Privacy Policy

1. Information We Collect

Information you provide

• Account data: display name, email address, password (hashed — we never store plaintext)
• Profile data: avatar photo, banner photo, bio, home city, favorite sport, social handles
• Content: field notes, photos, field annotations, amenity pins, favorites

Information collected automatically

• Device & browser data: IP address, browser type, operating system, device type (via standard HTTP headers)
• Usage data: pages visited, features used, time on site (via Vercel Analytics — no cookies, privacy-focused)
• Location data: only when you explicitly use the "Near Me" feature. Browser geolocation requires your permission and is never stored on our servers — it is used only for the proximity query.

2. How We Use Your Information

• Provide and improve the Service (display your profile, show your content, rank the leaderboard)
• Authenticate your identity and protect your account
• Send transactional emails (account confirmation, password reset)
• Moderate content for quality and safety
• Generate anonymized, aggregate analytics to improve the Service

We do not sell your personal data. We do not serve targeted advertising. We do not share your data with third-party advertisers.

3. Third-Party Services

We use the following third-party services:

• Supabase (database, authentication, file storage) — your data is stored in Supabase's infrastructure. See Supabase Privacy Policy.
• Vercel (hosting, analytics) — privacy-focused analytics with no cookies. See Vercel Privacy Policy.
• Mapbox (satellite maps) — map tiles are loaded from Mapbox when viewing facility maps. See Mapbox Privacy Policy.

4. Data Retention

Your account data is retained as long as your account is active. If you delete your account, your profile and personal data will be removed. Content you contributed (field notes, photos, annotations) may be retained in anonymized form to preserve community knowledge.

5. Data Security

We implement industry-standard security measures including: encrypted connections (HTTPS/TLS), hashed passwords, row-level database security policies, role-based access controls, and audit logging of administrative actions. No system is perfectly secure — we cannot guarantee absolute security but take reasonable measures to protect your data.

6. Your Rights

You have the right to:

• Access your personal data (visible on your profile page)
• Correct inaccurate data (edit your profile at any time)
• Delete your account and associated personal data
• Export your data — contact us and we will provide a copy
• Withdraw consent — you can stop using the Service at any time

To exercise these rights, contact us at support@awaygame.app.

7. Children's Privacy

Away Game is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are a parent and believe your child has provided us with personal information, please contact us and we will delete it.

8. Cookies

We use essential cookies only — specifically, authentication session cookies managed by Supabase to keep you logged in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Vercel Analytics is cookie-free.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. The "Last updated" date at the top reflects the most recent revision.

10. Contact

Questions about this policy? Contact us at support@awaygame.app.