Privacy Policy

Groundhopper ("we", "us", "our") is operated by Sam Tate, based in the United Kingdom. Groundhopper is the data controller for personal data collected through groundhopper.io. Contact: hello@groundhopper.io

We collect the following categories of personal data: Account data When you create an account, we collect your email address and, optionally, your name. Authentication is handled by Clerk (clerk.com). We do not store your password directly — Clerk manages credential security on our behalf. User-generated content If you use the Groundhopper Log, we store the grounds and matches you choose to log. This data is associated with your account and stored via Clerk's user metadata. Location data If you use the "Use My Location" feature, your browser shares your device's GPS coordinates with us temporarily to find nearby fixtures. We do not store your location after the search is completed. Usage data We use Google Analytics (if enabled) to collect anonymised data about how the Service is used — pages visited, session duration, and general geographic region. This data does not identify you personally. Technical data Standard server logs may include your IP address, browser type, and device information. These are retained for security and operational purposes.

We use your personal data to: • Provide and operate the Service, including your account and Groundhopper Log. • Send account-related emails (e.g. email verification, password reset) via Clerk. • Improve the Service through anonymised analytics. • Detect and prevent fraud, abuse, or security threats. • Comply with legal obligations. We do not use your data for targeted advertising and we do not sell your data to third parties.

We process your personal data on the following legal bases: • Contract: Processing necessary to provide the Service you have requested (account creation, Groundhopper Log). • Legitimate interests: Anonymised analytics to improve the Service; security monitoring. • Consent: Where you have opted in to optional features (e.g. location sharing via the GPS button). • Legal obligation: Where we are required to process data to comply with applicable law.

We share data with the following third-party service providers who process data on our behalf: • **Clerk** (clerk.com) — authentication and user account management. Clerk stores your email address, name, and Groundhopper Log data. Clerk is GDPR-compliant. • **Google Maps Platform** — venue geocoding, routing, and map display. Your search location is sent to Google to compute distances and directions. Google's Privacy Policy applies. • **API-Football** (api-football.com) — fixture and statistics data. No personal data is shared with API-Football. • **OpenWeatherMap** — weather forecasts for fixture venues. No personal data is shared. • **Google Analytics** — anonymised usage analytics (if enabled). Data is processed by Google in accordance with their Privacy Policy. • **Vercel** — the platform on which the Service is hosted. Vercel may process technical log data as part of hosting. We do not share your personal data with any other third parties without your explicit consent, except where required by law.

We use cookies and similar technologies for the following purposes: • **Essential cookies**: Required for authentication (set by Clerk). Without these, you cannot remain signed in. • **Analytics cookies**: Set by Google Analytics to collect anonymised usage statistics. These are only set if analytics is enabled. You can control cookies through your browser settings. Disabling essential cookies will prevent you from signing in to the Service.

We retain your personal data for as long as your account is active. If you delete your account, your personal data (including your Groundhopper Log) will be deleted from our systems within 30 days, except where we are required to retain it for legal or compliance reasons. Anonymised analytics data may be retained indefinitely as it cannot be used to identify you.

Some of our third-party providers are based outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) in accordance with UK GDPR requirements.

Under UK GDPR, you have the following rights regarding your personal data: • **Right of access**: Request a copy of the personal data we hold about you. • **Right to rectification**: Request correction of inaccurate or incomplete data. • **Right to erasure**: Request deletion of your personal data ("right to be forgotten"). • **Right to restriction**: Request that we restrict processing of your data in certain circumstances. • **Right to data portability**: Receive your data in a structured, machine-readable format. • **Right to object**: Object to processing based on legitimate interests. • **Right to withdraw consent**: Where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, contact us at hello@groundhopper.io. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us: hello@groundhopper.io You may also write to us at the address on file with Companies House (where applicable).