Privacy
Privacy policy
Last updated 2026-05-04. Effective from launch.
In one sentence
We collect the data you give us when you sign up and check in. We store it on Supabase EU (GDPR jurisdiction). You can export or delete it at any time. We do not sell it. We do not run ads.
What we collect
- Account. Email address (from Apple Sign In or Google Sign In, or none if you sign in anonymously). User ID. No passwords; we never see them.
- Profile (optional, fighter-controlled). Handle, display name, gender, weight, height, experience years, primary style, other martial arts, languages, home country, bio, avatar URL, fight-record URL.
- Check-ins. Date range, gym, visibility, optional note.
- Reviews. Ratings (overall + facets), free-text comment.
- Browser-side analytics. Anonymized page views via Vercel Analytics. No cookies for tracking. No fingerprinting. No third-party trackers.
Where it lives
- Supabase EU (Frankfurt). All authentication and database storage.
- Vercel (US/EU edge). The web app. Vercel does not see your raw user data; it sees HTTP traffic.
- No third-party advertising or marketing platforms.
What is public
If you set is_public to true on your profile (the default), your handle, display name, country, weight, primary style, current and past public check-ins, and reviews you have written are visible to anyone visiting the site. Set it to false in /me to make all of that private.
Check-in visibility is a separate field. A check-in marked private is visible only to you, even if your profile is public.
Your rights (GDPR)
- Access (Article 15). Email goncalo.don@scoreplay.xyz and we will export every row tied to your user ID within 30 days.
- Erasure (Article 17). Delete your profile in /me, or email us. We delete your row in
fighter_profileson cascade with yourauth.usersentry; check-ins and reviews are deleted too. - Rectification (Article 16). Edit your profile in /me at any time.
- Portability (Article 20). Export available on request.
- Object (Article 21). No marketing emails to opt out of in v0. We will only contact you for account or moderation reasons.
Children
MuayThang is not intended for users under 18. The Destination Thailand Visa requires age 18+; Apple/Google sign-in pathways set the same floor. If you are under 18, do not create a profile.
Cookies and tracking
We use the minimum cookies necessary for authentication (Supabase session cookie, set on sign in). We do not use marketing cookies. Vercel Analytics is cookieless.
Changes
If we change this policy materially, we will post the new version with a fresh date and notify signed-in users by in-app banner.
Contact
Privacy questions: goncalo.don@scoreplay.xyz. Founder: Gonçalo Traça. Operating jurisdiction: personal-project basis pending incorporation threshold (per the public business model doc).