Last updated 7 June 2026
Privacy Policy
Play360 Solutions Limited is the data controller for this website and the KPL Social Media Tracker. This policy explains what we collect, why we use it, who we share it with, and how you can exercise your rights under Kenya's Data Protection Act and related regulations.
Contact
For privacy questions or data subject requests, email info@play360.solutions. You may also contact or complain to Kenya's Office of the Data Protection Commissioner through the ODPC website.
Data We Collect
- Account data: name, email address, authentication provider, role, account creation time, last login, failed login count, and lockout state.
- Contact data: name, email, company, project type, and message when you choose to contact us.
- KPL Socials data: public club names, public social media handles, follower or subscriber counts, post and video counts, public recent YouTube video titles, publication dates, views, likes, and sync timestamps.
- Security and operations data: session cookies, password reset tokens, audit logs, rate-limit signals, server logs, and error diagnostics.
- Analytics data: privacy-friendly page analytics from Vercel Web Analytics. We do not intentionally send account, admin, auth, or password reset pages to analytics.
How We Use Data
We use personal data to operate accounts, secure the service, respond to enquiries, publish articles, administer KPL Socials, prevent abuse, measure public site usage, and meet legal or accountability obligations. We do not sell personal data.
For KPL Socials, Play360 republishes and organises publicly available club and platform metrics so visitors can compare public club social media performance. The tracker is not designed to profile individual fans or infer private behaviour.
Cookies And Analytics
We use essential cookies for authentication and session security. These cookies are required for login and account features.
We use Vercel Web Analytics for aggregate public site insights. Vercel describes this product as cookie-free and anonymized. We filter sensitive routes and strip query strings before analytics events are sent.
Third Parties
We use service providers to host and operate the site, database, authentication, email delivery, analytics, media storage, and public social data integrations. These include Vercel, MongoDB Atlas, Auth.js/NextAuth, Google, Resend, Cloudinary, YouTube, X/Twitter, and Facebook. Some providers may process data outside Kenya according to their own infrastructure and legal terms.
Retention
| Data | Purpose | Retention |
|---|---|---|
| Account profile | Authentication, access control, and account support | Until the account is deleted or no longer needed |
| Password reset tokens | Password reset security | 1 hour, then automatic deletion |
| Audit logs | Security review and administrator accountability | 90 days |
| KPL Socials snapshots | Public ranking, trend, and comparison views | 90 days |
| Contact enquiries | Replying to project enquiries | As long as needed to handle the enquiry and related business records |
Your Rights
You may request access, correction, deletion, restriction, objection, or other rights available under Kenya's data protection rules by emailing us. Account holders may delete their own account from the account page. Some records may be retained where needed for security, legal claims, or legal obligations.
If your request relates to public KPL Socials data, tell us which club, platform, handle, or page is affected. We will review the request and correct, restrict, or remove data where appropriate.
Children
This website and account system are not intended for children. We do not knowingly collect children's personal data through account signup or contact forms.
More
The rules for using this website are set out in our Terms.