Privacy Policy

Arsenal Latest is an independent, unofficial news and discussion site for Arsenal supporters. It is not affiliated with, authorised by, or connected to Arsenal Football Club. This policy explains how we process personal data in accordance with UK and EU data-protection law.

1. Data controller

The operators of Arsenal Latest act as the data controller for the processing described below. Enquiries and requests may be sent to the site administrators.

2. Data we process

2.1 Account data — your username, email address and a hashed password, together with any timezone or avatar you elect to provide.

2.1a Google and Facebook sign-in — where you sign in with Google or Facebook, we receive your account identifier with that provider, your name (used solely to suggest a username) and your email address. We retain the identifier and the email address; we receive no password, no permission to post on your behalf and no other account data. Removing the site in your Facebook settings deletes the stored Facebook identifier.

2.2 User content — threads, replies, live match-day messages, private messages, reactions and likes. The usernames of those who liked or reacted to a post are visible to anyone who can read it.

2.3 Technical data — IP address, a country inferred from it, the requested URL and the browser user-agent, recorded in a visitor log.

2.3a Guest votes — where you vote on a transfer without an account: the vote, a random identifier stored by your browser (allowing you to change the vote) and a one-way keyed hash derived from your IP address (the address itself is not retained), used solely to limit repeat voting. On registration these votes are transferred to your account.

2.4 Activity data — the time of your most recent visit while signed in. For approximately 15 minutes thereafter, your username may be displayed to other visitors in the "In the ground" panel on the forum.

2.4a Match-day participation — your player ratings and mood votes (individual votes are never shown; only averages are published) and a record of which matches you took part in. The resulting count ("season ticket") is displayed on your public profile. Score predictions are public: each is posted under your username in the match-day chat, included in the aggregate of fans' predictions, and may name you in the full-time summary if it was exact. The prediction is retained with your account.

2.5 Push subscriptions — where you enable push notifications on a device, the delivery endpoint and keys supplied by your browser, and the time of last use. Push may be disabled at any time in your notification settings and is removed on account deletion.

3. Purposes and legal bases

3.1 Operating your account and enabling participation — performance of the service you have requested.

3.2 Security, moderation and abuse prevention — our legitimate interests.

3.3 Aggregate audience measurement — our legitimate interests, carried out with cookieless analytics that do not identify individual users.

4. Cookies

We set only strictly necessary and functional cookies, as itemised in the Cookie Notice. Our analytics are cookieless and no consent banner is therefore presented.

5. Recipients and international transfers

Audience measurement is performed with self-hosted, cookieless analytics that we operate on our own infrastructure; the data is not shared with any third party and is not transferred outside our systems. We additionally use Google Search Console (cookieless), the processing of which may involve transfers outside the UK/EEA subject to appropriate safeguards. Push notifications, where enabled, are delivered via the push service of your browser vendor (Google, Apple, Mozilla or Microsoft); their content is end-to-end encrypted and never includes the text of a post or private message. Videos are played from YouTube's privacy-enhanced mode (youtube-nocookie.com); on a transfer page nothing is requested from YouTube until you press play, as the preview image is served by us. Once a video plays, YouTube receives your IP address and may store data in your browser under its own privacy policy. A player photo on a transfer page may be displayed directly from the website that published it; your browser then requests that image from that site (without a referrer), which receives your IP address. We do not operate advertising or cross-site tracking and do not sell personal data.

6. Retention

6.1 Account and content data are retained for the lifetime of the account.

6.2 Visitor log entries are deleted automatically after three days.

6.3 Upon account deletion, personal identifiers are removed; contributions may be retained in anonymised form.

7. Your rights

You may exercise the rights of access, rectification, erasure, restriction, objection and portability. Data export and account deletion are available within your account settings; other requests may be directed to the site administrators. You may also lodge a complaint with the Information Commissioner's Office (ico.org.uk).

8. Children

The service is not directed at children under 16, who should not register.

9. Amendments

This policy may be amended from time to time. The version published on this page is the operative one.