Privacy Policy

What we collect

• Accounts — a name, email address, and password (stored as a one-way hash, never in plain text) for anyone with an admin, club rep, or match official login.
• Players — name, position, and (where flagged as needing safeguarding — see our Safeguarding policy) a separate public display name.
• Interest signups — an email address, if you register interest on the Zubto homepage ahead of launch.
• A login session cookie — see "Cookies" below.

Why we collect it

To run the accounts and login system, to publish the tournament/team/player information a club chooses to make public, and to let us contact people who've asked to hear about Zubto's launch. We don't sell personal data, and we don't use it for advertising.

Cookies

Zubto sets one cookie: a login session cookie, used only to keep you signed in. It's strictly necessary for the site to work and doesn't track you across other sites. We don't currently use any analytics, advertising, or tracking cookies.

Who else sees it

Zubto is hosted on Vercel, with data stored in a Postgres database on Supabase — both act as our data processors, storing and serving data on our behalf, not for their own purposes.

Your rights

See our GDPR page for how to access, correct, or ask us to delete your data.

Contact

Questions about this policy: [privacy contact email].