← Match Day

Privacy Policy

LAST UPDATED MAY 21, 2026

Match Day is local-first by default. If you don't sign in, the app and the Stage Setter web editor do all of their work on your device — no data leaves it. Sign in with Apple is optional; it unlocks cloud sync of your personal stage library, the community stage library, and shared match notes. Everything below is structured around that split: what we do when you're not signed in (very little), and what we do when you are (only the data those features need).

When you're not signed in

• Camera. Used solely to detect printed AR markers in your shooting bay and overlay the rendered stage layout on the live camera view. Camera frames are processed entirely on your device and never leave it. Apple's ARKit framework operates locally; it does not transmit images, video, or location to Apple or to us.
• Stage and match files. Saved locally to the app's Documents directory. These files are visible to you in the iOS Files app and can be backed up or shared at your discretion through standard iOS share sheets (AirDrop, Mail, Messages, etc.). They are not uploaded anywhere by Match Day.
• File imports. When you tap a .usmatch file received from another Match Day user (via AirDrop, Mail, etc.), the app reads that file and saves a copy to your Documents directory. The original sender's match data stays on your device only.
• Stage links. When you tap a matchday://stage?… link from the Stage Setter web editor on this site, the app decodes the embedded stage data locally and saves it to your library. No request is made to any server.
• Stage Setter web editor. Loads in your browser as a static page and runs entirely client-side. Download / Send to Match Day produce a file or a deep link locally.

When you sign in with Apple

You can choose to create an optional account using Sign in with Apple. We use Apple as the sole identity provider — we never see or store your Apple ID password. When you sign in, Apple gives us:

• A stable per-user-per-app identifier (a hash, not your Apple ID itself). Used to associate your stage library with your account.
• The display name you choose, which you can change later from inside the app.
• An email address — either your real one or a privacy-relay address that Apple generates for our app and forwards to your real inbox. The choice is yours; we treat both equivalently.

Once you're signed in, the app and the editor will sync the following to our backend so it can follow you across devices:

• Your profile (display name, club, default venue).
• Stages you author and save to your personal library.
• Stages you explicitly choose to publish to the community library.
• Upvotes, downvotes, or reports you submit on community stages.
• Shared notes you post on matches you're attending.

Publishing to the community library is always an explicit, per-stage opt-in. Stages you only save to your personal library are not visible to other users.

Data processor

Our backend is operated by Supabase, which hosts the Postgres database and provides authentication. Data is encrypted in transit (TLS) and at rest. Supabase acts as a data processor on our behalf and publishes a standard data processing agreement. We do not use any third-party analytics SDK, advertising SDK, tracking pixel, or behavioral data broker.

Retention and your rights

• Right to access. You can request a JSON export of all data we hold on you by emailing the address below. We aim to fulfill exports within 14 days.
• Right to deletion. Match Day's Delete my account button (Settings → Account) performs a full hard delete: your auth record, profile, personal library, published stages, votes, reports, and notes are all removed. Hard delete is immediate and not reversible. We do not keep soft-deleted copies.
• Right to correction. You can edit your profile (display name, club, venue) from inside the app at any time.
• Retention. Account data is retained for as long as your account exists. Deleting the account removes the data. We do not retain copies for advertising, profiling, or resale — we don't do any of that.

What we still don't do

• We don't track your location. The app doesn't request location permissions and never receives location data from your device.
• We don't have third-party analytics SDKs (no Mixpanel, Amplitude, Google Analytics, Facebook Pixel, etc.).
• We don't show ads or share data with advertisers.
• We don't sell or rent your data to anyone, ever.
• We don't read the content of stages you keep in your personal library. (Stages you publish to the community library are visible to other Match Day users by design.)
• If Match Day crashes, Apple may collect a crash report under your iOS device's diagnostics settings — that's an Apple-side privacy choice you control in iOS Settings, separate from this app.

Hosting and standard request metadata

This site and the Supabase backend use Cloudflare in front of them, which sees standard HTTP request metadata (IP address, user agent, page or API endpoint requested) per Cloudflare's own privacy policy. This is the bare minimum required to serve the page or fulfill an API call.

If you have questions about how Match Day handles your data, email hey@itsmatchday.app.