Privacy Policy

Last updated: 14 September 2026

1. Introduction

Trac ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our football team management platform.

2. Information We Collect

About adults using the app

  • Account information (name, email address, phone number)
  • Which teams you belong to, and in what role
  • Which players you are linked to as a parent or guardian

About players

  • Name, date of birth, position and shirt number
  • Home address, where a club records one for registration
  • A parent or guardian contact
  • A photograph, where one is uploaded
  • Training attendance, coaching notes and performance ratings
  • Match appearances, minutes played, statistics and results
  • Health information — medical notes and injury records, where a club chooses to record them. This is more sensitive than the rest, and we treat it that way: see "Health information" below.

Automatically Collected Information

  • Device information and browser type
  • IP address and location data
  • Usage patterns and interaction data
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our team management services
  • Process registrations and manage user accounts
  • Track training attendance and performance
  • Generate reports and analytics for coaches and managers
  • Communicate important team updates and notifications
  • Improve our platform and develop new features
  • Ensure platform security and prevent fraud

Why we are allowed to (lawful basis)

Most of what the app does is simply running a football team, and rests on our legitimate interests and on the club's relationship with its members: keeping a squad list, picking a line-up, recording attendance and availability, logging what happened in a match, and a coach's own notes. A parent signing their child up to a club would expect all of it.

We deliberately do not rely on consent for those, because consent has to be freely given and freely withdrawn — and a child's place in the team must never depend on it.

Consent is used for the one thing that is genuinely optional: publishing a player's name outside the club. See "Sharing outside the club" below.

Health information

Medical notes and injury records are special category data under UK GDPR and need a stronger justification than the rest. We hold them only so a club can keep a player safe at training and on a matchday, they are never published, and a parent can ask for them to be corrected or removed at any time.

4. Cookie Policy

We use cookies and similar tracking technologies to enhance your experience on our platform. You can manage your cookie preferences at any time through our Cookie Settings page.

Types of Cookies We Use:

  • Strictly Necessary: Essential for website functionality and security
  • Functional: Remember your preferences and personalise your experience
  • Analytics: Help us understand how you use our platform to improve performance
  • Marketing: Deliver relevant content and measure campaign effectiveness

5. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information in these situations:

  • With team coaches and authorised club officials (for team management purposes)
  • With service providers who assist in platform operations (under strict confidentiality agreements)
  • When required by law or to protect our rights and safety
  • In connection with a business transfer or acquisition (with prior notice)

Sharing outside the club

A manager can share a link to a fixture — a live match, a team sheet, a player-of-the-match poll or a match report — which anyone holding that link can open without signing in.

A player under 18 is never named on one of those pages unless a parent or guardian has consented. Without consent they appear as "Player 7" — their shirt number, position and minutes may still be shown, but not their name, and their date of birth is never included. Coaches and team staff always see real names when signed in, because they need them to run the team.

Photographs are never shown on these public pages. They are visible only within the player's own club.

6. Data Security

We implement appropriate security measures to protect your information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

7. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access: Request copies of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your personal data
  • Portability: Transfer your data to another service
  • Object: Opt out of certain data processing activities
  • Withdraw Consent: Withdraw consent for your child to be named outside the club, at any time, by contacting your team administrator — who must action it immediately. Withdrawing never affects your child's place in the team.

8. Data Retention

We retain your information for as long as necessary to provide our services and fulfill legal obligations. Team performance data may be retained for historical records and statistical purposes.

9. Children's Privacy

Our platform is designed for use by football clubs managing teams of all ages. For players under 18, we require parental consent before their name is published outside the club — in public match reports, shared fixture links or player-of-the-match polls. Without it, they appear as "Player #7". Running the team itself does not rely on consent, so withdrawing it never affects a child's place in the squad. Where a player's photograph is held, it is visible only to their own club and is never published on a public page. A parent may withdraw consent, or ask us to delete a photograph, at any time by contacting their team administrator.

10. International Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable privacy laws.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or through a prominent notice on our platform.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us.

You can also manage your cookie preferences via our Cookie Settings page.