MatchDayLive Privacy policy

DRAFT. This is a draft for the owner to review. This is not final and is not legal advice. Remove this banner only after the owner has checked every statement and filled in every [PLACEHOLDER].

Last updated: [DATE]

Who we are

MatchDayLive is a team management app for grassroots football: squads, lineups, kits and match events. It is run by Gary Steers, trading as Packet Nomad (“we”, “us”). We are the data controller for the personal data described here.

  • Operator: [OPERATOR NAME AND ADDRESS]
  • Contact: [CONTACT EMAIL]

We are based in the United Kingdom, so we follow UK GDPR and the Data Protection Act 2018.

The short version

  • The app works without an account. If you never sign in, your data stays on your device and we never receive it.
  • If you sign in and sync a team, that team’s data is stored on our database in London.
  • The app has no advertising, analytics or tracking software, and we do not sell data.
  • Our public website, matchdaylive.app, uses our own analytics. It only sets analytics cookies if you choose “Accept all”.
  • Most of the data is about children, entered by coaches. Please keep notes factual and minimal.

Children’s data

Players in a team are typically children. Players do not have accounts and do not use the app themselves. A coach or team owner enters their details, so the coach or team owner is responsible for having a proper reason to do so, and for telling parents or carers what is recorded.

Some of what can be entered may count as health information, for example a note that a player is injured. Health information gets extra protection in law. Please:

  • use first names or short names only, not full names
  • keep notes factual and brief, for example “knee, back after half term” rather than a medical history
  • do not record diagnoses, medical conditions or anything about a child’s family or behaviour
  • do not add anything you would not be comfortable showing the child’s parent or carer

Parents and carers can ask the team’s coach, or us, to see, correct or delete a child’s data (see “Your rights”).

What we collect

Team details a coach enters:

  • team name and kit colours
  • an optional club badge. The badge stays on your device only and is not synced to us.

Player details a coach enters:

  • first name or short name, and an optional nickname
  • shirt number
  • status (regular, loaned in, or training only)
  • a free-text status note, which may mention an injury

Match details a coach enters:

  • matches, with opponent, date, kick-off time, venue and kit choice
  • lineups and formations
  • match events: goals, assists, substitutions, cards and injuries
  • free-text coaching notes about players

Account details, only if you sign in:

  • the email address from your Apple or Google sign-in. Apple may give us a private relay address instead of your real one.
  • your role in each team (owner, coach or viewer)
  • invite codes created to add people to a team

Admin records:

  • a log of actions taken by the platform administrator (who did what, to which team, and when)

How we use it

  • to run the app: show lineups, kits and match history, and sync them between the devices of people in the same team
  • to sign you in and apply the right role
  • to give support when you ask for it, and to keep the service secure

We do not use the data for advertising, profiling or marketing, and we do not sell it.

Our legal basis under UK GDPR is legitimate interests (running a team app for the people who chose to use it), and your consent where you choose to sign in and sync. For health-related notes, which are special category data, we rely on the coach or team owner having a valid reason to record them and on the minimal, factual approach set out above. [OWNER TO CONFIRM LEGAL BASES]

Where data is kept

On your device. The app keeps a local database on your phone (SQLite). In a web browser, the browser’s own storage is used instead. Signing in also stores a sign-in session on the device.

On our servers, if you sign in and sync. Synced data is stored with Supabase, in its London region (eu-west-2).

Lineup images and PDFs are created only when you choose to save or share them. Once you share one, it is outside our control.

Who else handles your data

These companies process data for us or provide the services the app depends on:

  • Supabase: database and sign-in service. Project hosted in London (eu-west-2).
  • Cloudflare: hosts our public website (matchdaylive.app, on Cloudflare Pages) and the web version of the app (app.matchdaylive.app). Like any host, it handles the technical details of web requests, such as IP addresses. Cloudflare also runs our contact form service, stores contact form messages (Cloudflare D1) and checks form submissions for spam (Cloudflare Turnstile).
  • Resend: sends the emails our contact form produces, so we receive your message.
  • Apple and Google: let you sign in with your Apple or Google account. They learn that you are signing in to MatchDayLive and follow their own privacy policies.
  • Apple: distributes the app through TestFlight and the App Store.

