Privacy policy

• Account: your email; the teams and clubs you follow or join, with your player's jersey number and first name if you add them (only you see the name).
• Sign-in security: a device cookie, the browser type and your network (from your IP address), so stolen cookies don't work and share credit can't be faked.
• Orders: what you bought, when and how you paid. Card details go to Stripe, never to us.
• Galleries: the photos you tick, your cart, and downloads (for your download history and to stop abuse).
• Gallery visits: anonymous counts of visits to each game and of photos opened large, so the photographer sees which games and photos people like — kept as totals with a scrambled device code, never your name, email or IP address.
• Photos of athletes taken at games, and the jersey numbers read from them so families can find their player.
• Referrals: who shared a link with whom, to run the Share & win contest.
• Face search, only where it's switched on and you agree — see the face search policy.

To run the galleries and store: sign-in, access to your team's games, orders and downloads, and service emails (sign-in links, receipts, "new photos from your team", pre-booking notices). We don't sell personal information and don't send marketing emails without asking.

Jersey numbers are read by an AI model running on our own computer — photos are not sent to outside AI services and are never used to train AI.

• Stripe (card payments) and our email provider (sending emails) — only what they need for that.
• Instagram, only for the photos Ania chooses to post on her own account.
• Club staff can see their own teams' galleries. Nobody else sees your account details.
• Authorities, only when the law requires it.

Accounts are for people 13 and older; parents and guardians manage their children's photos. The photos themselves are of athletes — often minors — at sporting events. Parents can ask us to remove a photo of their child from a gallery or from Ania's public posts at any time.

• Your account, until you delete it (Account page → Delete my account).
• Order and payment records: 7 years, for tax and accounting — kept even after the account is deleted.
• Sign-in links: 30 minutes. Server logs: about 30 days.
• Face search data: at most 12 months after the game, as set out in the face search policy.

You can see, change or delete your account, leave a team (which stops its emails), withdraw face search consent and ask for a copy of your data or a correction. We protect data with encrypted connections, encrypted stored secrets and device-bound sessions.

Privacy questions and requests: reply to any email you've received from us.