Effective 20 July 2026
TopPot is a free-to-enter, skill-based fantasy sports competition platform. When we say "we", "us", or "TopPot" in this policy, we mean the operators of toppot.io. Questions? Email us at hello@toppot.io.
When you sign in via Privy (our authentication provider), we receive your email address and a unique user identifier. If you sign in with a crypto wallet, we receive your wallet address.
We ask you to confirm your date of birth before you participate in any competition. We store this to enforce our 18+ eligibility requirement. We do not use it for any other purpose.
When you link your FPL account, we store your FPL team ID and team name. We use this to fetch your FPL standings from the official FPL API to determine league results.
For Score Predictor Pots, we store the match outcome predictions you submit. These are used solely to calculate your score against official match results.
Transactions on Base mainnet are public by nature of the blockchain. We record transaction hashes and on-chain amounts in our database to show you your activity history.
We collect basic server logs including pages visited, API requests, timestamps, and IP addresses for operational and security purposes. These are not sold or shared with third parties.
We do not sell your data. We do not use it for advertising.
We use Privy for authentication and embedded wallets. Privy processes your email address and authentication credentials under their own privacy policy at privy.io/privacy.
Transactions are submitted to Base mainnet, a public blockchain. All on-chain data including wallet addresses, transaction amounts, and timestamps is permanently and publicly visible on the blockchain.
We fetch standings data from the official FPL API operated by the Premier League. Your FPL team data is subject to the Premier League's own privacy policy.
We fetch official match result data from ESPN to score Score Predictor Pot entries. No personal data is shared with ESPN. Match result data is public information.
We use a small number of essential cookies and local storage entries to run TopPot, for example to keep you signed in and to remember your cookie preference. These are always active because the site cannot function without them.
We also use optional analytics to understand how the site is used. Analytics remain switched off until you accept them in the cookie banner, and you can withdraw consent at any time. We do not use cookies for advertising and we do not sell your data.
We retain your account data for as long as your account is active or as needed to provide the service. Competition and prize records are retained for a minimum of 5 years for operational record-keeping purposes. You can request deletion of your personal data (email address, date of birth, FPL team ID) at any time — see section 8 below.
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), server-side authentication via signed JWTs, and restricted database access. No method of transmission or storage is 100% secure and you use the platform at your own risk.
If you are in the UK or EEA, you have the right to:
To exercise any of these rights, email us at hello@toppot.io and we will respond within 30 days.
We may update this policy as the platform evolves. Continued use after changes constitutes acceptance. Material changes will be noted at the top of this page with an updated effective date.