Privacy Policy
Last updated: 16 August 2026
F2 Fantasy Game ("we", "our", "us") is part of GP Fantasy Game. This policy explains what personal data we collect when you use this website, why we collect it, how long we keep it, and the rights you have over it. We do not sell your data to third parties.
apartment Who We Are
The data controller for personal information collected on this site is GP Fantasy Game. If you have questions about how your data is handled, contact us at support@gpfantasygame.com.
database Data We Collect & Why
Account Information
When you create an account or log in, we receive and store:
- Display name — shown on leaderboards and leagues
- Email address — used to identify your account; not shown publicly
- Profile picture URL — displayed in the site header and leagues
We do not store your password. Authentication is handled by the GP Fantasy Game platform and we only receive a session token confirming your identity.
Authentication Token
We store a short-lived access token issued by the GP Fantasy Game platform to maintain your session. This token is used solely to verify your identity and is never shared with third parties.
Timezone Preference
If you choose a timezone in Settings, we store it on your account so race times display correctly. Guests who choose a timezone have it stored only in the current browser session — it is not persisted to any database.
Game Activity
To run the fantasy game, we record:
- Your fantasy team name
- The drivers and constructors you select each round
- Your league memberships and the league name you create
- Your cumulative points across the season
Technical & Log Data
Our web server automatically records standard access logs including your IP address, browser type, referring URL, and pages visited. These logs are used solely for security monitoring and are deleted after 30 days.
gavel Legal Basis for Processing
Contract performance — account data and game activity are necessary to provide the service you signed up for.
Legitimate interest — server log data is retained for security and abuse prevention.
Consent — preferences such as timezone are stored only when you actively choose them.
history How Long We Keep Your Data
| Data | Retention |
|---|---|
| Account (name, email, avatar) | Until you request deletion |
| Authentication token | Refreshed each login; cleared on logout |
| Game activity (teams, picks, leagues) | For the duration of the season; archived thereafter |
| Server access logs | 30 days |
| Session cookie | Browser session (or 2 hours idle) |
shield_person Your Rights
Under GDPR and equivalent laws, you have the right to:
Access
Request a copy of the personal data we hold about you.
Rectification
Ask us to correct inaccurate or incomplete data.
Erasure
Request deletion of your account and associated data.
Portability
Receive your data in a machine-readable format.
Objection
Object to processing where we rely on legitimate interest.
Restriction
Ask us to limit processing while a dispute is resolved.
To exercise any of these rights, email support@gpfantasygame.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
cookie Cookies
We use essential cookies and Google Analytics:
Session cookie (f2fg_site_session) — keeps you logged in during your visit. Expires when you close your browser or after 2 hours of inactivity.
CSRF token (XSRF-TOKEN) — protects form submissions against cross-site request forgery. Session-scoped.
Google Analytics (_ga, _ga_*) — measures how visitors use the site. See our Cookie Policy for details.
share Third Parties
GP Fantasy Game platform — authentication is handled by our parent platform. When you log in, your credentials are verified there, and only a confirmation token is passed back to this site. Their privacy policy applies to that process.
Google Analytics — we send anonymised usage data (pages visited, device type, approximate location) to Google so we can understand how the site is used. See Google's privacy policy.
Google Fonts — font files are loaded from Google's CDN. Google may log the request. No personal account data is shared. See Google's privacy policy.
We do not share your data with any other third parties.
Changes to This Policy
We may update this policy from time to time. When we do, the "Last updated" date at the top of this page will change. If the changes are material, we will notify you by email or via a notice on the site before they take effect.