Last updated 2026-11-04

Who we are

Early Rotate is an independent fan site for the Call of Duty League, run by Early Rotate in the United Kingdom. We are the controller of the personal data described here. Contact us about privacy through the contact form.

What we collect

• Following scores, without an account: nothing that identifies you. We do not use tracking cookies.
• Your account: a username, your password (stored only as a scrypt hash, never readable), your favourite team, your picks, Pick 3 and prop choices, leagues you create or join, badges and fantasy squads. If you add an email address: the address and whether you confirmed it.
• Match alerts: if you turn on notifications, your browser gives us a push address and keys for that device, plus the teams and alert types you chose.
• Messages you send us: the name, email, company and message from the contact or advertising forms.
• Paid plans: if you buy an API plan, overlay or membership, the payment is handled by Stripe. We receive your email, plan and payment status, never your card details.
• Security: your IP address is used in memory to rate-limit requests and block attacks. We do not keep it in our database. Our hosting and network providers keep short-lived access logs.
• Analytics: we use Umami, which counts page views without cookies and without storing IP addresses or building profiles.

Cookies and device storage

When you sign in we set one cookie that keeps you signed in. It is strictly necessary, so it needs no consent. Your browser also stores a few preferences on your device only (light or dark mode, dismissed banners, a note of polls you voted in). These never leave your device.

Video players from YouTube, Twitch and X load only when you press play, and those services' own policies then apply. If advertising from an ad network is switched on, we ask for your consent before any advertising cookie is set, and you can change your mind at any time from the footer.

Why we use it (lawful basis)

• To run your account, picks, leagues and leaderboards: performing our agreement with you.
• Match alerts and emails: your consent, which you can withdraw at any time in Account or from any email.
• Security, abuse prevention and anonymous analytics: our legitimate interest in keeping the site safe and working.
• Prize administration and payment records: our agreement with you and our legal obligations.

Who helps us run the site

These providers process data on our behalf, only to provide their service:

• Render: hosting (United States)
• Cloudflare: network delivery and attack protection
• Supabase: encrypted database backups
• Umami: cookie-free analytics
• Our email provider: confirmation, password reset and weekly recap emails, only if you add an email
• Stripe: payments, only if you buy a plan
• Discord: only if you connect a Discord server to receive updates

Where data leaves the UK or EEA, it is protected by an adequacy decision (such as the UK-US data bridge) or standard contractual clauses. We never sell personal data.

How long we keep it

• Account data: until you delete your account (Account → Delete account). It is removed from the live site at once and from backups within 30 days.
• Push alert subscriptions: until you turn alerts off or your browser stops accepting them.
• Messages to us: up to 24 months.
• Payment records: as long as tax law requires (usually 6 years in the UK).

Your rights

You can ask to see, correct, export or delete your data, object to or restrict how we use it, and withdraw consent. Most of this you can do yourself in Account: Download my data gives you a copy of everything linked to your account, and Delete account erases it. For anything else contact us through the contact form; we reply within one month.

You can also complain to the Information Commissioner's Office (ico.org.uk) or the data protection authority where you live.

Children

You must be 13 or older to create an account. Prizes are only open to people aged 18 or over. If you believe a child under 13 has made an account, contact us and we will delete it.

Changes

If we change this policy we update the date above, and tell signed-in users about significant changes on the site.