Player Cards privacy notice

Who is responsible?

4NINES TECHNOLOGY LIMITED (SC882733) is the controller of your optional Player Cards service across participating venues. Contact help@4nines.io about privacy or your information.

Your venue operator separately controls your bookings, venue account and payments. Its name and contact details are in the venue privacy policy. Joining Cards does not give the operator access to your private card or cross-venue history.

Your choice

Player Cards is for people aged 13 or over who choose to join. We record your age declaration, participation choice and notice version, not a date of birth. This declaration is not independent proof of age. You do not need Cards to book or play football.

We propose to use your consent for your Cards profile, eligible game participation, nominations, scores, match reports and related service emails. You can withdraw in card settings by opting out. This hides your card and stops new participation and Cards messages. Withdrawal does not make earlier lawful processing unlawful.

We propose legitimate interests for proportionate account security, misuse investigation, minimal delivery records that prevent repeated emails, and the short recovery period described below. Our interests are operating a safe service and respecting your choices. You can object, including asking for immediate deletion rather than the recovery period. We use information necessary to answer statutory rights requests to meet our legal obligations. These bases remain subject to the launch privacy assessment.

Information we use and where it comes from

You provide your display name, shirt number, position, home venue, visibility preferences and participation declaration. Your sign-in account supplies your identity and verified contact details. Participating venue records supply game, venue, time, roster and organiser information needed to establish who can take part. Other eligible players provide nominations.

We keep ballots, derived scores and score history, match reports, sign-in and email-link records, service delivery records and security or administrative audit records. Cards does not need your card number, bank details or full payment history. Please do not put sensitive information in your display name.

Scores and visibility

Scores are automated teammate recognition, not an objective ability assessment. They combine six nomination-based traits and experience. Sparse nominations have less influence. A valid nomination never lowers that trait in that game; an unnominated trait may gradually fall when others were nominated. A trait nobody nominated does not change. Cards are provisional for the first five rated games.

Scores do not decide eligibility to book, prices, credit, prizes or sponsor selection. Contact us to challenge incorrect participation or scoring records.

Your card follows your visibility setting. Eligible players and the organiser can see their game's permitted report and awards even where a card is private. They cannot see who nominated whom. Other people may remember or screenshot information they were allowed to see; opting out cannot retrieve their copies.

Only Me hides your card from other people without stopping game nominations. Team Mates allows eligible players from your past games, including opponents, to view your card. Public is a separate, explicit choice: anyone with your card link can see your player name, position, shirt number and card scores without signing in. Public cards do not reveal contact details, home venue, game history or individual ballots. Changing to a restricted setting or opting out stops new public access, but cannot retrieve copies others have already made.

Venue staff can manage their own game roster and status, but cannot routinely see raw ballots, private cards or cross-venue history. Restricted, audited platform support access may be used to investigate problems. Guardian-managed profiles are not part of this launch.

Messages, providers and international access

We send invitations, appropriate reminders and report-ready emails to a verified address. These are service messages, not marketing permission. Essential sign-in and game-link cookies keep sessions secure; Cards does not introduce advertising cookies.

The platform uses Railway for hosting, Neon for databases, Stytch for authentication, Resend for email and Cloudflare for network services. Their exact Cards processing locations, subprocessors and applicable UK transfer safeguards must be recorded before this notice is published. We will explain any overseas processing and how to obtain the applicable safeguards here.

Joining Cards does not enrol you in PitchVision filming or analysis, personalised advertising or sponsor contact lists. Those would require separate explanations and controls. We may disclose information where legally required, subject to checking the request and limiting the disclosure.

How long we keep information

Your profile, nominations and scoring history stay while you use Cards. They are deleted after 24 months without a profile update, ballot submission or confirmed Cards game. History supports consistent score calculation and investigation.

Opting out starts a 90-day rejoin period, after which your Cards records are deleted. You can request earlier deletion at any time. Completed or suppressed email delivery details are cleared after 90 days; minimal records remain until profile removal to prevent duplicate sending. Administrative audit records are kept for 12 months. Expired game credentials and invitations are removed by scheduled cleanup.

Deletion removes your Cards profile and associated records and recalculates affected reports. It does not delete your venue account, bookings or financial records. Failed or uncertain deliveries require investigation rather than automatic resending.

Backup copies are separate from the live service. Their maximum expiry and the procedure to reapply deletions before any restoration serves customers are publication gates, not a promise that live deletion instantly removes every backup.

Your rights and concerns

Contact help@4nines.io to request access, correction, deletion, restriction or, where applicable, a portable copy of your information. You can withdraw consent or object to processing based on legitimate interests. These rights can have legal limits; we will explain any limit and may ask for proportionate identity evidence.

We normally respond to rights requests within one month, explaining any lawful extension. You can complain to the Information Commissioner's Office. You do not have to complain to us first.

Material changes to the purposes or sharing will be explained before they apply, with a fresh choice where required. This draft is separate from the operator's booking terms and does not authorise future advertising or video analysis.