Privacy Policy

Account data: your email address, and either a password (hashed, we never see or store it in plain text) or, if you sign up with Google, the basic profile info Google shares for that sign-in.

Profile data you choose to add: username, bio, avatar photo, banner photo, favorite club.

Activity you create: match ratings, written reviews, comments on reviews, lists, watchlist entries, tags, moment captures, and an optional annual watch-challenge goal. All of this is tied to your account.

Automatically collected: basic, aggregated page-visit analytics (via Vercel Analytics — no individual tracking profile is built from it), and technical error reports if something breaks while you're using the site (via Sentry — these can include the page you were on and what went wrong, not your account password or review content).

We don't buy or sell any data about you, run behavioral ad targeting, or share your activity with data brokers. There is no advertising on this site.

To run the actual product: show your ratings/reviews/lists back to you and to other users (per the visibility rules below), power your Diary and Stats pages, and — if you use it — send you Notifications about likes and follows via the in-app Activity feed. We do not currently send marketing emails.

Ratings, reviews, comments, and public lists are visible to anyone, including signed-out visitors — this is a social site, and that visibility is the point, the same way it works on Letterboxd. Your watchlist and private lists are visible only to you. Your email address is never shown publicly.

We use a small number of cookies to keep you signed in (via Supabase Auth) and to run a bot-protection check on sign-up/sign-in (Cloudflare Turnstile, which briefly verifies you're a real visitor, not a script). We don't use third-party advertising cookies.

This site is built on other companies' infrastructure, each of which processes some data on our behalf under their own privacy terms:

• Supabase — hosts our database, authentication, and file storage (avatars/banners).
• Vercel — hosts the website itself and provides basic aggregate analytics.
• Sentry — error monitoring, so we can find and fix bugs.
• Cloudflare — the Turnstile bot-check on sign-up/sign-in.
• Google — only if you choose to sign in with Google instead of email/password.

Match, team, and player data (scores, lineups, stats, crests, photos) come from Highlightly, api-football, and Wikimedia Commons — none of that is data about you, so it isn't covered by this policy.

We keep your account data for as long as your account exists. Because this is a small, self-run project on a free-tier database plan with no built-in backup service, we run our own periodic backups of user-generated content (ratings, reviews, lists, watchlist) so a bug or accident doesn't permanently destroy it — these backups are stored privately and are never used for anything besides restoring lost data.

You can edit your username, bio, avatar, banner, and favorite club at any time from your profile. You can delete an individual rating, review, comment, or list yourself from the site. There is no self-service "delete my account" button yet — email naim20ish08@gmail.com and we'll delete your account and associated data by hand, normally within a few days.

You can also export a CSV copy of your own diary at any time from your profile's edit page.

This site isn't directed at children, and we don't knowingly collect data from anyone under 13. If you believe a child has created an account, email us and we'll remove it.

If this policy changes in a way that matters, we'll update the date at the top of this page. Given the size of this project, we don't currently send a separate notification for minor wording changes.

Questions, data requests, or anything else: naim20ish08@gmail.com.