YOUR PRIVACY.

1. Who is responsible

Lewis McColl, trading as Four Stands, is the controller responsible for personal information used to operate fourstands.co.uk. This notice covers the website and its home-screen web-app experience.

For privacy questions, account closure and data-rights requests, email privacy@fourstands.co.uk or use our contact form.

2. Information you provide

Account information includes first and last names, date of birth, display name, email, authentication information and the terms version and acceptance time recorded at signup. Supabase handles password authentication; your password is not displayed in your profile.

Profile information includes your chosen club, appearance settings, optional telephone number and optional postal address. Address fields currently store information you choose to put in your profile; there is no delivery or location-tracking feature using them. You can leave them blank or remove their contents. We also store separate email and text marketing choices and the recorded time/version of changes.

Your Groundhopper Passport can contain planned and visited grounds, visit dates, ratings, notes and checklist entries you choose to save.

Problem reports contain the name, email, category, message and affected page you submit. The form does not take a screenshot. It stores the page path without its query string or fragment, which may contain private values. Please do not include passwords, payment details or unnecessary information about other people.

Stadium photo submissions contain the image, your account identifier, the selected ground, original filename, file type and size, your chosen photographer credit, any date or note you add, the rights-confirmation version and time, and the review status. Submitted files stay private unless and until Four Stands chooses to publish them.

Beta feedback contains your account identifier and email, four one-to-five ratings, anything you choose to write about confusing or missing features, whether you welcome a follow-up about those answers, and submission/update times.

3. Technical information and external resources

Hosting, authentication, email and security services process technical information needed to deliver requests, such as IP addresses, request details and browser/device information.

To limit repeated reports, the report endpoint stores a daily changing hash derived from an IP address, or an email fallback if the address is unavailable. This field does not store the raw IP address, although hosting and security providers can process IP addresses separately.

For first-party audience measurement, Four Stands records the page path, date, hour and page-view total. An approximate daily visitor count uses a daily changing hash derived from the request IP address and browser information; the same daily hash supports hourly totals without becoming a persistent identifier. The raw IP address and browser string are not stored in the analytics tables, the hash is not used to identify you, and owner-dashboard visits are excluded.

Four Stands also records aggregate link clicks using the source page, destination without its query string or fragment, short link label, date, hour and click total. It does not store an account identifier with a click. Signup reporting converts the date of birth already supplied for account eligibility into an age band and stores aggregate counts by signup date and beta cohort; the analytics record does not contain the exact birth date, name or email address.

Your browser can contact external providers when loading images or crests, following publisher links, or using the direct football-data fallback. Those providers receive connection information and may handle it under their own privacy notices.

4. Why information is used

Accounts and requested features: information necessary to provide account access, confirmation/recovery emails, cloud sync and Passport functionality is used to perform our agreement with you.

Account administration, profile preferences and the 16+ rule: we rely on legitimate interests in operating the service, administering the profile you choose to maintain and applying its eligibility rule. The age check uses the date you enter; it is not independent identity or age verification. Optional profile contact fields are not required for browsing or core football features.

Security: legitimate interests in protecting visitors and the service support authentication, CAPTCHA where enabled, submission limits and investigating misuse.

Support: legitimate interests in investigating faults and responding to visitors support handling contact messages. Performance of our agreement can apply where a request is necessary to support an account feature.

Stadium photo contributions: your request to submit a photo and the permission you give at submission support storing, reviewing and, if approved, publishing the photo with your chosen credit. Legitimate interests in improving the ground directory support moderation and keeping a record of the decision.

Audience measurement: legitimate interests in understanding which pages are useful, checking whether the beta is being used and improving the service support limited first-party page-view and approximate daily-visitor statistics.

Beta audience reporting: legitimate interests in understanding broad signup volumes and age ranges support aggregate reporting. Exact dates of birth remain part of the account eligibility record described above; the analytics view uses age bands rather than displaying exact birth dates.

Beta research: legitimate interests in improving Four Stands support reviewing tester ratings and comments. If you choose the separate follow-up box, we rely on that choice to email you about those answers. Beta follow-up is separate from general marketing.

Promotional email and text: we rely on your separate consent for the channel you choose. Account creation and accepting the terms do not give marketing consent.

Legal matters: information may be processed to meet a specific legal obligation or, where appropriate, for legitimate interests in establishing, exercising or defending a legal claim. We consider the purpose, necessity and effect on your rights when relying on legitimate interests.

5. Required information and choices

Signup requires first and last names, date of birth, display name, email, a password and agreement to the terms. The form will not create an account without the required details or with an entered age under 16. Public browsing remains available without an account.

Contact numbers, postal addresses and marketing choices are optional. The report form asks for your name, email and a message so a problem can be investigated and followed up. Sending a report does not subscribe you to marketing.

Stadium photo submission is optional and available only while signed in. A photo, photographer credit and confirmation that you hold the necessary rights are required if you choose to submit; the date taken and note are optional.

Beta feedback is optional and available while signed in. The four ratings are required to submit the form; written comments and permission for a follow-up email are optional. Submitting feedback does not subscribe you to marketing.

6. Marketing preferences

Email and text marketing are separate choices and start unticked. You can withdraw either choice in Profile and save the change. Withdrawal does not affect the lawfulness of earlier processing based on consent.

Marketing choices are stored separately from essential confirmation, security and password-recovery messages. Optional marketing is not required to use the account. Before promotional sending begins, messages must have a working opt-out route and withdrawals must be respected. A minimal suppression record may be retained to prevent further marketing after an opt-out.

