Privacy Policy

Last updated 27 October 2026. We update this page as TactIQ grows. Questions? [email protected].

This explains what personal information TactIQ keeps about you, why, who can see it, and what you can do about it. We have tried to keep it short and plain. We do not sell your information, and we do not show advertising.

1. Who is responsible

Oluseye Obitola and Jimoh Lawal runs TactIQ and decides how your information is used. Questions, requests and complaints about privacy: [email protected].

2. What we keep

When you sign up

• Your email address, first name and last name.
• Your password, kept only in scrambled form (a one-way hash), so nobody at TactIQ can read it.
• Your username and avatar, and the date you joined.
• If you choose Continue with Google: the email address, name and Google account ID that Google gives us. We do not receive your Google password. Google is a separate service, and its own privacy policy applies to what it does. If an account with the same email address already exists, the two are linked.
• Whether you have confirmed your email address, and the scrambled one-time code we sent you to confirm it.

As you play

• Your results, scores, season points, streaks and divisions, for every game you play.
• Which rooms you belong to, whether you own them, and the messages you write in them.
• Races and challenges you take part in, who you played, and how they ended.
• Your season record: the division you are in, your season points and rank, your games played, and whether you finished a season as champion.
• In room chat: the messages you quote and the people you @mention.
• Your settings, such as which notifications you want and whether to show a dot when you are online.

To keep you signed in and safe

• If you turn on notifications: an address your browser or phone gives us for that device, with the keys needed to send to it, and which kinds of notification you chose. You can turn them off in your account at any time, and the address is removed.
• A scrambled form of the network address you sign up and sign in from, which we use only to spot many accounts made from one place. We cannot turn it back into the address.
• A sign-in record for each device: a scrambled token, the date, when it expires, and the name of your browser (its “user agent”).
• If you forget your password: a scrambled one-time code and when you asked for it.
• Failed sign-in attempts on an account, and a short temporary lock after too many, so nobody can guess your password.
• When you were last active on TactIQ while signed in. We use it to count how many people are using TactIQ right now, and to show other players a green “online” dot next to your name while you are active (and for a couple of minutes after). You can switch the dot off in your account, and then nobody sees it.
• A record of what we need to spot cheating or points manipulation: for example, unusual patterns in results, or many accounts that appear to come from the same place. The people who run TactIQ can see these records and the actions they take on an account (for example removing points or suspending it), which are kept in an administration log.
• Our servers write ordinary logs of requests (such as the time, the page asked for, and your internet address). We use them to keep TactIQ running and to deal with abuse, and we keep them for a limited time only.

3. Why we use it

• To run TactIQ for you (our contract with you): your account, your games, your scores, your rooms and messages, and emails about your password.
• To keep TactIQ safe and fair (our legitimate interest): stopping cheating, points manipulation and abuse, protecting accounts, fixing faults. Where this leads to removing points or suspending an account, a person at TactIQ makes that decision, not a computer on its own.
• To send you notifications you asked for (your consent): see section 6, “Notifications”. You can withdraw consent at any time.
• To follow the law where it requires us to keep or give out information.

We do not use your information for advertising, and we do not use it to make decisions about you by computer that have legal or similar effects.

4. Who can see it

• Other players can see your username and avatar, when you joined, your game statistics, your division, season points and rank, and past champions, if they are signed in. They can also see whether you are online, unless you have switched that off. People in a room you belong to can also see your messages there, and the results of games played in it. They cannot see your email address or your real name.
• Us. Only what is needed to run, secure and support TactIQ.
• Companies that help us run TactIQ, such as the ones that host it and send its emails, and only to do that job. They are not allowed to use it for anything else.
• Authorities, if the law requires it.

The companies that help us include our hosting provider and SendByte, which delivers our emails (to confirm your address and reset your password). Google provides sign-in if you choose it, and the push services described below deliver notifications.

5. Cookies and similar storage

TactIQ uses one cookie, called tq_session, to keep you signed in. It is needed for the site to work, so it does not ask for consent. It is only sent to TactIQ’s own address, cannot be read by scripts in the page, and is not sent along with requests from other websites. It is kept for up to 30 days if you tick “remember me”, and is removed when you close the browser if you do not. Your browser’s temporary storage is also used for short things, like remembering a room invite while you sign in. There are no advertising or tracking cookies.

