Privacy policy

Privacy Policy

Ultimate Hattrick is a CHPP companion for Hattrick managers. This policy explains what data the app uses, why it uses it, and how you stay in control.

Last updated: 3 October 2026

Who runs Ultimate Hattrick

Ultimate Hattrick is operated as an independent companion product at ultimatehattrick.com. It is not owned by, operated by or affiliated with Hattrick Ltd.

For privacy questions, use the in-app feedback form after signing in.

Data we collect

When you connect through CHPP, Ultimate Hattrick stores the information needed to provide the app:

  • Your Hattrick manager id, team ids, team names, league and country information.
  • Squad, player, form, stamina, injury, wage, avatar and skill data.
  • Lineups, match orders, match results, match ratings, fixtures and opponent context.
  • Training, economy, transfer search and youth academy data where the connected CHPP scopes allow it.
  • OAuth tokens, token metadata and granted scopes so the app can keep syncing after you sign in.
  • Your Ultimate Hattrick preferences, notification settings, feedback, support tickets and optional email subscription details.
  • If you buy Pro or a boost: your Stripe customer reference, subscription status and renewal dates, the credits you bought and how many you have used. Card details are collected and held by Stripe, never by Ultimate Hattrick.
  • Basic operational data such as sync status, error logs and request diagnostics, with secrets redacted where logs are stored.

How we use your data

We use your data to display the product, keep your Hattrick snapshot up to date, calculate ratings and predictions, prepare match orders, send notifications you have enabled, handle support, and protect the service from abuse or errors.

Some parts of the app can write back to Hattrick, for example submitting match orders or youth actions. Ultimate Hattrick only sends those actions after you press the relevant confirmation button.

If you give us an email address and ask for tips and product updates, we send a few short getting-started emails during your first week and occasional product news after that. These emails record whether they were opened and whether their links were clicked, so we can tell which ones help. Every one carries an unsubscribe link, and you can turn them off in Settings.

AI features

If you enable AI features, the app may send relevant team, player, match, transfer or youth academy context to the configured AI provider so it can create briefings, explain picks or rank transfer results. AI responses are treated as suggestions and are validated before they can change saved data.

Conversations with the assistant are stored with your account so they survive a page reload. A conversation you have not used for 30 days is deleted automatically, and pressing "New chat" deletes it straight away. Suggestions the assistant makes only change your lineup or orders when you press Apply, and nothing is sent to Hattrick until you submit it yourself.

AI is optional. You can turn it off in Settings. If no API key is configured, the app uses deterministic fallbacks instead.

Payments

Paid plans and boosts are processed by Stripe, which acts as our payment processor. When you check out, Stripe receives your payment details, billing address (used to work out VAT) and, if you have given us one, your email address. Stripe handles that information under its own privacy policy; we receive only what we need to apply your purchase and show your billing status.

Hattrick and Extralives take no responsibility for these payments or for support.

Sharing and processors

We do not sell your data. We only share data where needed to run the app:

  • Hattrick CHPP, to read your account data and submit actions you confirm.
  • Hosting, database, email, notification and error-monitoring services used to operate Ultimate Hattrick.
  • The configured AI provider, only when AI features are enabled and a feature needs that context.
  • Stripe, to take payments for Pro and boosts, and only when you buy one.

Retention

We keep your account data while your Ultimate Hattrick account exists, so the app can show history and avoid unnecessary CHPP calls. Some logs and diagnostic records are kept for a limited period for support and security. Feedback and support tickets may be kept longer because they are part of product support history.

Marketing email data is kept until you unsubscribe or ask for it to be removed. A record of which getting-started emails were sent is kept while your account exists, so the same one is never sent twice.

Deleting your account cancels any active Pro subscription and removes our billing records with it. Stripe keeps its own transaction records for as long as tax and accounting law requires.

Your choices

  • Revoke Ultimate Hattrick CHPP access from your Hattrick account settings at any time.
  • Delete your Ultimate Hattrick account from Settings to remove the local account data controlled by this app.
  • Turn off AI features, push notifications or email updates from the relevant settings.
  • Ask for access, correction or deletion by contacting us.

Security

Hattrick authentication happens through OAuth on Hattrick.org. We store OAuth tokens instead of passwords, limit write actions to explicit confirmations, redact sensitive data from stored diagnostics, and scope team data to the signed-in manager.

Changes to this policy

If this policy changes, the updated version will be published on this page. Material changes will be reflected in the app or release notes where appropriate.