Privacy

Privacy Policy

How FanSpot collects and uses data for accounts, RSVPs, venue discovery, and notifications.

Last updated: May 26, 2026

FanSpot is an MVP for discovering places to watch football matches in Belgium and for creating private match nights with friends. This policy explains the basic data we collect and how we use it.

Data we collect

Host account data: name, email address, password hash, language preference, and account role.
Private match night data: selected match, city, venue or custom location, invite slug, title, message, and host relationship.
Guest RSVP data: guest name, optional email, RSVP status, private guest token, and related match night.
Venue data: public venue names, addresses, public links, public phone numbers, and source URLs. Internal verification notes may also be stored for FanSpot operations.
Push notification data: subscription endpoint, browser keys, user agent, language, and links to a host, RSVP, or match night when relevant.
Technical and analytics data: basic logs and privacy-friendly Vercel Analytics events needed to understand whether the MVP is useful and to keep the service working.

Why we use data

To let hosts create and manage private match nights.
To let guests RSVP without creating an account.
To show public venue discovery pages and improve venue data quality.
To send opted-in push notifications such as match reminders, RSVP updates, or location changes.
To measure product usage such as match views, venue clicks, map usage, PWA install intent, RSVPs, and notification opt-ins.
To prevent abuse, debug problems, and improve the MVP.

Retention and deletion

Account, RSVP, and private match night data is kept while it is useful for the service or until deletion is requested.
Push subscriptions can be removed by turning off notifications or by asking FanSpot to delete them.
Venue corrections or removal requests can be sent by email.
Deletion requests can be sent to privacy@fanspot.app. Include enough detail for us to find the relevant account, RSVP, or venue record.

Sharing and sale

FanSpot does not sell personal data.
FanSpot uses Vercel Analytics for MVP product metrics. Events are configured not to include raw emails, guest names, private invite tokens, precise user location, or private addresses.
FanSpot does not currently use Google Analytics, Meta Pixel, ad tracking, session replay, or marketing profiling.
FanSpot may use hosting, database, email, or analytics providers as service providers when needed to operate the app.
Private invite pages are accessible to anyone with the invite link, so hosts should only share links with intended guests.

Legal identity TODO

These fields are intentionally visible for launch readiness. Do not invent them; replace them once the real operator details are known.

Operator name: TODO: legal operator name
Responsible person/company: TODO: company or person responsible
Address: TODO: registered address
Jurisdiction: TODO: governing jurisdiction
VAT/company number: TODO: VAT/company number if applicable
Privacy contact: privacy@fanspot.app

This page is practical MVP copy, not formal legal advice. FanSpot should have these pages reviewed before public launch.