Privacy Policy

What We Collect

Account Information

When you create an account, we store:

• Email address — for login, password resets, and important account notifications
• Nickname — your public display name
• First and last name — optional, shown on your profile if you choose
• Password — stored as a one-way hash; your original password cannot be recovered or viewed by anyone

If you sign in with Google, we receive your name, email address, and profile picture. We do not request access to your Google contacts, calendar, or any other account data.

Content You Create

• Feed posts, comments, and replies
• Stadium visit check-ins
• Match attendance records
• Venue and match ratings
• Profile photo

Moderation Data

If you report content or a user, we store who reported it, the content or user reported, and the reason given, so our moderation team can review it. If you block another user, we store which accounts you've blocked so we can hide their content from you (and yours from them).

Technical Data

• Session cookie — a session cookie required to maintain your login. We do not use tracking or advertising cookies.
• Search coordinates — when you search for matches near a location, we process those coordinates to return results. We do not build a location history.

What We Do NOT Collect

• No analytics or tracking (no Google Analytics, no pixel trackers)
• No advertising data
• No device fingerprinting
• No browsing history

How We Use Your Data

• Provide the service — show you matches, display your profile to other users, deliver your feed posts
• Account security — verify your email, reset your password, prevent abuse
• Notifications — send you emails about activity relevant to you (you can control these in settings)

We do not sell, rent, or share your personal data with advertisers or data brokers.

Third-Party Services

Tribunly relies on the following external services to operate:

Your Rights

View Your Data

Your profile, posts, and activity are visible to you in the app at all times.

Edit Your Data

You can update your name, nickname, email, and profile photo in Settings at any time.

Delete Your Account

You can delete your account from Settings, in the app or on the website. Deletion is immediate and irreversible — there is no grace period, and it cannot be undone once confirmed. See Delete Your Account for the full list of what's erased and what's kept (comments are replaced with a "[deleted]" placeholder so other people's replies stay intact). A confirmation email is sent once deletion is complete.

If you can't log in to delete your account yourself, contact privacy@tribunly.com from the email address on file and we'll process the deletion for you.

Data Export

You may request a copy of all your personal data by contacting privacy@tribunly.com. We will provide it in a standard machine-readable format within 30 days.

Data Retention

• Active accounts — data is kept as long as your account exists
• Deleted accounts — personal data is erased immediately (see Delete Your Account above)
• Content reports — kept while under review and for a reasonable period afterward to detect repeat abuse, then deleted
• Blocks — kept until you remove them in Settings
• Server logs — kept for up to 14 days for debugging, then automatically deleted

Security

We protect your data with:

• Encrypted connections (HTTPS) for all traffic
• Hashed passwords (never stored in plain text)
• CSRF protection on all forms and API endpoints
• Rate limiting to prevent abuse

Children

Tribunly is not intended for users under 16. We do not knowingly collect data from children.

Changes to This Policy

If we make significant changes, we will notify you via email or an in-app notice. Minor wording changes will be reflected in the "Last updated" date above.

Contact

For any privacy questions or requests: privacy@tribunly.com

[Company Name], [Address]