Privacy Policy

AwayDay Planner ("we", "us", "our") is operated as an independent platform available at awaydays.net. We are the data controller for personal information collected through this website.

For any privacy-related enquiries, please contact us via our contact page.

We collect information you provide directly when you:

• Register an account — your display name, email address and chosen password (stored as a hashed value, never in plain text)
• Complete your profile — optional information such as your favourite club, a short bio, and a profile photo
• Log stadium visits — visit dates, notes, and any photos you upload to your scrapbook
• Write reviews — your written reviews and star ratings of stadiums
• Plan trips — trip details including destinations, dates, mileage and cost estimates you enter
• Use community features — forum posts, check-ins and replies

We also collect limited technical data automatically:

• Your IP address (used for rate limiting and security)
• Browser type and device information
• Pages visited and features used (for improving the service)
• Cookies — see our Cookie Policy for details

We use your personal data to:

• Provide and operate your AwayDay Planner account
• Display your public profile, visit history and stats to other users (subject to your privacy settings)
• Send you a verification email when you register and occasional account-related notifications
• Allow other users to follow you and see your activity in the feed (subject to your settings)
• Show your display name on the leaderboard (you can opt out in Settings)
• Improve the platform based on how features are used
• Detect and prevent abuse, spam or fraudulent activity

We will never use your data for advertising purposes or sell it to third parties.

We process your personal data on the following legal bases under UK GDPR:

• Contract — processing necessary to provide the service you have signed up for
• Legitimate interests — security, fraud prevention, and improving the platform
• Consent — for optional features such as email notifications, which you can withdraw at any time
• Legal obligation — where we are required to retain or disclose data by law

By default, the following information on your profile is visible to other registered users:

• Your display name and profile photo
• Your stadium visit count and progress through The 92
• Your Groundhopper Score and rank title
• Reviews you have written
• Your position on the leaderboard

You can control much of this visibility from your Settings page, including hiding yourself from the leaderboard and making your profile private. Your email address is never visible to other users.

We use cookies to keep you logged in, remember your preferences and understand how the site is used. We do not use third-party advertising cookies.

See our full Cookie Policy for details of every cookie we set and how to manage them.

AwayDay Planner uses a small number of third-party services to operate:

• Spaceship Hosting — our web hosting provider. Your data is stored on servers in the EU.
• OpenStreetMap / Leaflet — for the interactive stadium map. No personal data is sent to OpenStreetMap.
• WordPress — our platform. No data is shared with WordPress.com or Automattic.

We do not use Google Analytics, Facebook Pixel or any other advertising or tracking services.

We retain your personal data for as long as your account is active. If you delete your account:

• All your personal data, visit records, reviews, trips and forum posts are permanently deleted within 30 days
• Anonymised, aggregated statistics (e.g. total visit counts per stadium) may be retained as they cannot be linked back to you

We may retain minimal records for legal compliance purposes for up to 6 years where required.

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your account and all associated data
• Restriction — ask us to limit how we process your data in certain circumstances
• Portability — request your data in a portable format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We take reasonable technical and organisational measures to protect your data, including:

• All passwords are hashed using WordPress's secure password hashing — we cannot see your password
• All data is transmitted over HTTPS (TLS encryption)
• Email verification is required before accessing write features
• Rate limiting is applied to prevent brute-force attacks

No system is 100% secure. If you believe your account has been compromised, please contact us immediately.

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page and, where the changes are significant, notify you by email or via a banner on the site.

Continued use of AwayDay Planner after changes are published constitutes acceptance of the updated policy.