Privacy policy

Capall is a UK-based ratings service. We store the minimum personal data needed to operate your subscription and send you the alerts you ask for. This page explains what we collect, why, and your rights under UK GDPR.

Who we are

Capall is operated from the United Kingdom. References to "we", "us" and "our" on this page mean the operator of capall.net. We act as the data controller for the personal data described below.

What we collect

• Account data: full name, email address, hashed password. You provide this at signup.
• Subscription data: the price you signed up on, trial status, and Stripe customer reference. Card details are held by Stripe, not by Capall.
• Stable data: the horses, trainers and jockeys you choose to follow in My Stable, and the alert preferences you set.
• Operational logs: server logs (IP address, user agent, timestamps) for security and abuse prevention. Held for 30 days then deleted.
• Usage telemetry: anonymous page-view counts to understand which pages are read. No third-party advertising trackers.

Why we hold it

• To operate your account and subscription (contract).
• To send you the rating, stable and product emails you opt in to (contract + consent).
• To protect the service from abuse (legitimate interest).
• To comply with our tax and accounting obligations (legal obligation).

Processors we share data with

• Stripe — payment processing. Subject to Stripe's privacy policy. Card details never reach Capall's servers.
• Resend — transactional and stable-alert email delivery. Receives your email address and the alert content.
• Replit — application hosting infrastructure provider. Server logs transit Replit's platform.
• Neon — managed Postgres database (encrypted in transit and at rest).

We do not sell your personal data, and we do not share it with advertising networks.

How long we keep it

• Account data: for as long as your account exists, plus six years of accounting records once closed.
• Operational logs: 30 days.
• Stable alerts: deleted when you delete an entry from your stable.

Your rights under UK GDPR

You can request access, correction, deletion, or export of your personal data at any time. Email privacy@capall.net and we will respond within 30 days.

You have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

Cookies

See the cookies policy for the small set of first-party cookies we use to keep you signed in and remember your preferences.

Changes to this policy

If we make a material change to how we handle personal data we will email registered users in advance and update the date at the bottom of this page.

Last updated: 23 May 2026.