7. Providers and sharing

OpenAI Sites and Cloudflare infrastructure provide website hosting and site storage, including the private problem-report database. Supabase provides account authentication and stores synced account/profile and Passport data. Resend sends transactional account emails. Cloudflare Turnstile processes security challenges on the forms where it is enabled.

Supabase also stores stadium photo submissions in a private storage bucket and holds their review records. Approved photographs may later be copied into the public ground-guide assets with the submitted credit.

These services receive information needed for their functions; not every provider receives every profile field. Publishers and external image or data providers may receive information when your browser connects to them. Four Stands does not sell your profile information or treat a marketing opt-in as permission for third-party marketing.

Information may also be disclosed when required by law or where reasonably necessary to investigate fraud, address security risks or handle legal claims.

8. Processing locations

The services used by Four Stands operate infrastructure in multiple countries. This notice does not promise that all processing stays in the UK. We have not yet confirmed a complete account-specific list of processing locations and international-transfer arrangements for every provider.

Use the privacy contact form to ask about processing locations or safeguards. This section will be updated as those arrangements are verified; it should not be read as confirmation that a particular international-transfer mechanism has already been checked.

9. How long information is kept

Account/profile and Passport data remain stored while you use the account, unless removed through the available controls or following a request. The current service has no automatic deletion rule for inactive authentication accounts.

Problem reports are saved in private site storage and remain there until manually deleted. There is currently no automatic time-based deletion of reports or their associated abuse-control hashes. Retention decisions must consider whether a report is still needed to resolve an issue, prevent abuse or deal with a legal claim; storage without a time limit is not a reason to keep information that is no longer needed.

First-party daily and hourly page-view totals and daily-changing visitor hashes are automatically removed after 90 days. Aggregated figures may be retained for longer where they can no longer be linked to a browser or network identifier.

Aggregate link-click records are automatically removed after 90 days. Aggregate signup counts and age bands may remain while they are useful for understanding the beta; they do not contain names, emails, exact birth dates or account identifiers.

Marketing preference and acceptance records remain associated with the account unless changed or deleted. Any retained consent or suppression evidence should be limited to what is needed to respect choices and address disputes.

Pending and rejected stadium photo submissions are kept while needed for review, rights records, abuse prevention or a legal claim, and should then be deleted. Approved submissions can remain while the photograph is used in the ground guide. You can ask for withdrawal or removal using the privacy contact details.

Account-linked beta feedback is kept while it is useful for the beta review and product decisions. It will be reviewed at least annually and deleted or anonymised when it is no longer needed. You can ask for its removal using the privacy contact details.

Hosting/authentication logs and backups can have separate provider retention settings. Those exact periods have not yet been verified for every service. We cannot promise immediate removal from every backup when an active record is deleted. You can ask for the retention information relevant to your request.

10. Cookies and browser storage

Four Stands uses browser storage for sign-in sessions, club/appearance choices, locally saved Passport data and the completion state of the Founding 50 checklist. Checklist progress records only whether the Scores, match-centre and feedback steps were completed on that device. A service worker caches a small offline page and icons. Its current configuration does not cache account pages, API responses or live scores.

Clearing site data can sign you out and remove unsynced local entries. Cloud copies can remain until deleted separately. Cookies, local storage and offline caches are different ways information can be held on your device.

Turnstile and hosting/security services process technical signals and may use storage according to their configuration. Four Stands' first-party audience measurement does not set an analytics cookie or place an analytics identifier in your browser. There is no advertising tracker. Any future non-essential tracking will require a fresh assessment and appropriate information and controls.

11. Your rights

Depending on the circumstances and lawful basis, you may request access, correction, erasure, restriction or portability of personal information. You can object to processing based on legitimate interests and to direct marketing, and withdraw consent where it is relied upon. These rights have conditions and are not all absolute.

Use the contact form to make a request. We may ask for proportionate information to verify your identity, but do not send your password. Requests must be handled within the applicable legal time limit, normally one month, with any permitted extension explained where relevant.

You can raise a concern with the UK Information Commissioner’s Office without contacting us first. Its complaints service is available at ico.org.uk/make-a-complaint/.

12. Deleting data and closing an account

The current Delete cloud data control removes synced profile/Passport records and clears specified profile metadata. It does not close the Supabase authentication account. Browser copies and separately held reports are also outside that control.

For full account closure or a broader erasure request, use the contact form. Any information that must lawfully be retained will need to be considered separately. Deleting a local browser copy does not itself delete a synced cloud copy.

13. Age checks and updates

Accounts are intended for people aged 16 and over. Contact us if you believe an account belongs to a younger child. Automated checks include the entered-date age check, CAPTCHA and report-submission limits. If one appears to block you incorrectly, use the contact form for help.

This notice will be updated when purposes, providers or features change. Important changes will be brought to users’ attention where required. An unrelated earlier marketing choice will not be treated as permission for a new purpose.

14. Beta testing and waiting list

Accounts created through the Founding 50 invitation carry a tester-cohort label and a record of consent for Four Stands to contact the tester about their experience and feedback. This contact is limited to beta research and does not opt the tester into general marketing.

Signed-in testers can submit and later update one account-linked beta-feedback record. The owner dashboard shows the ratings, comments, account email and follow-up choice so Four Stands can review the beta and respond where invited.

If the beta is full, you can optionally give us your email address and consent to hear when the next tester batch opens. We record the address, consent time, privacy-notice version and source. This is separate from account marketing preferences and is not permission for general promotional email. You can ask to be removed at any time using the privacy contact form or privacy@fourstands.co.uk.