Legal · Last updated September 9, 2026
Privacy policy
Plain English version. We collect the minimum we need to make Bantasy work, we don't sell your data, and you can ask us to delete your account at any time.
What we collect
- Account info. Email, display name, password hash, and when you signed up.
- Gameplay data. Comps you join, lineups you set, tips you submit, and the messages you post in comp chat.
- Device and usage. Basic logs (IP, user agent, error traces) so we can keep the service up and debug issues.
- Billing and payments. If you subscribe or buy a Bantasy Bucks top-up, your payment is processed by our payment providers (Stripe and Chargebee). We never store your card numbers; we keep your billing history (what you bought, when, and for how much).
- Prize verification. If you win a prize, we may collect what we need to verify your identity, age and location, and the bank details needed to pay you.
Why we collect it
- To run your account and gameplay.
- To show you the right ladders, comps and notifications.
- To prevent abuse and fix bugs.
- To send you product updates if you opt in.
Who we share it with
We don't sell your data. We use a small number of processors to deliver the service (hosting, analytics, transactional email, and payment processing: Stripe and Chargebee). We also use Google Analytics to measure site traffic, and Meta (Facebook) for ad measurement and targeting through the Meta Pixel, both described under Cookies below. We also use tawk.to (tawk.to Inc., United States) to run our support chat, both on this site and in the app. On this site it receives what you type into it, along with your IP address, your rough location, the pages you are on here and basic details about your browser, which is how it shows us who is on the site right now. In the app, when you open Help it also receives your name, your email address and some context about what you were doing, such as the screen you were on, your gameweek, your team and competition, your plan and whether you are on a trial, any error message showing on the screen and a reference number for it, the version of the app you are using, and, if you came to Help from the assistant, the last question you asked it and the answer it gave. We keep the chat transcripts so the team can pick your question back up later and follow up properly. They only see what they need to do their job. Some of these providers (including Google, Meta, Stripe and tawk.to) store and process data outside Australia, mainly in the United States.
Your rights
- Access: ask us for a copy of what we hold.
- Correction: tell us to fix anything wrong.
- Deletion: ask us to wipe your account. See delete your account for the steps, what we remove and what we have to keep.
- Portability: get your data in a structured format.
Email admin@bantasy.co with any of the above and we'll respond within 30 days.
Cookies
We use a session cookie to keep you signed in and a small handful of first-party cookies for preferences and basic analytics.
We also run the Meta (Facebook) Pixel on this site and in the Bantasy web app at app.bantasy.co. It sets cookies and tells Meta which pages you visited, so we can measure our ads and show them to people like you. It never sees your password or the contents of your posts, but it does see the page title in your browser tab.
When you create an account, we also send Meta a scrambled (hashed) version of the email address you signed up with. Hashing only works one way: Meta can check it against addresses it already holds to work out whether you have a Facebook or Instagram account, but it cannot read your address back out of it. We do this so we can tell which of our ads actually led to people joining, rather than guessing. Your password is never sent to Meta in any form.
To opt out, turn off ad personalisation in your Facebook or Instagram settings, or use a browser or extension that blocks tracking scripts. Blocking third-party cookies limits what Meta can link across other sites, but it won't stop this pixel; its cookie is set by bantasy.co. If you would rather we didn't share your hashed email with Meta at all, email admin@bantasy.coand we'll handle it.
We also run Google Analytics, on this site and in the Bantasy web app at app.bantasy.co. It sets cookies and tells us how people find and move around the site: which pages you land on, what you click, and whether you head off to download the app. We use it to understand traffic patterns; we never send Google your name, your email or the contents of your posts, though as with the Meta Pixel it does see your browser-tab page title. Google receives your IP address to work out your rough location, and says it doesn't log or store it. Because these cookies are set on bantasy.co they are shared with app.bantasy.co, so moving from here into the app is counted as one visit rather than two.
Where you reached us by clicking one of our ads, Google Ads and Meta are also told when that click led to you creating an account, so we can tell which ads are worth paying for. What they receive is that a signup happened and which ad click it followed, not your name, your email or anything you go on to do in the app.
On a desktop browser you can opt out of Google Analytics with Google's official opt-out add-on. That add-on doesn't exist for mobile browsers, so on a phone you'd need a browser or extension that blocks analytics scripts, or your device's tracking-protection setting. We don't currently offer an in-site toggle.
Our support chat is run by tawk.to. On this site the chat bubble loads on every page, so tawk.to sets its cookies as soon as a page opens: they are what keep a conversation going as you move between pages and let it recognise you if you come back with a follow-up. It receives what you type into it, plus your IP address, your rough location, the pages you visit on this site and basic details about your browser. In the Bantasy app at app.bantasy.co the same chat only loads when you open Help, so if you never open Help it never runs there and sets nothing. Opened from the app it also receives your name, your email address, the support context described above and, if you came to Help from the assistant, the last question you asked it and the answer it gave. It never sees your password or your card details. If you would rather we didn't keep your chat transcript, email admin@bantasy.coand we'll remove it.
Children
Bantasy is for users 18 and over. If you believe a minor has signed up, contact us and we'll remove the account.
Changes to this policy
If we make material changes we'll notify you in-app and via email. Otherwise the "last updated" date at the top tracks edits.
Contact
The entity responsible for your data is Bantasy Pty Ltd (ABN 84 698 879 677), Australia. Questions, complaints, or right requests: admin@bantasy.co.
This policy is governed by the laws of Australia. Last updated September 9, 2026.