Privacy Policy

FanMap (“we”, “us”) respects your privacy. This policy explains what we collect, why we collect it, and how you can control it. We aim to comply with GDPR (EEA/UK), CCPA (California), and KVKK (Türkiye).

1. Data we collect

Vote data

• The country you voted in and the club you voted for.
• The number of votes cast and the amount paid (per transaction).
• An optional buyer nickname if you provide one at checkout.

Vote totals per country and per club are shown publicly on the map and leaderboard. Individual purchases are not linked to your identity in public.

Payment data

• Handled entirely by Polar.sh, our merchant of record. We never see or store full card numbers.
• We store the Polar order ID linked to your vote for idempotency, fraud prevention, and refund handling.

Technical data

• Free-vote cookie (fanmap_free_used) — a plain browser cookie listing the countries in which you have already claimed your free vote. Stored only in your browser, sent back to us so we don't give the same gift twice.
• IP address — used only to apply rate limits and prevent abuse. Not stored long-term.
• Site view counter — a single global count on our server, incremented on page load. No per-user identification.

2. Why we process this data

• To operate the game and display vote totals to other fans.
• To take and process payments.
• To keep the platform safe from bots, spam, and abuse.
• To respond to your emails and legal obligations.

3. Third-party processors

• Supabase (Ireland/US) — database and file storage.
• Polar.sh (US) — payments, tax, receipts.
• Vercel (US) — hosting and edge network.

Where data is transferred outside your region, it is protected by Standard Contractual Clauses or equivalent safeguards.

4. Your rights

You can, at any time, ask us to:

• Show you what personal data we hold about you.
• Delete a specific vote or payment record.
• Object to further processing.
• Receive a machine-readable copy of your data.

Email fanmap@gmail.com from the address linked to your payment, or include enough identifiers (Polar order ID + club + approximate date) to prove ownership. We respond within 30 days.

5. Retention

• Vote records: as long as the site is running (part of the public game state).
• Payment references: 5 years (tax obligations).
• Rate-limit data: 24 hours.
• Free-vote cookie: 1 year, browser-local.

6. Cookies

FanMap sets one small first-party cookie: fanmap_free_used. It stores which countries this browser has already claimed a free vote in, so we don't hand out the same gift twice. It is not used for tracking or advertising.

7. Children

FanMap is not directed at children under 13 (16 in the EEA/UK). We do not knowingly collect data from them. If you believe a child has submitted a payment, email us and we'll process a refund and delete the record.

8. Changes

We'll post any material changes to this Policy here with a new “last updated” date, and highlight them on the homepage for at least 7 days.

9. Contact

Data controller: FanMap operator. Email: fanmap@gmail.com.