We do not share data with anyone else, except where the law requires it. [OWNER TO CONFIRM: any international transfers by these providers and the safeguards used]

Analytics and cookies

The app: no advertising and no analytics or tracking software. We checked the app’s dependencies when writing this draft and found no analytics, advertising or crash-reporting packages. [OWNER TO RE-CHECK before each release]

The website (matchdaylive.app): we use Matomo, an open-source analytics tool that we host ourselves at stats.matchdaylive.app. Analytics data stays on our own infrastructure and is never shared with advertisers or other third parties. [OWNER TO CONFIRM where the Matomo server and its database are hosted]

  • Before you choose, or if you choose “Essential only”: Matomo counts visits without setting any cookies, so it cannot recognise you on a later visit. It records the pages viewed, the page you came from, and your browser and device type. [OWNER TO CONFIRM whether IP addresses are anonymised in Matomo, and how many bytes are removed]
  • If you choose “Accept all”: Matomo also sets two cookies so it can tell repeat visits apart: mdl-id (lasts 13 months) and mdl-ses (lasts 30 minutes). It also sets mtm_cookie_consent to remember that you agreed. [OWNER TO CONFIRM the mtm_cookie_consent lifetime against the live Matomo]
  • Your choice is remembered in your browser’s local storage (under mdl-consent), not in a cookie. You can change it at any time with the “Cookie settings” link at the foot of every page. Choosing “Essential only” withdraws your consent and deletes any Matomo cookies already set.
  • The website sets no advertising cookies and loads no third-party trackers.

Analytics data is kept for [ANALYTICS RETENTION PERIOD].

Contact form

If you use the contact form on matchdaylive.app, we receive what you type (for example your name, email address and message) so we can reply.

  • Your message is stored in a database run for us by Cloudflare (Cloudflare D1), then emailed to us through Resend.
  • Cloudflare Turnstile checks that the form is being sent by a person, not a bot. To do this Cloudflare looks at signals from your browser and device.
  • To stop the form being flooded, we limit how often it can be sent from one address. For this we keep a one-way hash of your IP address, not the address itself.
  • We keep contact messages for 12 months, then delete them automatically. [OWNER TO CONFIRM]

Who can see a team’s data

  • Team owners can see and change everything for their team, and manage members and invite codes.
  • Coaches can see and change squad, lineups and match data.
  • Viewers can see the team’s data but not change it.
  • The platform administrator (Gary Steers) can see team data and member emails when needed to give support, and can remove members or delete a team on request. Every such action is recorded in the audit log.

Anyone you invite into a team will see its players and notes, so only invite people who should.

How long we keep it

[RETENTION PERIOD] Suggested default for the owner to decide: we keep a team’s synced data for as long as the team is active. If a team has had no activity for 24 months we will delete it. When a team, player or member is deleted it is first marked as deleted and hidden, and is permanently erased within [30] days. Admin audit log entries are kept for [12] months.

Note for the owner: deletion in the current build marks records as deleted rather than erasing them, and a deleted team can be restored by the administrator. A permanent erasure step needs to exist before the sentence above is true.

Data held only on your device stays there until you delete it or remove the app.

Your rights

Under UK GDPR you can ask us to:

  • tell you what we hold about you or your child, and give you a copy
  • correct anything that is wrong
  • delete your data
  • restrict or stop how we use it, or object to it

Many of these you can do yourself in the app:

  • edit or delete a player
  • leave a team (the last owner cannot leave)
  • as a team owner, delete the team

The platform administrator can also delete a team on request. Deleting your account is currently done on request by email to [CONTACT EMAIL]. There is no button for it in the app yet. We aim to reply within one month.

If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Security

Synced data is held in a database that only lets signed-in team members see their own team’s records. No system is perfectly secure, so we also ask coaches to keep what they record to a minimum.

Changes to this policy

If we change this policy we will update the date at the top. If a change matters, such as a new service handling your data, we will tell signed-in users in the app.

Contact

  • [OPERATOR NAME AND ADDRESS]
  • [CONTACT EMAIL]