Privacy policy

Last updated 13 November 2026

Met Before? is a daily Premier League quiz. This page explains what we collect, why, who helps us run the game, and your rights. The short version: you can play the daily without giving us anything; if you log in we keep your email and your game progress; if you buy Unlimited, Stripe handles the payment; and our analytics use no cookies and don’t identify you.

Who we are

Met Before? is run by Max Bishop, the “controller” of your personal data under UK data protection law (UK GDPR and the Data Protection Act 2018). You can reach us at the email address under Contact.

Playing without an account

You can play the daily puzzle without an account. Your progress is kept in your own browser (local storage, under names beginning metbefore) so you can come back to a half-finished day. It stays on your device and isn’t sent to us unless you log in. You can clear it at any time through your browser’s site data settings.

Email login (Supabase)

If you choose to log in, you give us your email address and we send you a one-time login link. There are no passwords. Accounts are handled by Supabase, which stores your email address, when your account was created and when you last logged in. Supabase may also keep short-lived security logs (such as IP address and time) to protect the login system. Once you’re logged in, your browser keeps a login token in local storage (metbefore-auth) so you stay logged in; logging out removes it.

We use your email only to log you in, to link your purchase to your account, and to reply if you contact us. We don’t send marketing emails and never sell or share your email.

Saved progress

When you’re logged in we save your game progress to your account, so it follows you across devices:

• each day’s Daily result (where you got to, your answers and whether you finished);
• your recent Unlimited runs (which fixtures you were given), so you don’t get the same ones again;
• whether you’ve unlocked Unlimited.

The first time you log in on a device, progress already saved in that browser is uploaded to your account so nothing is lost. This is stored in Supabase alongside your account.

Payments (Stripe)

Unlimited is a one-off £3 unlock. Payments are taken by Stripe on Stripe’s own secure checkout page. We never see or store your card details. Stripe tells us the payment’s status, its Stripe reference and the email used, and we record that your account is unlocked (and remove the unlock if the payment is refunded). Stripe processes your payment details as its own controller for payments and fraud prevention, and its checkout page may use its own cookies for that. See Stripe’s privacy policy.

Analytics (cookie-free)

We want to know how many people play and how the game is used, without tracking anyone:

• Cloudflare Web Analytics counts page views. It doesn’t use cookies or local storage, doesn’t fingerprint your device and doesn’t follow you across sites. It sees things like the page visited, the referring site, browser type and country.
• Game stats: when you kick off, clear a level, finish a run, copy your result, open the Unlimited screen or tap to buy, the page sends just the name of that event (with the level number, and Daily or Unlimited). We only store a running total per day. No account, email, IP address, device ID or anything else that identifies you is stored with it.

Because none of this uses cookies or identifies you, there’s no cookie banner. The only things stored on your device are the game progress and login token described above, which are needed for the game to work.

Other services

• Cloudflare hosts the site and its server code. Like any web host, it processes your IP address and request details to deliver pages and protect against abuse.
• Google Fonts supplies the typefaces, so your browser fetches them from Google, which sees your IP address. See Google’s privacy policy.

Some of these providers are based in, or may process data in, the United States or elsewhere outside the UK. Where they do, they rely on recognised safeguards such as the UK–US data bridge or standard contractual clauses.

Why we’re allowed to use your data

• To provide what you asked for (contract): logging you in, saving your progress, and giving you Unlimited after you pay.
• Legal obligations: keeping payment records for tax and accounting.
• Legitimate interests: keeping the site secure and understanding, in anonymous totals, how the game is played so we can improve it.

How long we keep it

• Your account and saved progress: until you ask us to delete your account.
• Payment records: kept by Stripe, and by us as needed for tax and accounting (normally six years).
• Anonymous daily event totals and page-view statistics: kept indefinitely, as they don’t relate to anyone.

Your rights

You can ask to see the personal data we hold about you, to correct it, to have it deleted, to receive a copy, or to object to or restrict how we use it. To delete your account and saved progress, email us from the address you log in with. If you’re unhappy with how we’ve handled your data, please contact us first; you can also complain to the Information Commissioner’s Office.

Children

Met Before? isn’t aimed at children under 13, and we don’t knowingly let under-13s create accounts. Anyone can play the daily without an account.

Changes

If we change this policy we’ll update the date at the top of this page. If a change is significant, we’ll say so on the site.

Contact