Privacy Policy

In short

MatchDay helps groups organise pickup matches. We collect what is needed to run a league — who you are, which leagues you belong to, and which matches you have signed up for. We do not sell your information, we do not show advertising, and we do not track you across other apps or websites.

You can delete your account from inside the app at any time. What that removes, and what it deliberately leaves behind, is described under Deleting your account.

Information you give us

Your name and email address

Required. Your name identifies you to other members of your leagues. Your email address is how you sign in and how we send match notifications by email.

Optional profile details

A phone number, gender, the positions you prefer, and whether you are willing to play in goal. All optional, and shown only to the administrator of a league you belong to — they help with picking balanced teams. You can change or clear them at any time.

A profile photo

Optional. If you add one, it helps other players recognise you on a roster or team sheet. See Photos below for how it is stored.

Messages you write

The note attached to a request to join a league, and a reason you may give when cancelling a spot. These are shown to that league’s administrator.

Information created as you use MatchDay

• Which leagues you belong to, your role in each, and your membership status.
• Requests to join a league, and whether they were approved or declined.
• Match participation: signups, waitlist positions, cancellations, team assignments and published team sheets.
• Attendance recorded by a league administrator after a match — for example whether you played, cancelled in time, or did not turn up.
• Whether you have accepted a league’s guidelines, and when.
• Notifications sent to you, and whether you have read them.
• Notes an administrator writes about your membership. These are private to that league’s administrator and are never shown to other players.
• A record of significant actions in a league — who created a match, who approved a request, who changed a member’s status — kept so an administrator can see what happened in the league they run.
• Which league you last had selected, so the app opens where you left off.

Photos

A profile photo you upload is stored with our hosting provider and served from a web address containing a random identifier. That address is unguessable and is not listed anywhere public, but it is not secret: anyone you have shared the link with could open it while the photo exists. Replacing or removing your photo, or deleting your account, deletes the stored file.

Notifications and push

Every notification is kept in your MatchDay inbox. If you additionally turn on phone notifications for a device, your browser gives us a subscription for that device — a delivery address supplied by your browser vendor, along with the keys needed to encrypt messages to it, and a label you can set so you can tell your devices apart. We also record whether each delivery succeeded, so a device that has stopped working can be retired.

Sending a push notification means handing an encrypted message to the push service your browser chose — operated by Apple, Google or Mozilla depending on the browser. We do not choose that service and cannot see inside their systems. You can turn phone notifications off for any device from Profile → Phone notifications, or in your browser’s settings.

Signing in

Authentication is handled by Supabase Auth. You can sign in with a password or with a one-time code sent to your email address. We never see or store your password — it is held by Supabase in hashed form, and MatchDay has no way to read it.

Staying signed in uses a session cookie set by your browser. It exists only to keep you signed in and to keep your session current; it is not used for advertising or analytics, and it is cleared when you sign out.

Why we use this information

• To run the product: sign-in, leagues, matches, rosters, teams and attendance.
• To tell you about things that concern you, such as a match being published or cancelled.
• To let league administrators manage their own leagues and members.
• To keep the service secure and working, and to investigate problems.

We do not use your information for advertising, for building a profile of you across other services, or for any form of automated decision-making about you.

Who else processes it

MatchDay is built on a small number of services that process data on our behalf. We do not sell or rent your information to anyone, and none of these providers is permitted to use it for their own purposes.

Supabase

Our database, file storage and authentication. Effectively everything described above is stored there.

Vercel

Hosting. Like any web host, Vercel processes the technical details of each request — including your IP address, the page requested and your browser’s user agent — in order to serve the page and to protect the service.

Brevo

Delivers the emails Supabase Auth sends: sign-in links, one-time codes and password resets. This means your email address and the content of those messages.

Better Stack

Receives our operational logs and a scheduled health signal, so we can tell when something has broken. Our logs are written as structured events that deliberately exclude names, email addresses, phone numbers, message contents and credentials.

Your browser’s push service

Apple, Google or Mozilla, depending on the browser you use. Involved only if you turn on phone notifications, and only to deliver the message to your device.

What we do not collect

• No location or GPS data.
• No contacts, calendar or photo library access beyond a photo you choose to upload.
• No health, fitness or medical information.
• No payment or financial information — MatchDay is free and takes no payments.
• No advertising identifiers, and no analytics or tracking software of any kind.
• No browsing history or search history from outside MatchDay.

Tracking

MatchDay does not track you. We do not link your activity to data collected by other companies’ apps or websites, we do not use advertising identifiers, and we do not share your information with data brokers or advertising networks. The app contains no advertising or analytics software.

How long we keep things

Your profile and participation records are kept while your account exists, because a league’s history is the point of keeping them. Notifications and their delivery records are kept as part of your inbox. Operational logs are short-lived and are held by our logging provider under their retention settings.

Deleting your account

Deleting your account removes:

• your sign-in identity, so the account can no longer be used;
• your profile details — name, email address, phone number, gender, positions and goalkeeper preference;
• your profile photos, including any earlier ones still stored;
• your notification inbox and any push subscriptions for your devices;
• any pending requests to join a league;
• private notes an administrator had written about your membership;
• your saved app preferences.

What remains, and why. Matches that have already been played are part of the record of the leagues you played in, and they belong to those leagues as much as to you. So the entries themselves stay — the roster, the team sheet, the attendance register — but they no longer identify you. Your name and photo are replaced everywhere with Former member, and nothing links those records back to you. Records of significant administrative actions in a league are likewise kept in this de-identified form, so that administrators retain an accurate history of their own league.

Deleting your account does not stop you coming back. Signing up again with the same email address creates a completely new account, with no connection to the old one and none of its history.

If you are unable to reach the in-app deletion flow for any reason, contact us at ivanov.john04@gmail.com and we will help — but the in-app route is the fastest, and it does not depend on us.

Your choices

• Review or change your details at any time from Profile.
• Leave a league without deleting your account, from the league menu.
• Turn phone notifications off per device from Profile → Phone notifications.
• Delete your account from Profile → Account → Delete account.

If you would like a copy of the information we hold about you, or have a question we have not answered here, write to us and we will do our best to help.

Security

We take reasonable measures to protect your information: access to league data is enforced in the database itself rather than only in the application, credentials are never written to our logs, and administrative operations run on the server and never in your browser. No service can promise perfect security, and we do not claim to — but we would rather tell you what we actually do than make a guarantee nobody can keep.

Children

MatchDay is intended for adults organising and playing in pickup matches. It is not directed at children, and we do not knowingly collect information from them.

Changes to this policy

If we change what MatchDay collects or how it is used, we will update this page and change the date at the top. Significant changes will also be announced in the app.

Contact us

Questions about this policy? Email ivanov.john04@gmail.com.