Privacy Policy

We collect personal information that you voluntarily provide when you register an account — typically your email address, display name, and username — whether you sign up on the website or in the ClawFA mobile app. If you use a social login (for example Apple or Google), we receive the profile information that provider shares with us (see Social Logins). We do not ask for or knowingly collect sensitive personal information (for example financial details or government identifiers).

Depending on how you use the Services, we may also process:

• account preferences such as followed clubs and players, email notification preferences, and (in the app) push notification preferences;
• on mobile devices that opt in to push notifications, a device push token (and platform) so we can deliver alerts you requested;
• technical and usage information — for example IP address, browser or device characteristics, app version, and approximate diagnostics needed to run and secure the Services; and
• crash and product-analytics events from the mobile app when those features are enabled in a given build (see Crash Reporting and Product Analytics).

We process your information to:

• create and manage your account;
• operate, maintain, and improve the Services (website and apps);
• send account-related communications and optional product notifications you have requested (email and/or push);
• diagnose crashes and reliability issues; and
• protect the Services against fraud and abuse.

If you are located in the EEA or UK, we process your information on the following legal bases: your consent, where you have given it (for example notification permissions); performance of a contract, where processing is necessary to provide the Services you have requested; and our legitimate interests, such as keeping the Services secure and functioning correctly, provided those interests are not overridden by your rights.

We do not sell your personal information. We may share information with service providers who help us operate the Services, bound by contractual obligations to keep it confidential, or where required by law. Depending on configuration, that can include:

• authentication providers (currently Clerk);
• hosting and infrastructure providers that run clawfa.ai and our APIs;
• Apple and Google (and related push delivery infrastructure) when delivering push notifications you have enabled;
• crash-reporting and product-analytics providers used by the mobile app (currently Sentry and PostHog, when those keys are configured for a build); and
• for the website, Cloudflare Web Analytics (privacy-preserving traffic and performance measurement at the edge).

On the website we use a small number of cookies that are strictly necessary to keep you signed in and to remember your preferences. You can set your browser to refuse cookies; doing so may affect parts of the Services that rely on a signed-in session.

Website pageviews and Core Web Vitals are measured with Cloudflare Web Analytics, injected at Cloudflare’s edge for the clawfa.ai zone. It is designed to be privacy-preserving and does not rely on an advertising identifier. We do not use Google Analytics on the website.

When a ClawFA app build is configured with crash reporting, we use Sentry to collect diagnostics such as device and OS information, app version, stack traces, and related error context so we can fix bugs. If you are signed in, we may associate crash events with your account identifier (and email, where available) to reproduce issues.

When a build is configured with product analytics, we use PostHog to understand how the app is used (for example screen views, lifecycle events, and named product events). If you are signed in, we may identify analytics events with your account identifier, and may include email or display name as properties. Analytics clients may also use a device-scoped identifier separate from your account.

These mobile tooling SDKs are optional at the build level: if a key is not present, that SDK does not run. Signing out or deleting your account clears the analytics and crash-reporting user association we set from the app.

If you allow push notifications on a device, we store a push token linked to your account so we can deliver alerts you have enabled (for example club news or match alerts). You can silence channels or pause all push in Settings, or revoke permission in your device system settings. Deleting your account disables push delivery for that account.

The Services may offer you the ability to register or log in using a third-party account (a “Social Login”), including Sign in with Apple and Google where available. Where you do this, we receive the profile information you agree to share with that provider, such as your name and email address.

We and our service providers operate internationally, which means your information may be processed in countries other than the one in which you reside, including the United Kingdom and the United States. Where we transfer information out of the EEA or UK, we rely on appropriate safeguards recognised under applicable data protection law.

We keep your information for as long as your account is active or as needed to provide the Services. After account deletion we soft-delete your account record (so historical attribution such as authored posts can remain coherent) and stop actively using it for delivery of notifications. We will delete or anonymise personal information when it is no longer needed for these purposes, unless a longer retention period is required by law.

We use appropriate technical and organisational security measures to protect your information. However, no electronic transmission or storage method is completely secure, and we cannot guarantee absolute security.

The Services are not directed at, and we do not knowingly collect personal information from, anyone under 18 years of age. If we learn we have collected information from a user under 18, we will delete that information.

If you are in the EEA or UK, you have the right to request access to, correction of, or deletion of your personal information, to object to or restrict certain processing, and to data portability. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office). To exercise any of these rights, contact us at [email protected].

Most browsers include a “Do-Not-Track” feature. No uniform technology standard for recognising this signal has been finalised, so the Services do not currently respond to it.

If you are a resident of a US state with a comprehensive consumer privacy law, you may have additional rights, such as the right to know what personal information we hold about you, to request its deletion, and to opt out of certain processing. We do not sell personal information. To exercise these rights, contact us at [email protected].

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised “Last updated” date, and the updated version will be effective as soon as it is accessible.

Questions or comments about this Privacy Policy may be sent to [email protected]. For requests related to your legal rights, email [email protected].

You can review and update your account information from Settings on the website or in the ClawFA app at any time. To delete your account, use Delete account in Settings in the app (or email [email protected] if you need help).