We believe privacy policies should be readable. This one is written in plain English. If you have any questions, email us at hello@getawaydays.co.
Who we are
AwayDays is a football tourism web application that helps fans discover fixtures worldwide, track grounds visited, plan trips, and manage travel documents. The service is operated by:
Alexander Baxendale
AwayDays
Berlin, Germany
hello@getawaydays.co
getawaydays.co
For the purposes of the General Data Protection Regulation (GDPR), Alexander Baxendale is the data controller.
What data we collect
Account and profile data
When you create an account on AwayDays, you provide:
- Name — to personalise your experience and display on your profile
- Email address — to authenticate your account and, with your consent, send product updates
- Favourite football club — to personalise fixture recommendations
- Username — a handle you choose, used by the social features so friends can find you. Optional.
- Profile photo — optional, displayed to friends who connect with you
- Password — stored securely by Supabase (bcrypt-hashed; we never see it in plaintext)
Activity data
When you use AwayDays, the following is stored on our servers (Supabase, EU region):
- Grounds you have visited, including venue, date, photos you upload, and visit count
- Saved fixtures and named trip plans, including fixtures added to each trip
- Ticket wallet entries (text fields; photos stored in encrypted cloud storage)
- Friends connections, trip collaborations, and related social interactions
- Feedback and feature requests you submit via the in-app feedback form
Email content (email parsing feature)
If you choose to use the email parsing feature, AwayDays will access and process the content of booking confirmation emails you forward or share access to. This is used solely to extract travel details (flights, trains, hotels, match tickets) and populate your trip folders and ticket wallet automatically.
Email parsing is strictly opt-in. We only process emails you explicitly provide. Email content is parsed to extract structured booking data and is not stored beyond what is needed to populate your trip. Raw email content is not retained after parsing.
The legal basis for processing email content is your explicit consent (GDPR Article 6(1)(a)), which you can withdraw at any time by disconnecting the integration from your account settings.
Technical data
Our hosting infrastructure (Vercel, Cloudflare) automatically processes standard server logs, including IP addresses and browser user-agent strings, for security and operational purposes. This data is not linked to your AwayDays account and is subject to each provider's own retention limits.
Data we do not collect
We do not collect payment information, government identification, or sensitive personal data as defined by GDPR Article 9. We do not build advertising profiles or sell your data to third parties.
How we use your data
- To provide the AwayDays service — syncing your grounds, trips, and saved fixtures across your devices
- To enable social features — connecting you with friends, powering trip collaboration and profile visibility according to your privacy settings
- To parse booking emails — extracting travel details into your trip folders and ticket wallet, only with your explicit consent
- To personalise your experience — your profile, favourite club, super-fan tier, and grounds map
- To improve the product — feedback you submit helps us prioritise bugs and features
- To send communications — product updates, only if you have consented
Legal basis for processing (GDPR Article 6)
- Contract performance — syncing your data across devices and providing core app functionality
- Consent — email parsing, email communications, and optional analytics
- Legitimate interest — caching fixture data for performance; security logging
Social features and data visibility
AwayDays includes optional social features. Understanding what others can see about you:
- Without a username — you are not discoverable. Your grounds, trips, and tickets are always private.
- With a username — friends can find you by searching your username. Your grounds list is visible to accepted friends by default (you can change this to public or private in your profile settings).
- Trip collaboration — when you invite a friend to a trip, they can see the trip name, owner, and fixtures. Ticket wallets are always private, even on shared trips.
- Ground photos — visible to whoever can see your grounds list (based on your privacy setting).
- Profile photo and display name — visible to accepted friends.
You can block any user at any time. Blocked users cannot find you, add you as a friend, or see any of your content.
Third-party services
AwayDays integrates with several third-party services. Each has its own privacy policy:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Database, authentication, and file storage (EU region) | supabase.com/privacy |
| API-Football | Fixture and standings data | api-sports.io/privacy |
| Vercel | Website hosting and serverless functions | vercel.com/legal/privacy-policy |
| Cloudflare | DNS, security, and email routing | cloudflare.com/privacypolicy |
| CartoDB / Leaflet | Interactive map tiles | carto.com/privacy |
| OpenStreetMap / Nominatim | Location geocoding | osmfoundation.org |
| GetYourGuide | Activity recommendations (affiliate) | getyourguide.com/privacy-policy |
| Booking.com | Hotel search (affiliate) | booking.com/content/privacy |
| Omio | Train and bus search (affiliate) | omio.com/legal/privacy-policy |
| Trainline | Rail booking (affiliate) | thetrainline.com/info/privacy |
| Skyscanner | Flight search (affiliate) | skyscanner.net/privacy-policy |
| Football clubs | Official match ticket pages | Each club's own privacy policy applies |
Affiliate disclosure: AwayDays uses affiliate links. When you click through to a booking partner and make a purchase, we may earn a small commission at no additional cost to you. This helps fund development of the app.
Cookies and local storage
AwayDays uses browser localStorage to cache data locally on your device for performance — for example, fixture data, filter preferences, and your current session state. This local cache is a copy of your server-side data and is not the primary store.
We do not use third-party tracking cookies. When you click through to affiliate partners, those websites may set their own cookies under their own privacy policies.
Analytics
We may use Umami Analytics — a privacy-friendly, cookie-free analytics tool — to understand how the app is used. No personally identifiable information is collected and data is not shared with third parties.
Data retention
We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
Parsed email content is not retained after extraction — only the structured booking data extracted from it (flight details, match tickets, hotel dates) is stored in your trip/ticket wallet.
Feedback submitted via the in-app form is retained indefinitely to inform product decisions, but is not linked to your public profile.
You can request deletion of your data at any time by emailing hello@getawaydays.co.
International transfers
Your primary data is stored in Supabase's EU (Frankfurt) region and does not leave the EU/EEA in normal operation. Our hosting provider Vercel and infrastructure provider Cloudflare may process some technical data in the United States. Both maintain EU-US Data Privacy Framework compliance and appropriate safeguards under GDPR Chapter V.
Your rights
Under GDPR, you have the following rights regarding your personal data:
Right to access
Request a copy of the personal data we hold about you
Right to rectification
Correct inaccurate or incomplete data
Right to erasure
Request deletion of your personal data
Right to portability
Receive your data in a portable format
Right to object
Object to processing based on legitimate interest
Right to withdraw consent
Withdraw consent for email parsing or communications at any time
To exercise any of these rights, contact us at hello@getawaydays.co. We will respond within 30 days.
You also have the right to lodge a complaint with your supervisory authority. In Germany, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (datenschutz-berlin.de).
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes — particularly any change to how email content is processed — we will notify users via email if you have provided one.
Questions about your privacy?
We're happy to help with any data-related questions or requests.
hello@getawaydays.co