Privacy
Privacynotice.
What Ṣeré collects, why it collects it, who else sees it, and how to get it removed. Written against what the code actually does.
Who is responsible for your data
Ṣeré is run by its founders, and no operating company has been registered yet — the founders are responsible for your data, and the operating entity will be named here before we take payment from the public. There is no public inbox yet either: during the pilot, anything about your data, including the requests below, goes through the same direct route to the founders as support. No data protection officer is appointed, and none is required at our size.
This notice covers both the Ṣeré website and the Ṣeré app.
If you join the waitlist
The waitlist form is the only thing the website collects. One row is stored per email address, and it holds more than the form’s visible fields:
| What is stored | Why |
|---|---|
| Your email address | To tell you when Ṣeré opens where you are |
| Country, the city you choose from Google Places, and that city’s coordinates | To decide which areas to open first. Not your device’s location |
| The sports you picked, how often you play, and who you usually play with | To decide what to build after football |
| A referral code for you, and the code you arrived with | To credit an invite and to build the invite link the form shows you |
The page you landed on, the site that linked you, and any campaign parameters in the link (utm_*, gclid, fbclid) | To see which channels bring players in |
Your IP address is not part of that row. We do not ask for your name or phone number on the website, and the list cannot be read with the key the website holds — reading it needs a credential only the business has.
Lawful basis: your consent — the waitlist, like any marketing we ever send, rests on consent you can withdraw at any time.
To come off the list, ask through the route on the support page. Signups are kept until public launch, then deleted or migrated into the account you create at that point — and removed sooner if you ask.
If you use the app
The app holds the data an account needs to work:
- Sign-in details — handled by Clerk, our authentication provider, which holds the identity you sign in with.
- Your profile — name, photo, home area, the sports you play, and anything you write in your bio.
- Games and bookings — the games you reserve, attend or cancel, and the payment state of each.
- Activity between players — friend requests, notifications, and the ratings and safety reports made about a game.
Lawful bases: creating your account, forming the games you join and taking your payment are all necessary to perform the contract with you. Keeping games safe, preventing fraud and abuse, and operating and improving the service rest on our legitimate interests.
Other signed-in players can see your profile, including your name and your home area, when you appear in a game or a search alongside them. Only share a photo or a bio on that basis.
The website stores your light-or-dark theme choice in your browser’s local storage so it survives a reload. There are no advertising or analytics cookies on the site.
Who else sees it
We use these providers to run the service, and they only process data for us:
- Supabase — the database behind the app and the waitlist.
- Clerk — accounts and sign-in.
- Vercel — website and API hosting, which processes standard server logs including IP addresses as part of serving requests.
- Google Maps Platform — the waitlist city autocomplete and its verification. Google receives the city text you search for, the country you choose and the selected place ID; we store the selected city, place ID and coordinates.
- Stripe — payments. Your card details go to Stripe directly and never touch Ṣeré’s servers.
- Email — nobody. The product sends no email at all today; when a provider is added, this page will name it before anything is sent.
Venues. Venues receive no player data from the app today — there is no venue-facing surface. When venue check-in scanning ships, it will show the venue a player’s first name and whether their pass is valid, and nothing more.
We do not sell your data and do not share it for anyone else’s advertising.
Your data is processed by Supabase (the database and storage), Clerk (sign-in), Google Maps Platform (city search) and Stripe (payments), which may process it outside the UK under their standard contractual safeguards.
How long it is kept
- Waitlist signups — until public launch, then deleted or migrated into the account you create; sooner if you ask.
- Account and profile data after you ask for deletion — deleted within 30 days.
- Booking and payment records — 6 years, the UK statutory record-keeping period for financial records.
Deleting your account
You can delete your account yourself, from Settings in the app. That removes your profile and the data attached to it — your sports, friendships, searches, game participation, notifications, ratings and safety reports — deletes your profile photo, and closes the sign-in identity behind it. Records we are required to keep are held for the periods above and nothing longer. If you cannot get into the app, ask through the route on the support page.
Your rights
Depending on where you are, the UK GDPR or the EU GDPR gives you the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict or object to how it is used, and to have it sent to another provider. You can also withdraw consent where consent is what we relied on.
During the pilot these requests use the same direct route to the founders as general support — say it is a data request and it is treated as one. Whatever we do with it, you can complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at any time.
Changes
If we change how any of this works, this page changes with it, and a change that affects data already collected will be told to you rather than only published here.