To count visits, your browser keeps a random number of its own making in local storage (called tq_vid). When you open TactIQ it sends that number so the visit can be counted. We combine it with the date into a code that cannot be traced back to you, or to the same browser on another day, and we keep only that code, the date and whether you were signed in, for about 13 months. We do not count visits from browsers that send the “Do Not Track” or “Global Privacy Control” signal. There is no other analytics.

6. Notifications

If you turn on notifications, your browser or phone gives us an address for that device. We send messages (for example “someone challenged you”, “a season is about to end” or “you were mentioned in a room”) through the push service run by your browser’s maker (Google, Apple or Mozilla). That service passes the message to your device and can see that it was sent and its contents. Season news is limited to two a day. You can choose which kinds you want, or turn them all off, in your account; the address is then removed. Notifications are never used for advertising.

If you add TactIQ to your home screen or install it, your browser also keeps a small background script and copies of some of TactIQ’s files on your device so it opens faster and can receive notifications. Clearing the site’s data in your browser removes them.

7. Other websites your browser contacts

To show the games, your browser loads some things directly from other sites. Those sites can see your internet address and browser details, as with any website:

• Wikipedia and Wikimedia Commons for player photos (freely licensed, with credit).
• football-logos.cc for club badges.

Their own privacy policies apply to what they do. Our fonts are served from TactIQ itself, not from a font company.

8. How long we keep it

• Your account information and results: until you delete your account.
• Notification addresses: until you turn notifications off, or your browser stops accepting them.
• Sign-in records: until they expire or you sign out. Changing your password signs out your other devices.
• Failed sign-in counts and temporary locks: they clear on their own within a short time.
• The administration log of actions on accounts, and records used to spot cheating: for up to two years, so we can deal with appeals and repeat abuse. After you delete your account, the log may keep an internal account number (not your name or email) for that time.
• Password-reset codes: they stop working after a few minutes.
• When you delete your account, we delete your account, your results and points, your sign-in records, your seat in rooms, and the chat messages you wrote. Rooms you own are handed to another member, or deleted. A summary line of a game’s final result in someone else’s room may keep your username there until that room is deleted.
• Server logs: for a limited time, then deleted.
• Backups: copies made for safety are replaced on a regular cycle, so deleted information leaves them over time.

9. Your choices and rights

Depending on where you live, you can ask us to:

• tell you what we hold about you, and give you a copy;
• correct information that is wrong;
• delete your information. You can do this yourself: Account → Delete account;
• limit how we use it, or stop using it where we rely on legitimate interest;
• give you your information in a form you can reuse;
• take back a consent you gave (for example for notifications). This does not affect what was done before.

Deleting your account and changing notification and online-dot settings you can do yourself in TactIQ. For a copy of your information, or for anything else here, write to us: there is no download button yet.

Write to [email protected] and we will answer within one month. If you think we have handled your information wrongly, you can complain to the data protection authority in your country. We would like the chance to put it right first.

10. Keeping it safe

Passwords are scrambled with a slow one-way method. Sign-in tokens are stored scrambled. The connection to TactIQ is encrypted, and the sign-in cookie cannot be read by scripts in the page. No system is perfectly secure; if there is a breach that puts you at risk, we will tell you and the authorities as the law requires.

11. Children

TactIQ is for people aged 13 and over. If you think a younger child has made an account, write to [email protected] and we will delete it.

12. Where information is kept

TactIQ’s information is kept on servers run by our hosting provider. Our email provider, Google (for sign-in) and the push services above may be outside your country. Where information is stored or accessed outside your country, we use the safeguards the law asks for. We follow the data-protection law that applies to you, including, where it applies, Nigeria’s Data Protection Act, the UK and EU GDPR.

13. Changes

If we change this policy in a way that matters, we will tell you in TactIQ or by email. The date at the top shows when it was last updated. Our Terms of Service explain the rules for using TactIQ.