Privacy Policy

Draft — not the live policy

This is a DRAFT for Jim to review. It is not a finished privacy policy and should not be treated as legal advice or as the live policy until Jim replaces it.

Stadium Collector is a fan product for logging stadium visits. The account, if you create one, is an email and password stored by our auth provider (Supabase). We use that email to sign you in. We do not sell personal information.

Visits, badges, rankings, reviews, checklists, media you add, and Collector Pass status are kept on this device under a local key (stadium-vault:v1) until cloud sync exists. Settings such as language and notification preferences are kept on this device as well (stadium-vault:settings).

If you send feedback while Supabase is configured, the message (and email, if you include one) is stored in a private feedback table. Other visitors cannot read it. If that table is not set up yet, the form offers email instead.

Notification switches only save a preference on this device. There is no push-delivery backend yet. You can turn the switches off in Settings at any time.

Delete Account asks twice, then calls a server function that deletes the auth user. The service credential for that delete never ships to the website. The same action clears the local collection in this browser. Sign-out only ends the session; it does not delete the account or the on-device log.

Questions about this draft: use Contact in Settings. Replace this page before a public launch.