Privacy Policy

Pitchnotes
Last updated: August 7, 2026

Pitchnotes ("Pitchnotes," "we," "us," or "our") operates getpitchnotes.com (the "Service"), a platform for football scouting analysis and community content. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use the Service.

By using the Service, you acknowledge that you have read this Privacy Policy.

Data Controller

Until Pitchnotes is incorporated, the data controller responsible for your personal data is the individual operating Pitchnotes. Once Pitchnotes is incorporated, this section will be updated with formal company details.

Contact: privacy@getpitchnotes.com

1. Information We Collect

1.1 Account Information. When you sign up, we collect information through our authentication provider (Auth0), which may include:

  • Name and username
  • Email address
  • Password and other authentication identifiers (stored securely by Auth0; we never see your raw password)
  • Profile information you choose to add (e.g., bio, avatar/profile image)
  • Account creation date and account preferences

1.2 Content You Provide. When you use the Service, we collect the content you create, including:

  • Scouting notes, analysis, and posts
  • Upvotes and other engagement actions
  • Comments and any other user-generated content

Information you choose to publish, including scouting notes, comments, profile information, and engagement activity, may be visible to other users and may remain visible until removed. This content may be publicly visible as part of your public track record on the platform.

1.3 Usage Data and Server Logs. We use Vercel Analytics to understand how the Service is used. This tool is cookieless and privacy-friendly — it collects aggregated or de-identified usage information such as page views and general traffic patterns, and does not track you individually across sites or use persistent identifiers.

We may also automatically collect technical information such as IP address, browser type, device information, operating system, referring pages, timestamps, and error logs, generated through normal server operation, for security, fraud prevention, and troubleshooting.

1.4 Payment Information (Future). If and when we introduce premium accounts or paid features, payments will be handled by a third-party payment processor. We do not currently store or process payment card details ourselves, and this policy will be updated before any payment processor is introduced.

1.5 Advertising (Future). We do not currently serve ads. If we introduce advertising in the future, this policy — and our cookie practices — will be updated in advance to describe what data ad partners collect and how you can control it.

2. How We Use Your Information

We use the information we collect to:

  • Create and manage your account
  • Operate core features (posting, upvoting, scouting profiles, public track records)
  • Maintain and improve the Service
  • Communicate with you about your account or updates to the Service
  • Detect, prevent, and address technical issues, abuse, or fraud
  • Comply with legal obligations

3. Legal Basis for Processing (UK/EU Users)

Where UK GDPR or EU GDPR applies, we rely on the following legal bases:

  • Contract: processing necessary to provide the Service you signed up for
  • Consent:where you've given specific consent (e.g., optional marketing communications)
  • Legitimate interests: for analytics, security, and improving the Service, balanced against your rights
  • Legal obligation: where required by law

4. How We Share Your Information

We share personal data only as needed to operate the Service:

RecipientPurpose
Auth0Authentication and account security
SupabaseDatabase hosting and storage of application data
VercelHosting and cookieless analytics
Future: payment processorProcessing premium/subscription payments (once introduced)
Future: ad partnersServing advertising (once introduced, with updated disclosures)

For reference, you can review each provider's own privacy practices: Auth0, Supabase, Vercel.

We do not sell your personal data. We may disclose information if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets (with notice to you where required).

5. International Data Transfers

Pitchnotes serves users globally, and our service providers (such as Auth0, Supabase, and Vercel) may process and store data in countries outside your own, including the United States. Where we transfer personal data from the UK or EU to a country without an adequacy decision, we rely on appropriate safeguards, including the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or the EU Standard Contractual Clauses, as applicable.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we aim to delete or de-identify your personal data without undue delay, except where we're required to retain it for legal, security, fraud prevention, or dispute-resolution purposes. Publicly posted content (e.g., scouting notes) may persist in aggregated or de-identified form as part of the platform's historical record, unless you request removal.

7. Your Rights

Depending on where you live, you may have rights including:

  • Access – request a copy of the personal data we hold about you
  • Rectification – correct inaccurate or incomplete data
  • Erasure– request deletion of your data ("right to be forgotten")
  • Restriction/objection – limit or object to certain processing
  • Portability – receive your data in a portable format
  • Withdraw consent – where processing is based on consent

UK and EU users can lodge a complaint with their local data protection authority (in the UK, the ICO). Users in other regions (e.g., California residents under the CCPA) may have similar rights under applicable local law.

To exercise any of these rights, contact us at privacy@getpitchnotes.com. We may request information to verify your identity before responding to your request. We aim to respond to requests within one month where required under applicable law.

8. Cookies

The Service currently does not use cookies for analytics (Vercel Analytics is cookieless). We use essential cookies or similar authentication technologies strictly necessary to keep you logged in; Auth0 may use cookies or similar technologies for this purpose, depending on implementation. If we introduce advertising or additional analytics in the future that require cookies, we will update this policy and provide a cookie consent mechanism where required by law.

9. Children's Privacy

The Service is not directed at children under 16, and we do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without appropriate consent where required, we will delete it. If you believe a child has provided us with personal data, please contact us so we can address it.

10. Security

We take reasonable technical and organizational measures to protect your data, including measures such as encryption in transit, access controls, and authentication safeguards, relying in part on the security practices of our infrastructure providers (Auth0, Supabase, Vercel). However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date, and where appropriate, by direct notice (e.g., email). Continued use of the Service after changes become effective constitutes acceptance of the updated policy where permitted by law.

12. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites, and we encourage you to review their privacy policies.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

privacy@getpitchnotes.com

← Back to home