopes. A request does not give access to another player's private league data or remove separately required claims/accounting records. Account deletion explains removal and retained categories; athlete privacy explains sporting corrections, evaluation challenges and the default removal policy.

Consent and objections

Withdraw promotional consent through an email's unsubscribe link, the applicable account choices or our contact. Direct-marketing objections stop that marketing. Withdrawal does not affect earlier lawful processing or necessary service/security messages. A guardian can withdraw the relevant scoped authorization through support.

For analytics choices, use Settings → Privacy → Usage analytics in account clients, the Cookie settings link on websites, or contact info@rhfinals.com. Product usage events are not account-associated, so the relevant device/context may be needed for pseudonymous events; do not send authentication secrets to identify them. Other legitimate-interest objections are reviewed under their applicable rules.

Complaints

You may complain to the Spanish Data Protection Agency or your competent supervisory authority, including where you habitually reside or work where applicable. You do not have to contact us first. We welcome a request for clarification through info@rhfinals.com, but it is not a condition of exercising that complaint right.

We do not make solely automated final decisions with legal or similarly significant effects. Serious sanctions have meaningful human review. Sporting game estimates are explained separately and can be challenged. We notify material changes before new processing begins and seek fresh consent where necessary.