Privacy Policy

Last updated: 20 February 2026

1. Introduction

Titanic Projects ("we", "us", "our") operates the following services: Sport Report, NexusX, ImgenX, and OutlineX. This policy explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

When you create an account, we collect:

  • Username — to identify your account
  • Email address — for account recovery and communication
  • Password — stored as a one-way hash (never in plain text)
  • Display name, bio, avatar URL — optional profile information
  • Date of birth — for age verification only (to confirm you are 13+)

When you use our services, we may also store:

  • Messages — private messages sent via NexusX (VIP feature)
  • AI-generated images — images you create on ImgenX
  • Fantasy teams, predictions, poll votes, quiz attempts, badges — your activity on Sport Report
  • Account timestamps — when you created your account and last logged in

3. Why We Collect It

  • To provide account functionality across the Titanic Projects ecosystem
  • To enable community features (messaging, leaderboards)
  • To track your preferences and game progress
  • To verify age eligibility (minimum age: 13)

Our lawful basis for processing is contract (to provide the services you signed up for) and legitimate interest (to improve our services).

4. How Data Is Stored

  • Data is stored in SQLite databases on our servers
  • Passwords are hashed using industry-standard PBKDF2 hashing via Werkzeug
  • We do not share your data with third parties
  • We do not sell your data

5. Your Rights

Under UK GDPR, you have the right to:

  • Access your data — use the "Download My Data" feature in your NexusX account settings
  • Rectify your data — edit your profile at any time via "Edit Profile"
  • Erase your data — use the "Delete My Account" feature, which permanently removes all your data across all Titanic Projects apps
  • Object to processing — contact us (see below)

6. Data Export

You can download all your personal data at any time from your NexusX account settings. The export is provided as a JSON file containing your profile information, messages, and activity across all Titanic Projects apps.

7. Account Deletion

You can permanently delete your account and all associated data from your NexusX account settings. Deletion cascades across all Titanic Projects apps (NexusX, Sport Report, ImgenX). This action is irreversible.

8. Cookies

  • We use essential session cookies to keep you logged in
  • We use localStorage for theme preferences and cookie consent status
  • We do not use tracking cookies or third-party analytics

9. Children's Privacy

Our services are intended for users aged 13 and older. We do not knowingly collect personal data from children under the age of 13. This complies with COPPA (Children's Online Privacy Protection Act) and the UK Age Appropriate Design Code.

During registration, users must confirm they are 13 or older and provide a date of birth for age verification. If we learn or are notified that a user is under 13:

  • The account will be immediately suspended
  • The account holder or their parent/guardian will be contacted to verify age
  • If the user is confirmed to be under 13, or no proof of age is provided, the account and all associated data will be permanently deleted across all Titanic Projects services

For parents and guardians: If you believe your child under 13 has created an account on any Titanic Projects service, please contact us immediately at support@titanicprojects.com and we will delete the account and all data without delay. You may also use the "Report underage account" link available on all user profiles.

10. Data Retention

We retain your data for as long as your account is active. When you delete your account, your data is permanently removed. Backups may retain deleted data for up to 30 days before automatic expiry.

11. Data Breaches

In the event of a personal data breach, we will notify the ICO (Information Commissioner's Office) within 72 hours where required, and inform affected users without undue delay.

12. Contact

If you have questions about this policy or wish to exercise your data rights, contact us at: privacy@titanicprojects.com