Privacy Policy

Stat Catcher

Last updated: 14 August 2026

This Privacy Policy explains how Stat Catchers Limited ("Stat Catcher", "we", "us", "our") collects, uses, shares and protects personal data when you use the Stat Catcher application and website at statcatchers.com (the "App").

We are based in the United Kingdom and this policy is written to reflect the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you are outside the UK, please be aware your data will be processed as described here.

Please read the section Children's data carefully. Stat Catcher is used to record grassroots football, which often involves players who are under 18. This affects how the App should be used and who is responsible for the data entered into it.

1. Who we are and how to contact us

Data controller: Stat Catchers Limited, a company registered in England and Wales under company number 17329731, whose registered office is at 88 Hill Village Road, Sutton Coldfield, England, B75 5BE. Contact for privacy questions: privacy@statcatchers.com

For account data (your email, login and profile), we act as the data controller.

For the football data you enter about a team and its players, the team owner who created the team is responsible for deciding what data to collect and why, and for having a proper basis to record data about the players concerned (see section 8). In data-protection terms, the team owner acts as a controller for that data and we act as a processor carrying out their instructions through the App. If you are a player, parent or guardian with a question about a specific team's records, contact that team's manager in the first instance; you can also contact us using the details above.

2. A quick summary

• We collect the account details you give us (email, password, a display name) so you can sign in.
• We store the football information you enter — teams, players, fixtures, lineups and the match events you record.
• We use trusted suppliers to run the service: Supabase (database and login) and Vercel (hosting), both hosted in the EEA (Ireland). We do not use advertising or analytics trackers, and we do not sell your data.
• If you turn on notifications, we store what's needed to send them to your device.
• If you ask to be told when the app launches, we store your email address (and which app store you tapped) so we can email you once it's available — with your consent, which you can withdraw at any time.
• If you tap Share on a finished match, we create a public link that anyone with the link can open without signing in.
• If and when we introduce paid plans, purchases are made through the Apple App Store or Google Play using their in-app purchase systems — we never see or store your card details.
• The App works offline, which means some of your data is stored on your device until it syncs.
• You have rights over your data, including access and deletion. See section 12.

The rest of this policy sets this out in full.

3. The personal data we collect

a) Account and profile data

• Email address and password (your password is stored in hashed form by our authentication provider; we never see it in plain text).
• A display name, if you provide one.
• A unique account identifier and account creation date.

b) Football data you enter When you set up and run a team, you (or people you invite) create records that can include:

• Team name and team badge/logo image.
• Player names, squad numbers and playing positions.
• Fixtures, opponents, competitions, seasons, dates and scores.
• Lineups (which player played where).
• Match events recorded during a game — for example goals, assists, shots, corners, cards, substitutions and other on-pitch actions — and which player and pitch area they relate to.

Some of this data identifies individual players, who may be children (see section 8).

c) Collaboration data

• If you invite someone to help record ("Stat Catchers"), we store the email address you invite them with, and their role and membership once they join.
• We record which signed-in user recorded a given match event or was assigned a recording role.

d) Personal ("follow one player") tracking

• If you use the feature to privately follow a single player during a match, we store the events you tap for that player. This information is private to your account and does not feed the team's official match stats.

e) Notification data

• If you enable push notifications, we store a push token for your device — the identifier that Apple's (APNs) or Google's (FCM) push service provides so a notification can be delivered to the app — together with basic device information. This is used only to send you notifications, such as when you are assigned to record a match.

f) Technical and device data

• Because the App is offline-capable, some of your data is cached locally on your device (in the app's on-device storage) so you can keep recording without a signal, and syncs to our servers when you reconnect.
• Our hosting and infrastructure providers automatically process standard technical data such as IP address, device type, app version and request logs in order to deliver and secure the service.

g) Payment data (if and when you subscribe)

• The App is currently free. If we introduce paid plans and you subscribe, your purchase is processed by the app store you downloaded from — the Apple App Store (iPhone/iPad) or Google Play (Android) — using their in-app purchase systems. Apple or Google collect and handle your payment details; we receive only limited information such as confirmation that a purchase or subscription is active, and we do not receive or store your card details.

h) Waitlist / launch-notification data

• If you ask to be told when the app is available, we store the email address you give us, together with which app store you tapped (Apple App Store or Google Play) and the date you signed up. We use this only to email you about the app's launch, relying on your consent. Any launch email will include a way to unsubscribe, and you can ask to be removed at any time (see section 12).

We do not intentionally collect players' dates of birth, contact details, health data, or any other special-category data through the App's standard fields. Please do not enter such information into free-text fields (for example, a player's name field).

Device permissions. As a mobile app, Stat Catcher may ask your permission to send notifications and to access your camera or photo library (for example, to add a team badge or a photo). We use each permission only for the purpose you grant it, and you can change or withdraw these permissions at any time in your device settings.

4. How we use your data, and our lawful bases

Under the UK GDPR we must have a lawful basis for using your personal data. We rely on the following:

Where we rely on legitimate interests, we have considered your rights and interests and believe our use is proportionate. You can object to that use (see section 12).

