DPS Politics

Privacy Policy

Last updated: 12 July 2026

DPS Politics is a service provided by DPS Computing Limited (company number 12072722), a company registered in England and Wales, trading as DPS Apps ("we", "us", "our"). We are the data controller for the personal data described in this policy. We will never sell your data, and we will never share your data with any third party for their own marketing purposes.

1. What Data We Collect

We collect the following categories of personal data when you use DPS Politics:

  • Account data: your email address, hashed password, first and last name, and any optional profile fields you choose to add (avatar, biography, campaign slogan).
  • Gameplay data: your voting and petition-signing history, Citizen Capital balance, chosen constituency, and party membership or role.
  • Payment data: if you subscribe to a paid tier or make a donation, your payment is processed and stored by our payment processor, Stripe. We only retain a Stripe customer and subscription reference — we do not store your card details.
  • Security data:if you enable two-factor authentication, an encrypted copy of your authenticator secret and hashed backup codes; a session cookie that keeps you signed in; and, if you use "remember this device", a hashed device token together with a general device description (e.g. "Chrome on Windows").
  • Bot-protection data: when you register or sign in, Cloudflare Turnstile processes certain request signals to confirm you are not an automated bot.
  • Incidental data: any personal information you voluntarily disclose to us in support emails or feedback.

2. How We Collect Your Data

We collect data directly from you when you register an account, use features of the service (such as voting, joining a party, or making a donation), contact us for support, or interact with cookies set by the service as described in Section 9.

3. Our Legal Basis for Processing

We process your personal data on the following legal bases: performance of a contract (to provide the account and game features you have signed up for); legitimate interests (to prevent fraud and abuse, secure your account, and operate the service reliably); and, where applicable, your consent (for example, if you opt in to optional marketing communications in the future).

4. How We Use Your Data

We use your data to operate your account and the game, process subscriptions and donations via Stripe, send account-related emails (such as verification and security notices), respond to support requests, and prevent fraud, abuse, and bot activity.

5. Who We Share Your Data With

We share the minimum data necessary with the following processors, solely to deliver the service to you: Stripe (payment and subscription processing); our hosting provider's email server (delivering account and security emails); and Cloudflare (Turnstile bot protection). We do not use any advertising or analytics vendors, and we do not share your data with any third party for their own marketing purposes. Our processors are only permitted to use your data to provide their service to us, under contract.

6. How We Store and Protect Your Data

Your data is stored in a MySQL database hosted on UK/EU-based infrastructure. Passwords are hashed using bcrypt before storage and are never stored or logged in plain text. Two-factor authentication secrets are encrypted at rest. Your session is maintained using secure, HTTP-only cookies that cannot be read by client-side scripts.

7. Data Retention

We retain your account data for as long as your account remains active. If you request deletion of your account (see Section 10 and the data privacy settings page), we will erase your personal data except where a record must be retained for a legitimate reason — for example, historical administrative or moderation log entries referencing your account are anonymised rather than deleted, so that our own security records remain intact.

8. Cookies

We only use strictly necessary cookies: a session cookie that keeps you signed in, and, if you choose to use it, a "remember this device" cookie. Cloudflare Turnstile may also set a cookie as part of verifying you are not a bot. We do not use advertising or analytics cookies of any kind. Because we only use strictly necessary cookies, a cookie consent banner is not required under UK GDPR/PECR — this is a deliberate choice reflecting what the service actually does, not an oversight. You can still disable cookies in your browser, but doing so will prevent you from signing in or using the service.

9. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access a copy of the personal data we hold about you.
  • Rectification of inaccurate or incomplete data.
  • Erasure of your data, under certain conditions.
  • Restriction of how we process your data, under certain conditions.
  • Object to our processing of your data, under certain conditions.
  • Portability — receiving your data, or having it transferred, in a usable format.

You can exercise your access and erasure rights directly from the data privacy settings page once signed in, using the "Download my data" and "Request account deletion" tools. For any other request, or if you would prefer to contact us directly, email dpo@dpscomputing.com. We will respond within one month.

10. Account Deletion

Requesting deletion from the data privacy settings page notifies us so that we can verify the request and action it promptly. Because your account may be linked to other records, such as party leadership, election candidacies, or donations, deletion is reviewed rather than instantaneous, so that we can properly handle any data we are legally required to retain or that other users' records depend on.

11. Children's Data

DPS Politics is not directed at children, and we do not knowingly collect personal data from anyone under the age of 13. If you believe a child has provided us with personal data, please contact us using the details in Section 13 and we will delete it.

12. International Transfers

Your data is stored on UK/EU-based infrastructure. Where a processor we use (such as Stripe) transfers data outside the UK or EEA, we ensure appropriate safeguards, such as Standard Contractual Clauses, are in place.

13. Changes to This Privacy Policy

We keep this policy under regular review. Updates will be posted to this page, and the "Last updated" date above will reflect the most recent revision.

14. How to Contact Us

For any question about this policy or your personal data, email our Data Protection Officer at dpo@dpscomputing.com.

15. How to Contact the Regulator

If you are unhappy with how we have handled your personal data, you have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by phone on 0303 123 1113.

← Return home