Last updated: 15 June 2026
1. Introduction
Celebrity Death Pool ("we", "us", "the website") is a free entertainment game. This policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and applicable data protection laws. By creating an account or using the website you acknowledge the practices described here.
2. Data Controller
The data controller responsible for your personal data is Celebrity Death Pool. For any privacy-related request you can reach us at privacy@celebritydeathpool.co.uk or through the dedicated reporting form available on this website.
3. What data we collect
We collect only the data needed to run the game:
- Account data — your email address, a public username (derived from your email and editable), and your password (stored only as a salted, irreversible cryptographic hash — we never store it in clear text).
- Profile data — an optional profile icon you choose to upload (a small PNG image).
- Game data — the tontines you create or join, the celebrities you pick (your "bets", including whether a pick is marked as secret), your scores, badges, and join requests.
- Technical data — account creation date and last login timestamp, and your notification preferences.
- Live game data — for the free guessing game, a temporary nickname and room code stored locally in your browser.
We do not knowingly collect special categories of data (e.g. health, religion, political opinions).
4. Legal basis for processing
- Performance of a contract — to create and operate your account and let you play.
- Consent — for optional features such as your profile icon and email notifications, which you can enable or disable at any time from your profile.
- Legitimate interests — to keep the service secure, prevent abuse, and improve the game.
- Legal obligation — where we must retain or disclose data to comply with the law.
5. How we use your data
- To authenticate you and keep you signed in.
- To run tontines, record your picks, calculate scores, and assign badges.
- To display your public username, profile icon, badges, and game history to other players.
- To send the email notifications you have opted into (see section 6).
6. Email notifications
If enabled in your profile preferences, we send transactional emails when: a celebrity you picked has died, a member adds a pick to a tontine you take part in, a tontine you joined ends, or someone requests to join a closed tontine you administer. We also send service emails such as password-reset links. You can turn notification emails off at any time from your profile page. Emails are delivered through our email provider (Aruba) acting as a processor on our behalf.
7. Cookies & local storage
We keep cookie usage to the strict minimum and do not use advertising or third-party tracking cookies.
| Name | Type | Purpose | Retention |
|---|---|---|---|
| cdp_auth | Essential cookie (HttpOnly) | Keeps you signed in after login. | Up to 30 days (sliding) |
| cdp_lang | Local storage | Remembers your language choice. | Until cleared |
| ch_nickname / ch_room | Local storage | Temporary nickname and room for the live guessing game. | Until cleared |
Essential cookies are required for the website to function and do not need consent. You can delete cookies and local storage at any time through your browser settings, though doing so will sign you out.
8. Data sharing & transfers
We do not sell your personal data. Some data is shown publicly within the game (your username, profile icon, scores, badges, and non-secret picks). We rely on a limited number of service providers (hosting, database, and email delivery) who process data strictly on our instructions. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place.
9. Data retention
We keep your account data for as long as your account is active. Game data may be retained to preserve the integrity of historical tontines and leaderboards. When you delete your account, we remove or anonymise your personal data, except where retention is required by law.
10. Your rights under the GDPR
You have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data ("right to be forgotten");
- restrict or object to certain processing;
- data portability;
- withdraw consent at any time (without affecting prior lawful processing);
- lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at privacy@celebritydeathpool.co.uk. We will respond within the time limits set by applicable law.
11. Data security
Passwords are stored using salted PBKDF2 hashing and are never accessible in clear text. Authentication uses a secure HttpOnly cookie. We apply reasonable technical and organisational measures to protect your data; however, no method of transmission or storage is completely secure.
12. Children
The website is not intended for children under the age required for valid consent in your country (16 in many EU states). We do not knowingly collect data from children below that age.
13. Images and Copyright Notice
Some images displayed on this website are sourced from publicly available repositories, including but not limited to Wikimedia Commons and other sources providing content under Creative Commons licenses or in the public domain.
Whenever available, image attribution information is displayed alongside the image, including the author, license type, and source URL, in accordance with the applicable license requirements.
We make reasonable efforts to verify the licensing status and attribution requirements of all images published on this website. However, if you believe that:
- an image has been incorrectly attributed;
- you are the copyright owner of an image and do not authorize its use;
- an image infringes your intellectual property rights;
- an image contains personal data or otherwise violates your privacy rights;
please contact us using the dedicated reporting form available on this website.
Upon receiving a valid notice, we will promptly review the request and, where appropriate, update the attribution information, restrict access to the image, or remove the image from publication.
Copyright claims
To submit a copyright claim, please provide:
- your full name and contact information;
- identification of the image in question;
- evidence of ownership or authorization to act on behalf of the copyright owner;
- a description of the alleged infringement.
Privacy-related image removal requests
Individuals who appear in an image and believe that the publication of such image violates their privacy rights may submit a removal request. We will evaluate each request on a case-by-case basis in accordance with applicable laws and regulations.
14. Disclaimer
The website acts in good faith and relies on licensing information provided by the original source. While reasonable efforts are made to ensure accuracy, we cannot guarantee that third-party licensing information is complete, accurate, or up to date at all times.
The publication of celebrity photographs on this website is intended solely for informational, editorial, and biographical purposes and does not imply endorsement, sponsorship, or affiliation with any individual depicted.
15. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through the website.