Where you enter personal data about other people (players, invited helpers), you are responsible for ensuring you have a proper basis to do so — see sections 1 and 8.

We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not carry out profiling of that kind.

5. Public match share links

When you tap Share on a completed match, the App generates a stable, unguessable link (for example statcatchers.com/share/match/<token>). Anyone who has that link can view a summary of that match — including the score, scorers and match statistics, which may include player names — without signing in.

• Only share these links with people you're happy to see that information.
• Treat a share link like a key: anyone you forward it to can pass it on.
• If you need a link disabled, contact us and we will help.

6. Who we share your data with

We do not sell your personal data or share it for advertising. We share data only with the service providers who help us run the App, and where the law requires.

Our processors:

• Supabase — provides our database and authentication (account login), hosted in the EEA (Ireland). Your account and football data are stored here.
• Vercel — hosts and serves the App from the EEA (Ireland), and processes technical data such as IP addresses and request logs.
• Apple and Google push services — when you enable notifications, messages are delivered through Apple's (APNs) or Google's (FCM) push notification service, depending on your device.
• Apple and Google (app stores) — if and when you buy a subscription, the purchase is processed through the Apple App Store or Google Play in-app purchase system. Apple or Google handle your payment under their own terms and privacy policies; we receive only limited purchase and subscription-status information, not your card details.

Each processor acts on our instructions under a contract that requires appropriate safeguards. We may also disclose data if required by law, to enforce our terms, or to protect the rights, safety or property of our users or others.

7. How long we keep your data

We keep your personal data for as long as your account and teams are active, and as needed to provide the App.

• When you delete a team, the players, fixtures, lineups and match events belonging to that team are deleted with it.
• When you delete your account, the data associated with it is deleted. You can ask us to delete your account by emailing privacy@statcatchers.com.
• After deletion, residual copies may persist for a limited period in line with our providers' standard backup and logging practices, after which they are removed.
• If you join the launch-notification list, we keep your email only until we have told you the app is available or you ask to be removed — whichever comes first.
• We may retain limited information for longer where we need to for legal, security or dispute-resolution reasons.

8. Children's data

Grassroots football teams frequently include players under the age of 18, and often under 13. This means the App is regularly used to record personal data about children.

Who the App is for. Stat Catcher is intended to be set up and operated by adults — managers, coaches, team volunteers and parents/guardians. It is not designed or intended for children to create their own accounts or use independently.

Responsibility for children's data. If you are a manager, coach or parent entering data about a child, you are responsible for ensuring you have the right to do so. In practice this usually means:

• having the consent of, or another lawful basis agreed with, the child's parent or guardian, in line with your club's own policies and privacy notice; and
• only recording what is necessary — a player's name, number, position and on-pitch stats — and nothing more (please don't add sensitive details in free-text fields).

Our commitments. We keep the data we collect about players to the minimum the App needs to function, we protect it as described in section 10, and we support parents and guardians in exercising the rights in section 12. A parent or guardian can ask the team's manager, or us, to access, correct or delete a child's records.

9. Where your data is stored and international transfers

Your data is hosted within the European Economic Area (EEA), in Ireland, by our providers Supabase and Vercel. The UK recognises the EEA as providing an equivalent standard of data protection, so no additional transfer safeguards are required for this hosting.

Some providers — in particular Apple and Google, who deliver push notifications and (if and when we introduce paid plans) process purchases — may process limited data outside the UK and EEA under their own terms. Where that happens, it is protected by appropriate safeguards recognised under UK data-protection law, such as the International Data Transfer Agreement or Addendum.

10. How we keep your data secure

We take appropriate technical and organisational measures to protect your data, including:

• Encryption in transit — the App is served over HTTPS.
• Access controls at the database level — row-level security rules mean each account can only reach the data it is entitled to (your teams, and teams you've been invited to).
• Hashed passwords — handled by our authentication provider; we never store plain-text passwords.
• Reputable infrastructure providers that maintain their own security and encryption-at-rest measures.

No online service can be completely secure, but we work to protect your data and to deal quickly with any issues. If a personal data breach is likely to result in a risk to your rights, we will notify the ICO, and you where required, in line with our legal obligations.

11. Cookies and local storage

The App uses only the storage it needs to function:

• Secure login tokens to keep you signed in (and, on our website, essential cookies).
• On-device storage to let the App work offline and sync later.

We do not use advertising cookies or third-party tracking/analytics cookies.

12. Your rights

Under UK data-protection law you have the right to:

• Access the personal data we hold about you.
• Rectify data that is inaccurate or incomplete.
• Erase your data ("right to be forgotten") in certain circumstances.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Data portability — receive certain data in a portable format.
• Withdraw consent at any time where we rely on consent (for example, turning off notifications).

To exercise any of these rights, contact us at privacy@statcatchers.com. We will respond within one month. Parents and guardians may exercise these rights on behalf of a child.

You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO) — ico.org.uk — though we'd appreciate the chance to help first.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the App. Please check back periodically.

14. Contact

Questions about this policy or your data? Contact Stat Catchers Limited at privacy@statcatchers.com.