Privacy policy

1. Who we are

SupporterSwap ("we," "us," or "our") is a peer-to-peer marketplace where supporters buy and sell general-admission match tickets with other supporters in their section. This privacy policy explains what information we collect, how we use it, who can see it, and how you can ask us to delete it.

This is SupporterSwap's own privacy policy. It applies to the website at supporterswap.com and related services we operate.

Questions or requests: privacy@supporterswap.com.

2. Information we collect

We collect information in three ways: you provide it, sign-in providers share it, or your device generates it automatically.

Account and profile

• Name and a public-facing short name (for example, first name and last initial)
• Email address used to sign in
• Optional profile photo
• Home club preference
• Optional transfer email for receiving club ticket transfers
• Payment apps you accept and, when you save them, the related handles
• Season ticket proof images you upload for verification (reviewed by admins only)

From Facebook, Google, or other sign-in providers

If you sign in with Facebook Login or Google, we receive the profile information those providers make available for login — typically your name, email address (if you grant it), and profile photo URL. We use Facebook Login only to create and authenticate your account. We do not request access to your friends list, posts, groups, messages, or other Facebook data, and we do not use the Facebook Pixel or advertising APIs.

Marketplace activity

• Ticket listings you create (match, quantity, price, face-value reports)
• Messages you send to other users in a purchase thread
• Transaction records and ratings tied to completed sales
• Reports you submit about users, listings, or messages

Technical information

• Basic device and browser information needed to run the site securely
• Cookies or similar storage for your session and preferences (such as remembering your club)
• Server logs related to errors, abuse prevention, and reliability

3. How we use information

We process personal information to:

• Create and maintain your account and sign-in session
• Show listings, profiles, and match information on the marketplace
• Enable messaging and payment coordination between buyers and sellers
• Operate trust features (ratings, verification badges, report review)
• Send transactional email related to your account or conversations
• Prevent fraud, enforce our terms, and keep the community safe
• Improve reliability and fix problems with the service
• Comply with law and respond to lawful requests

We do not sell your personal information. We do not use Facebook Platform data for advertising or share it with data brokers.

4. Who can see what

SupporterSwap is built around minimum disclosure. Visibility depends on whether someone is browsing signed out, signed in, or actively buying or selling with you.

• Anonymous visitors can browse active listings and see a short public name, ratings, sold counts, and badges. They do not see full names, profile photos, email addresses, or payment handles.
• Signed-in users can see fuller profile details such as full name and photo where shown in the product, but still cannot see another person's email or payment handles just by browsing.
• Counterparties in a conversation may see which payment apps a seller accepts. The seller's payment handle is shown to a buyer only after the seller has replied in the thread. A buyer's transfer email is shared only when the buyer chooses to share it.
• Admins may access reports, season-ticket proof submissions, and other moderation tools needed to keep the marketplace safe. Proof images are not shown publicly and are deleted after review is complete.

5. Service providers and sharing

We share information with service providers that help us run SupporterSwap, under arrangements that limit how they may use it:

• Supabase — authentication, database, file storage, and realtime messaging infrastructure
• Resend — transactional email delivery
• Hosting and related infrastructure providers for the website
• Sign-in providers you choose (Facebook, Google) for authentication

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or similar transfer of the service — in which case we will continue to protect personal information as described here or provide notice of changes.

When you message another user or complete a sale, you are choosing to share the information that appears in that conversation or listing with that person. We are not responsible for how other users use information you choose to share with them.

6. Retention

We keep account and marketplace records for as long as your account is active and as needed to operate the service, resolve disputes, prevent abuse, and meet legal obligations. Season ticket proof images are deleted after the verification review finishes. If you ask us to delete your account, we follow the process described in our data deletion instructions.

7. How to request deletion of your data

You can request deletion of your SupporterSwap account and associated personal data at any time. Full step-by-step instructions are at supporterswap.com/data-deletion.

In short: email privacy@supporterswap.com from the address on your account and ask us to delete your data. If you signed in with Facebook, you can also remove SupporterSwap from your Facebook Apps and Websites settings; that disconnects Facebook Login but does not by itself erase data already stored in SupporterSwap — send us the deletion email for that.

8. Your choices and rights

• You can update profile details available in account settings when those screens are live.
• You can decline to share your email with Facebook during login; if we cannot get an email from a provider, we may ask you to provide one so the account remains usable.
• You can request access to or deletion of personal data by emailing privacy@supporterswap.com.
• Depending on where you live, you may have additional rights under local law. Contact us and we will respond as required.

9. Security

We use industry-standard measures appropriate to a small marketplace, including encrypted transport (HTTPS), access controls, and database row-level security so sensitive fields are not exposed by default. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

SupporterSwap is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact privacy@supporterswap.com and we will take appropriate steps to delete it.

11. International users

We operate primarily in the United States. If you access SupporterSwap from another country, your information may be processed in the United States or other locations where our providers operate.

12. Changes to this policy

We may update this privacy policy from time to time. When we do, we will change the "Last updated" date above and, for material changes, provide additional notice as appropriate. Continued use of the service after an update means you accept the revised policy.

13. Contact

Privacy and data requests: privacy@supporterswap.com

Related pages: Terms of service · Data deletion