Privacy Policy

Last updated: May 29, 2026

TopFour is operated by playtopfour.com, who is the data controller for this service. For privacy requests, contact privacy@playtopfour.com.

Personal data we use

• Account data: name, email address, password hash, email verification status, and account timestamps.
• Security data: session records, IP address, user agent, password reset tokens, remember-me tokens, and two-factor authentication data if enabled.
• Game data: roster picks, roster price and score, group ownership, group membership, invite links, access requests, and leaderboard results.
• Cookie and preference data: cookie consent choices and appearance preference if optional cookies are accepted.

Purposes and legal bases

• Account and game features are processed to provide TopFour. Without this data, you cannot use the account, roster, group, and leaderboard features.
• Security, logs, and admin access are processed for the legitimate interest of protecting and maintaining the service.
• Optional appearance storage is processed with your consent. You can change cookie choices from the Cookie Policy.
• Some data may be processed where required by law.

Who receives data

Group members can see the names, email addresses, scores, and roster details shown on group leaderboards. Group owners can see access requests for their groups. Site administrators can see account, group, and game data needed to operate the service. TopFour is hosted by Hetzner, which processes data as our hosting provider.

We do not sell personal data. We do not use advertising cookies, tracking pixels, or analytics cookies.

Cookies

We use essential cookies for sessions, sign-in, CSRF protection, and cookie consent. Optional appearance storage is used only when you allow optional cookies. See the Cookie Policy for details.

Retention

We keep account and game data while your account exists. You can delete your account from profile settings. Session records expire according to the session lifetime, password reset tokens are temporary, cookie consent and appearance preferences last up to one year, and logs/backups are kept only as long as needed for operations and security.

Transfers

We do not intentionally transfer personal data outside the EU/EEA. If that changes, we will use the safeguards required by data protection law.

Your rights

You may have the right to access, correct, delete, export, restrict, or object to processing of your personal data. Contact privacy@playtopfour.com to exercise these rights.

If you are in the EU/EEA, you can complain to your local data protection authority.

Automated decisions

TopFour does not make legal or similarly significant decisions about you using automated processing.