Privacy Policy
Who we are
Sub Crawl is a hobby project built and run by one person, not a company. For UK data protection law that person is the “controller” of any personal data the app handles.
Questions, requests or complaints about your data: email mooneymatthew02@gmail.com.
What the app does
Sub Crawl helps you plan a pub crawl around the Glasgow Subway: pick stations, pubs, drinks and how far you want to go, then share the plan with your mates. It works entirely on your phone with no account. If you choose to, you can also sign in and run a live crawl where a group shares one plan and keeps a light-hearted golf-style scoreboard together.
We designed it to collect as little as possible. Everything below is the full list.
What we collect and why
“Contract” below means we need the data to provide the feature you asked for. “Legitimate interests” means we have a fair reason (keeping the app working and safe, understanding whether anyone uses it) that doesn’t override your rights.
| Data item | When | Purpose | Lawful basis |
|---|---|---|---|
| Display name (1–24 characters) | When you sign in, join as a guest, or change it in settings | Shown to other players in a live crawl and on the scoreboard | Contract |
| Email address | When you sign in with an email code | To send you the 6-digit sign-in code and identify your account next time | Contract |
| Google account ID and email | When you sign in with Google | To identify your account. We don’t receive your password, contacts or anything else from Google | Contract |
| Anonymous guest ID | When you join a live crawl as a guest without an email or Google account | A random ID so the scoreboard knows which scores are yours. It isn’t linked to an email or a real name | Contract |
| Crawl plans | When you save a crawl to your account | So you can open your plan again on another device | Contract |
| Live-session data: the plan, pars, join code, who’s in the session, and each player’s sips score per stop with timestamps | While you host or take part in a live crawl | To run the shared scoreboard and keep everyone in sync | Contract |
| Usage events | As you use the app (only when live mode is switched on) | Simple counts so the developer can see if the app is being used and what breaks. Event names are: crawl_built, crawl_shared, link_opened, session_started, player_joined, stop_punched, score_entered, crawl_completed, tip_clicked, sign_in. Each carries a user ID, a session ID where relevant, and small numbers such as how many stops. No free text, names or emails are ever stored in events. |
Legitimate interests |
| Site analytics (cookieless) | When you visit the website | Cloudflare Web Analytics gives us aggregate page-view counts. It sets no cookies and uses no persistent identifier, so it can’t follow you between visits | Legitimate interests |
| Sign-in token | After you sign in | Kept in your browser’s localStorage so you stay signed in. It never leaves your device except to our database provider to prove it’s you |
Contract |
| Your crawl plan and punches, on your own phone | Always, whether or not you sign in | Stored only in your browser’s localStorage (keys subcrawl.plan.v3 and subcrawl.run.v3) so the app works offline. This data does not reach us unless you save or share it. Clear your browser data to remove it |
Not sent to us |
We also rely on legitimate interests for basic security: our providers keep standard technical logs (such as IP addresses on requests) for a short time to prevent abuse.
What we do not collect
- No location. The app never asks for or reads your GPS position. Stations and pubs are ones you pick.
- No contacts. Sharing a crawl uses your phone’s normal share sheet or a link you copy yourself.
- No advertising or tracking. No ad networks, no fingerprinting, no social-media pixels.
- No cookies of our own. The sign-in token lives in your browser’s local storage, not a cookie; our host Cloudflare may set a strictly necessary bot-protection cookie. Nothing needs a consent banner — see the cookies and local storage page.
- No payment details. Tips happen entirely on another website (see below).
Cookies
Sub Crawl sets no cookies of its own and shows no cookie banner, because everything it keeps in your browser (your plan, punches, live-crawl room and, if you sign in, your sign-in token) is strictly necessary for the features you asked for. Our hosting provider may set a short-lived security cookie, and our analytics are cookieless. The full list of what is stored, how long it lasts and how to clear it is on the Cookies and local storage page.
Who we share data with
We don’t sell data or share it with anyone for marketing. To run the app we use a small number of service providers (“sub-processors”) who process data on our instructions:
- Supabase — hosts the database and handles sign-in (email codes, Google sign-in and guest accounts). This is where display names, emails, plans, live sessions and usage events live.
- Google — only if you choose “Sign in with Google”. Google tells us your account ID and email; Google’s own privacy policy covers what Google does.
- Cloudflare — hosts the website and provides the cookieless analytics.
- Resend — delivers the email containing your sign-in code.
- Buy Me a Coffee / Stripe — if you choose to leave a tip. This happens entirely off-site on their pages; we never see your card details, and we only record that the tip button was clicked (not who clicked it or whether you paid).
We’d only hand data to anyone else if the law required it.
Where your data is stored
Our database is hosted by Supabase in London, United Kingdom. Where any provider processes data outside the UK, they do so under the UK’s adequacy rules or standard contractual clauses that provide equivalent protection.
How long we keep it
- Live crawl sessions expire 36 hours after they are created, so nobody can join or add scores after that. The session, its player list and scores are deleted 30 days after creation.
- Accounts (display name, email or Google ID, saved crawl plans) are kept until you ask us to delete them.
- Guest accounts are treated the same way; email us with the display name and rough date you played if you want one removed.
- Usage events are kept only as aggregated counts once they’re no longer needed individually. When you delete your account, the events linked to your ID are deleted or anonymised with it.
- Data on your own phone (plan, punches, sign-in token) stays until you clear it or sign out.
Your rights
Under UK GDPR you can ask us to:
- tell you what personal data we hold about you and give you a copy (access);
- correct anything wrong (rectification) — you can change your own display name in the app;
- delete your account and data (erasure);
- stop or limit processing, or object to processing based on legitimate interests;
- give you your data in a portable format.
How to delete your account
Email mooneymatthew02@gmail.com from the address you signed in with (or tell us your display name and when you played, if you were a guest). We’ll delete your account, saved plans and any scores or events linked to you, and confirm by reply. We action every request within 30 days, usually much sooner. If you signed in with Google you may also want to remove Sub Crawl from your Google account’s connected apps.
Complaints
If you’re unhappy with how we’ve handled your data, we’d appreciate the chance to fix it first, but you also have the right to complain to the UK regulator, the Information Commissioner’s Office: ico.org.uk/make-a-complaint.
Age
Sub Crawl is about pubs and is for adults only. You must be 18 or over to use it. We don’t knowingly collect data from anyone under 18; if you think we have, email us and we’ll delete it.
Changes to this policy
If we change what we collect or how we use it, we’ll update this page and the “last updated” date at the top. Significant changes will be flagged in the app. This version was last updated on 5 September 2026.