Privacy notice
Version draft-2026-10-21c
Who is responsible for your data
[Owner's full name / business name], trading as FootyHunch, [address], is the data controller. Contact: [contact email]. [ICO registration number, if required.]
What we collect
- Account details: your email address and a scrambled (hashed) version of your password - we never store your actual password. If you use Google sign-in, your Google account ID and email.
- Your choices: when you confirmed you're 18+, accepted the terms and whether you want marketing emails.
- Plan and payments: your plan and, once payments go live, a customer reference from our payment provider (Stripe). We never see or store your card details.
- Usage needed to run the plans: which match reports a Free member opened today (deleted after 3 days), and login sessions.
- Security logs: failed login attempts (stored against a scrambled version of the email) and short-lived IP-based rate limits to stop abuse.
Why we use it (lawful basis)
- To provide your account and plan - contract.
- To keep the service secure and prevent abuse - legitimate interests.
- Marketing emails - only with your consent, which you can withdraw any time from your Account page or the link in any email.
- Keeping records we're required to keep (e.g. payments) - legal obligation.
Cookies
We only use cookies that are strictly necessary: one to keep you logged in and one to protect forms from forgery (plus a short-lived one during Google sign-in). No advertising or tracking cookies. The site loads fonts from Google Fonts, which means your browser contacts Google. [To review before launch.]
Who we share it with
Only service providers who help us run FootyHunch: our hosting provider (Hetzner, servers in Germany), our email provider [to be confirmed], Stripe for payments (when live) and Google if you choose Google sign-in. We don't sell your data.
How long we keep it
For as long as you have an account. When you delete your account, your data is deleted straight away from the live system and from backups within 7 days. Payment records may be kept for as long as tax law requires.
Your rights
You can ask to see, correct, delete or move your data, or object to how we use it. You can delete your account yourself from the Account page. If you're unhappy, you can complain to the Information Commissioner's Office (ico.org.uk).