The short version

The ClubShed marketing site (clubshed.pro) doesn't collect any personal data, doesn't use cookies for tracking, and doesn't run analytics that track you across sites.

The ClubShed app (app.clubshed.pro) collects the minimum needed to run your account: your email address, your club details, your equipment list. We don't sell, share, or rent data to third parties.

You can delete your account and all associated data at any time.

Who we are

ClubShed is operated by Lucas Seewald. Contact: hello@clubshed.pro.

What the marketing site collects

The marketing site at clubshed.pro is a static site hosted on Cloudflare Pages.

Server logs. Cloudflare keeps standard server logs (IP address, browser, referrer, page requested) for security and performance. These are retained per Cloudflare's policies and not used for advertising or tracking.
No analytics tracking. The marketing site doesn't run Google Analytics, Facebook Pixel, or any third-party trackers.
No cookies. No cookies are set by the marketing site itself.

What the app collects

The ClubShed app at app.clubshed.pro is where personal data is processed. To run your account, we collect:

Account information. Email address, name, password (hashed), club name.
Club data. Equipment list, team names, coach names, allocation history, audit logs.
Payment information. If you upgrade to a paid plan, payment processing is handled by Stripe. ClubShed does not store credit card numbers. We store your Stripe customer ID and subscription status.
Usage data. Basic logs of when you sign in and what actions you take, for security and debugging.

How we use your data

Only for these purposes:

To run your account and provide the service
To send transactional emails (welcome, password reset, billing receipts, overdue equipment reminders)
To debug issues if you ask for help
To comply with legal obligations

We do not sell, rent, or share your data with advertisers, data brokers, or anyone else.

Third parties that process data on our behalf

Cloudflare for hosting and DNS
Lovable / Supabase for the app database and authentication
Stripe for payment processing (only if you upgrade to a paid plan)
Resend for transactional emails

Each of these is GDPR-compliant. We have data processing agreements in place where required.

Your rights under GDPR

If you're in the EU, UK, or EEA, you have the right to:

Access the data we hold about you
Correct inaccurate data
Delete your account and all associated data
Export your data in a portable format
Object to processing
Withdraw consent
Lodge a complaint with a supervisory authority

To exercise any of these, email hello@clubshed.pro. We'll respond within 30 days.

Data retention

We keep your account data for as long as your account is active. If you delete your account, we delete all associated personal data within 30 days, except where we're legally required to keep certain records (for example, financial records for tax purposes).

Children's data

ClubShed is designed for adult club administrators (volunteers, secretaries, kit managers). We don't knowingly collect data from anyone under 16. If you become aware that a child has provided us with personal information, please contact us and we'll delete it.

Note that the equipment tracking feature involves recording who has what kit, which can include youth player names entered by club administrators. The legal basis for processing this data is legitimate interest in running the club's operations, with the data controller being the club itself, not ClubShed.

Changes to this policy

If we make material changes to this policy, we'll notify account holders by email before the changes take effect. Minor changes (clarifications, typo fixes) will just have an updated date at the top of this page.

Contact

Questions about this policy or how we handle data? Email hello@clubshed.pro.