Privacy Policy
Last Updated October 25th, 2026
This Privacy Policy (the “Policy”) sets out how Timbers Studios Ltd (the “Company”, “we”, “our”, and “us”), uses and processes any personal information that users of our websites (collectively, our “Services”) may provide to us.
The Company is committed to ensuring that your privacy is protected. This policy sets out the basis on which any personal information we may collect from you, or that you may provide to us, will be processed in accordance with. Should we ever ask you to provide certain information by which you can be identified, you can be assured that it will only be used in accordance with this Policy.
Security
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic, and internal procedures to safeguard and secure the information we collect from you as defined in the UK Data Protection Act 2018.
Processing your Personal Information
The Company will only process information you provide us that is necessary for the operation and management of the Services.
Users’ data on our Services is processed by Cloudflare. You can review their privacy policy at https://www.cloudflare.com/privacypolicy. We may also store a copy of this data to fulfill the needs of the Services.
What we collect
When you sign in, we may collect the following:
Twitch User ID
Your Twitch User ID from Twitch. We use this to identify your account.
Twitch Display Name
Your Display Name from Twitch. We use this to show your name in the Services.
Session Cookie
We generate a Session Cookie when you sign in to keep you signed in. We only store a hash of this token on our end.
Authentication Cookie
We generate this cookie when you click “Sign in with Twitch”, it protects our sign in flow against someone pretending to be you when they’re not.
IP Address & Request Information
Your browser sends us your IP address, User Agent, and Request Metadata. We use this information to operate and secure the Services. Cloudflare also processes this request data to provide traffic and performance analytics.
Event Submissions
When you submit a question or answer a poll, we collect the information you submitted as your answer, along with your user ID and display name, the event and widget IDs, and the timestamp in which we received the submission. We use this to run and moderate the event live.
Bracket Predictions
When you submit a Pick’em entry on our public brackets, we store your picks against your Twitch User ID so you can return to or change them. We also count picks for each match and participant in a given bracket.
We request no additional Twitch Permissions when signing in. We do not receive your email address, and we do not store your Twitch profile picture, description, or other fields. That information is requested from your device to Twitch directly.
We do not use advertising or tracking cookies. We do not knowingly collect any special-category (sensitive) data.
Data Retention
We only retain your Personal Data for as long as it is necessary to fulfill the purposes for which it was collected, unless a longer retention period is required for legal, tax (e.g. for HMRC) or regulatory purposes, or for any other lawful legitimate business action.
To establish the appropriate retention period for your Personal Data, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purpose for which we process the data and whether we can fulfil those purposes through other means and applicable legal obligations.
In some instances we may anonymise Personal Data so it can no longer be associated with an identifiable person, following which we may use this information indefinitely and without further notice.
Your Rights
You have a number of legal rights in relation to the information that we hold about you, including:
- the right to make a complaint with the Information Commissioner’s Office if you believe we have infringed any of your rights;
- the right to request details of the information we hold about you;
- the right to object to processing, for example, to opt out of direct marketing if this applies;
- in some circumstances, you have the right to receive some of your information in a usable format and/or request we transmit that data to a third party where this is technically feasible;
- the right to ask that we update your information if it is inaccurate or incomplete;
- the right to ask that we erase your information in certain circumstances (please note there may be circumstances where you ask us to erase your information but we are legally entitled or obligated to retain it — where this applies, we will notify you); and
- the right to request that we restrict the processing of your information in certain circumstances. Again, there may be circumstances where you ask us to restrict the processing of your information, but we are legally entitled to refuse that request.
Third Party Disclosure
We do not sell, trade, or otherwise transfer Personally Identifiable Information to outside parties without first providing notice to our users. This does not include server hosting partners and other parties who assist us in operating our website, our business, or serving our users, where those parties have agreed to keep this information confidential. We may also release information as necessary to comply with the law, enforce our site policies, or protect ours or others’ rights, property or safety.
Children
We recognise the particular importance of protecting privacy where children are involved. We do not allow anyone under the age of 13 to use our Services. The Company does not knowingly collect Personally Identifiable Information from children under the age of 13 and if you believe we may hold such data, please contact us with the relevant information for immediate removal.
Contact Us
For any privacy-related enquiries, send an email to lee@timbers.studio we will process your request at the earliest opportunity, usually within 24 hours, and no later than 30 days after receipt. Please do not send any other communications to this email.