Sub Crawl
Privacy Policy
Who we are
Sub Crawl is a hobby project built and run by one person, not a company. For UK data protection law that person is the “controller” of any personal data the app handles.
Questions, requests or complaints about your data: email playsubcrawls@gmail.com.
What the app does
Sub Crawl helps you plan a pub crawl around the Glasgow Subway: pick stations, pubs, drinks and how far you want to go, then share the plan with your mates. Building a crawl needs no account and happens entirely on your phone. When you lock a crawl in, or join one with a code, you take part in a live crawl: a group shares one plan, one set of wheel rules and a light-hearted golf-style scoreboard. For that you either sign in with Google or play as a guest under a display name; a guest is an anonymous account that holds nothing but that name.
We designed it to collect as little as possible. Everything below is the full list.
What we collect and why
“Contract” below means we need the data to provide the feature you asked for. “Legitimate interests” means we have a fair reason (keeping the app working and safe, understanding whether anyone uses it) that doesn’t override your rights.
| Data item | When | Purpose | Lawful basis |
|---|---|---|---|
| Display name (1–24 characters) | When you sign in with Google or play as a guest (you type it in when you lock a crawl in or join one). If you sign in with Google without typing a name, the name on your Google account is used until you change it | Shown to other players in a live crawl and on the scoreboard | Contract |
| Email address | When you sign in with an email code (this option is switched off at launch; Google and guest names are the live sign-in routes) | To send you the 6-digit sign-in code and identify your account next time | Contract |
| Google account ID and email | When you sign in with Google | To identify your account and give you a default display name. We don’t receive your password, contacts or anything else from Google | Contract |
| Anonymous guest ID | When you host or join a live crawl as a guest, without a Google account | A random ID so the scoreboard knows which scores are yours. It isn’t linked to an email or a real name | Contract |
| Live-session data: the plan, pars, join code, who’s in the session, each player’s sips score per stop with timestamps, and the wheel rule drawn at each stop with the display name of whoever spun it | While you host or take part in a live crawl | To run the shared scoreboard and keep everyone in sync | Contract |
| Page-load count | Whenever a page of the site is opened, signed in or not | A single number per day per page (“the landing page was opened 240 times on Friday”). It carries no identifier of any kind: no user ID, IP address, cookie or device fingerprint, so it cannot be linked to you and is not personal data. It exists so the developer knows whether anyone is visiting | Legitimate interests |
| Usage events | As you use the app after signing in or choosing guest mode (only when live mode is switched on) | Simple counts so the developer can see if the app is being used and what breaks. Event names are: crawl_built, crawl_shared, link_opened, session_started, player_joined, stop_punched, score_entered, crawl_completed, rule_spun, tip_clicked, sign_in. Each carries a user ID, a session ID where relevant, and small fixed values such as how many stops, which rule pack, or which button was used. No free text, names or emails are ever stored in events. |
Legitimate interests |
| Sign-in token | After you sign in | Kept in your browser’s localStorage so you stay signed in. It never leaves your device except to our database provider to prove it’s you |
Contract |
| Your crawl plan and punches, on your own phone | Always, whether or not you sign in | Stored only in your browser’s localStorage (keys subcrawl.plan.v3 and subcrawl.run.v3) so the app works offline. This data does not reach us unless you save or share it. Clear your browser data to remove it |
Not sent to us |
We also rely on legitimate interests for basic security: our providers keep standard technical logs (such as IP addresses on requests) for a short time to prevent abuse.
What we do not collect
- No location. The app never asks for or reads your GPS position. Stations and pubs are ones you pick.
- No contacts. Sharing a crawl uses your phone’s normal share sheet or a link you copy yourself.
- No advertising or tracking. No ad networks, no fingerprinting, no social-media pixels.
- No cookies of our own. The sign-in token lives in your browser’s local storage, not a cookie; our host Cloudflare may set a strictly necessary bot-protection cookie. Nothing needs a consent banner — see the cookies and local storage page.
- No payment details. Tips happen entirely on another website (see below).
Cookies
Sub Crawl sets no cookies of its own and shows no cookie banner, because everything it keeps in your browser (your plan, punches, live-crawl room and, if you sign in, your sign-in token) is strictly necessary for the features you asked for. Our hosting provider may set a short-lived security cookie. We run no analytics on the website itself. The full list of what is stored, how long it lasts and how to clear it is on the Cookies and local storage page.
Who we share data with
We don’t sell data or share it with anyone for marketing. To run the app we use a small number of service providers (“sub-processors”) who process data on our instructions:
- Supabase — hosts the database and handles sign-in (Google sign-in and guest accounts, plus email codes if we switch that on). This is where display names, emails, plans, live sessions and usage events live.
- Google — only if you choose “Sign in with Google”. Google tells us your account ID and email; Google’s own privacy policy covers what Google does.
- Cloudflare — hosts the website.
- Resend — would deliver sign-in code emails; not in use while email sign-in is switched off.
- Buy Me a Coffee / Stripe — if you choose to leave a tip. This happens entirely off-site on their pages; we never see your card details, and we record only that the tip button was tapped — as a usage event linked to your user ID like any other usage event — never whether you went on to pay or how much.
We’d only hand data to anyone else if the law required it.
Where your data is stored
Our database is hosted by Supabase in London, United Kingdom. Where any provider processes data outside the UK, they do so under the UK’s adequacy rules or standard contractual clauses that provide equivalent protection.
How long we keep it
- Live crawl sessions expire 36 hours after they are created, or at 6am the morning after the crawl date if you set one (never more than 30 days ahead). Nobody can join or add scores after that. The session, its player list and scores are deleted 30 days after it expires.
- Accounts (display name, email or Google ID) are kept until you ask us to delete them.
- Guest accounts are deleted automatically about 30 days after the last live crawl they took part in has been cleaned up. If you want one gone sooner, email us with the display name and rough date you played.
- Usage events are kept as individual rows for up to 180 days so we can count things over time; each holds only an event name, small fixed values, a timestamp and your user ID. When your account is deleted the link to you goes with it.
- Data on your own phone (plan, punches, sign-in token) stays until you clear it or sign out.
Your rights
Under UK GDPR you can ask us to:
- tell you what personal data we hold about you and give you a copy (access);
- correct anything wrong (rectification) — email us and we’ll change your display name;
- delete your account and data (erasure);
- stop or limit processing, or object to processing based on legitimate interests;
- give you your data in a portable format.
How to delete your account
Email playsubcrawls@gmail.com from the address you signed in with (or tell us your display name and when you played, if you were a guest). We’ll delete your account, saved plans and any scores or events linked to you, and confirm by reply. We action every request within 30 days, usually much sooner. If you signed in with Google you may also want to remove Sub Crawl from your Google account’s connected apps.
Complaints
If you’re unhappy with how we’ve handled your data, we’d appreciate the chance to fix it first, but you also have the right to complain to the UK regulator, the Information Commissioner’s Office: ico.org.uk/make-a-complaint.
Age
Sub Crawl is about pubs and is for adults only. You must be 18 or over to use it. We don’t knowingly collect data from anyone under 18; if you think we have, email us and we’ll delete it.
Changes to this policy
If we change what we collect or how we use it, we’ll update this page and the “last updated” date at the top. If we make a significant change we’ll say so on the home page. This version was last updated on 10 September 2026.