Last updated: March 2026
This Privacy Policy explains how Valyra FZ-LLC (“Valyra”, “we”, “us”, “our”) collects, uses, stores, and protects your personal information when you use Gallopr (“the Game”, “the Platform”, “the Service”), accessible at https://gallopr.app.
We are committed to protecting your privacy. By using the Service, you acknowledge that you have read and understood this Privacy Policy.
Gallopr is operated by Valyra FZ-LLC, a company registered in the United Arab Emirates.
For the purposes of the UK GDPR, EU GDPR, and UAE Personal Data Protection Law (PDPL), Valyra FZ-LLC is the data controller responsible for your personal data.
Creating and managing your account, processing picks, calculating points, operating leagues, authenticating your identity, and sending service-related communications.
Legal basis: Performance of a contract and our legitimate interest in operating the Service.
Analysing usage patterns, computing aggregated insights, monitoring technical performance, and conducting research to develop new features.
Legal basis: Our legitimate interest in improving and maintaining the Service.
Sending service-related emails necessary for the operation of the Service, and — if you have opted in — marketing communications including tips, insights, news, and offers.
Legal basis: Performance of a contract for service communications; your consent for marketing.
Detecting and preventing fraud, abuse, or violations of our Terms, and complying with legal obligations.
Legal basis: Our legitimate interest in maintaining service integrity and compliance with legal obligations.
We do not sell your personal data to third parties. We share your information only in the following circumstances.
Your display name, avatar, picks (post-deadline), points, rankings, and badges are visible to other players as part of the Game's core functionality. Your email address is never displayed to other players.
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase (Singapore) | Database, auth, real-time | Account, game, session data |
| Vercel (USA) | Hosting, analytics | IP, device, usage data |
| Google Analytics (USA) | Usage tracking | IP (anonymised), device, usage, cookies |
| Mailchimp (USA) | Email marketing | Email, display name, preferences |
We may disclose your information if required by law, regulation, or governmental request, or where necessary to protect our rights or the safety of others.
If Valyra FZ-LLC is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.
Valyra FZ-LLC is based in the United Arab Emirates. Your data may be processed in countries outside your country of residence, including the United States and other jurisdictions where our service providers operate. Where your data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses and adequacy decisions.
Strictly Necessary Cookies
Essential for the Service to function. Includes session cookies that maintain your logged-in state. You cannot opt out of these.
Analytics Cookies
Google Analytics (_ga, _ga_*, expire after 2 years) and Vercel Analytics collect usage data with IP anonymisation enabled. These are only loaded if you accept cookies.
Functional Cookies
Remember your preferences and settings within the Game, such as your selected festival day and tutorial completion status.
You can manage cookies through your browser settings. You can also use the cookie consent banner shown on your first visit to accept or decline analytics cookies. Blocking strictly necessary cookies may prevent the Service from functioning properly.
The Service does not currently respond to “Do Not Track” (DNT) signals. You may use the cookie opt-out mechanism described above.
If you are located in the UK or EEA, you have the following rights:
If you are located in the UAE, you have rights under the UAE PDPL including the right to access, correct, and request deletion of your personal data, and to withdraw consent.
Contact us at jake@valyra.ai. We will respond within 30 days and may ask you to verify your identity before processing your request.
We implement appropriate technical and organisational measures to protect your personal data, including:
While we take reasonable steps to protect your data, no method of internet transmission or electronic storage is completely secure.
The Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. During registration, users must confirm they are 13 or older. If we become aware we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal data, please contact jake@valyra.ai immediately.
The Service may contain links to third-party websites. This Privacy Policy does not apply to those services. We are not responsible for their privacy practices or content.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice within the Service. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:
© 2026 Valyra FZ-LLC