Privacy Policy

Privacy Policy

Last updated: 23 March 2026

Information We Collect

We collect information you provide directly to us, information created when you use the service, and limited technical information collected automatically.

• Account Information: If you sign in, we receive account information such as your name, email address, and profile image through Google authentication handled via Supabase.
• Subscription Data: If you purchase or manage a Pro subscription, Stripe processes payment information. We do not store your full payment card details on our own servers.
• Usage and Product Data: We may collect information about how features are used, including saved decisions, selected players, filters, and feature interactions.
• Feedback and Support: Any feedback, suggestions, or support requests you submit through our feedback tools.
• Technical Data: Limited device, browser, and request information used for security, authentication, performance, and service reliability.

How We Use Your Information

• To provide and maintain the Analyser, Decision Matrix, Transfer Trends, Decision Library, Studio, and related features
• To authenticate users, manage accounts, and keep sessions secure
• To process and manage subscriptions and billing-related actions
• To remember your preferences and restore in-progress app state where appropriate
• To monitor performance, diagnose issues, and improve the service
• To respond to feedback, support requests, and service issues

Third-Party Services

We use third-party providers to operate On The Touchline. These providers may process data on our behalf under their own terms and privacy policies.

• Supabase: Authentication, session handling, and application data storage
• Google OAuth: Sign-in and account authentication via Supabase
• Stripe: Payment processing, checkout, billing portal access, and subscription management
• Cloudflare Web Analytics: Aggregate traffic and performance analytics
• Vercel Analytics: Site traffic and product performance analytics
• Vercel / hosting providers: Hosting, content delivery, and operational infrastructure

Cookies, Local Storage, and Similar Technologies

We use browser storage technologies including cookies, local storage, session storage, and similar mechanisms to operate the app and improve the experience. We do not currently use third-party advertising cookies.

Strictly Necessary Storage

• Authentication and session persistence for signed-in users
• Security-related session handling and login return paths
• Checkout return context and subscription flow continuity when you open Stripe checkout
• Core app state needed to keep tools usable during a session, including analyser filters and in-progress decision flow state

Preferences and Functionality Storage

• Theme selection and interface preferences
• Dismissed interface prompts such as onboarding or CTA state
• Anonymous feedback state and similar convenience-only local markers

Locally Stored User Inputs

• Feedback state and related local identifiers used before or alongside authenticated submission flows

Analytics and Measurement

We use privacy-focused measurement tools including Cloudflare Web Analytics, Vercel Analytics, and internal product telemetry to understand traffic, performance, and feature usage. Internal telemetry may include feature interactions, decision-flow steps, selected players, and related product events needed to operate, improve, and protect the service. Preference controls in the app manage optional browser storage such as theme, saved filters, feedback state, and in-progress decision state. We may update this policy and any consent tools if we introduce new analytics, marketing, or advertising technologies in future.

How to Control Cookies and Storage

• You can clear browser cookies, local storage, and session storage through your browser settings
• Clearing storage may sign you out, reset your preferences, or remove saved in-progress state
• You can close or avoid opening Stripe checkout if you do not want Stripe checkout technologies to load during a session

Information Sharing

We do not sell your personal information. We only share information with service providers and infrastructure partners where needed to run the service, process payments, authenticate users, secure the platform, or comply with legal obligations.

Data Security

We use reasonable technical and organizational measures to protect your information. This includes encrypted HTTPS connections and managed third-party infrastructure for authentication, storage, and billing.

Data Retention

We retain account and service data for as long as necessary to provide the service, maintain records, resolve disputes, and comply with legal obligations. If you request account deletion, we will remove or anonymize data where reasonably possible, subject to legal, billing, security, and fraud-prevention requirements.

Your Rights

Depending on where you live, you may have rights to access, correct, delete, or restrict certain personal information we hold about you.

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal data, subject to applicable exceptions
• Cancel your subscription at any time through the billing tools we provide

Legal Framework

This Privacy Policy should be read together with our Terms of Service, which govern your use of On The Touchline.