Privacy Policy

1. Who we are

Staty ("we", "us") is operated by D. Platten, trading as Staty, of Unit 170474, PO Box 7169, Poole, BH15 9EL. We're the data controller for the information described in this policy. You can contact us about privacy matters at support@staty.co.uk.

2. What we collect, and why

We collect different information depending on who's using Staty:

Club owners (coaches who sign up)

• Name and email address, to create and secure your account
• Billing information (handled entirely by Stripe — we never see or store your card details ourselves)
• Team, player, match, and stats data that you enter into the app
• If you accept advertising cookies: how you arrived at and moved around our public pages and your coach dashboard, and — on the first visit to your dashboard after signing up — your own email address, shared with Meta in hashed form to measure our adverts (see Section 8)

Players (including children)

• Name, squad number, and position, entered by their coach
• An email address, if the coach chooses to invite them to their own login
• Match statistics and coach's notes logged against them

We only collect what's needed to run the service: managing your account, letting you log and view stats, processing payments, and communicating with you about the service (e.g. invite emails, password resets).

3. Children's data

Staty is used by grassroots football coaches to track statistics for youth players, many of whom are under 18. A player's data (name, stats, an optional email for their own login) is entered and managed by their coach, not by the child directly. We rely on the coach's relationship with the players and their parents/guardians to ensure appropriate consent is in place for a child's data being recorded this way — coaches should have their own basis (e.g. club membership agreements, parental consent) for holding this information about children in their care.

We collect the minimum necessary for a player's stats to function, don't use children's data for any marketing purpose, and don't share it outside the club's own coaching staff. A parent or guardian can ask their coach, or contact us directly, to have a child's account and data removed at any time.

4. Legal basis for processing

• Contract: processing your club's data is necessary to provide the service you've signed up for
• Legitimate interests: keeping the service secure, preventing misuse, and improving what we offer
• Consent: where a player is invited to their own login, by choosing to send that invite; and for the Meta Pixel advertising cookie, which only runs if you click "Accept" on our cookie banner (you can withdraw at any time via "Cookie settings")

5. Who we share data with

We use a small number of trusted service providers to run Staty, each acting as a processor on our behalf:

• Supabase — hosts our database and handles login/authentication
• Stripe — processes all payments; we never see full card details
• Vercel — hosts the application itself, and provides Vercel Web Analytics (aggregated, anonymised site traffic — no cookies, no individual profiling; see Section 8)
• Meta Platforms Ireland Ltd — only if you accept advertising cookies: the Meta Pixel, which helps us measure and improve our Facebook and Instagram adverts (see Section 8). For this data, Meta acts as a joint controller with us under its Controller Addendum.

We don't sell personal data to anyone. Players' and parents' data is never shared with Meta or any other advertising service.

6. International data transfers

Some of our service providers may process or store data outside the UK. Where that happens, we rely on their own compliance mechanisms (such as Standard Contractual Clauses) to ensure your data stays protected to UK standards. [Confirm and update this section with the specific hosting regions Supabase/Vercel/Stripe use for your account before publishing.]

7. How long we keep data

We keep your data for as long as your account is active. If you cancel your subscription, we keep your data for a reasonable period afterwards in case you resubscribe, then delete it. You can ask us to delete your data sooner at any time — see Section 9.

8. Cookies, analytics and advertising

We use a strictly necessary login session cookie that keeps you signed in. We also use Vercel Web Analytics to see aggregated site traffic (which pages are visited, roughly how often); it doesn't use cookies, doesn't build a profile of individual visitors, and can't track you across other sites.

Meta Pixel (only with your consent). If you click "Accept" on our cookie banner, we load the Meta Pixel on our public pages, the signup page and the coach dashboard. It tells Meta which of those pages you visit and when you start a free trial or subscribe, so we can see which adverts lead to sign-ups and show our adverts to relevant people. When a coach signs up, we also pass their own email address to the pixel; it's hashed (scrambled) in your browser before it's sent, and Meta uses it to match the sign-up to a Facebook or Instagram account. Meta may combine this with other information it holds about you under its own privacy policy.

The pixel never runs on player pages, for anyone logged in as a player, or on the login and password pages, and we never send Meta any player's or parent's details. If you click "Reject", or don't choose, it doesn't load at all. You can change your choice any time with the "Cookie settings" link at the bottom of the page. See our Cookie Policy for details.

9. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Request deletion of your data
• Object to or restrict certain processing
• Receive your data in a portable format
• Complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data

To exercise any of these rights, contact us at support@staty.co.uk.

10. Changes to this policy

We may update this policy from time to time. We'll update the date at the top of this page when we do, and let you know directly if the changes are significant.