Privacy Policy

1. What we collect

Depending on how you use the site, we may collect:

• Business contact info — name, email, phone, role, when you submit a listing or contact us
• Business details — venue name, address, neighborhood, website, social handles, photos uploaded to our listing-photos storage bucket
• Listing submissions — business type, hours, TVs/sound/capacity, age policy, specials, Passport perk, signature item, matchday special
• Cultural + Matchday Fit responses — owner-submitted tags about cuisine, cultural connection, teams/countries supported, and match viewing
• Owner-submitted tags and notes attached to a listing
• Payment metadata from Stripe — checkout session and payment intent IDs, receipt email, amount, status (we do not see full card numbers). Payments are processed by Stripe under its own terms and privacy policy.
• Email signups for newsletters and city alerts
• Anonymous interaction analytics — venue clicks, affiliate clicks, source page, Passport generation events, Passport shuffle/click events, perk claim-intent events, business funnel events, and business dashboard analytics. These are tied to an anonymous session identifier (lg_session_id) we store in your browser, not to a real-world identity.
• User agent and IP, where captured, for security, abuse prevention, and consent records
• Checkout / session identifiers — short-lived cookies and storage values (such as lg_checkout_sids) used to keep your checkout flow in sync
• Admin notes and report submissions tied to a listing or content correction

2. How we use it

• Operate the directory, search, Matchday Passport, perks, and matchday tools
• Review, approve, label, and publish business listings and photos
• Process payments for paid placements and packages via Stripe
• Power the business dashboard so owners can see listing status, Passport eligibility, perks, featured campaigns, and basic performance analytics for their own listings
• Send transactional and newsletter email (with opt-out)
• Detect abuse, fraud, or misuse, and respond to reports
• Improve content, layout, and recommendations using aggregated analytics
• Enforce lightweight per-browser claim limits on Passport perks

3. Sharing

We do not sell personal data. We share limited data with vendors that help us run LetsGoal, including:

• Supabase — managed database, authentication, and storage (including the listing-photos bucket for business-uploaded images)
• Stripe — payment processing for paid listings and packages
• Hosting / CDN — to serve the site
• Email providers — to send transactional and newsletter email
• Analytics — privacy-respecting aggregate analytics

We may disclose information if required by law, to enforce our terms, or to protect the safety of users and the public.

4. Cookies and similar storage

We use essential cookies and short-lived browser storage to keep you signed in, complete checkout, and remember basic preferences. You can disable cookies in your browser, but parts of the site may stop working.

5. Local browser storage

To make Matchday Passport, perks, and checkout work smoothly without forcing you to create an account, LetsGoal stores a small amount of data locally in your browser via localStorage. This data stays on your device and is not personal identity data. It may include:

• Anonymous session ID (lg_session_id) used to tie repeat interactions on this browser together for analytics and claim limits
• Today's claimed perks record used to prevent duplicate Passport perk claims from the same browser on the same day
• Checkout and session continuity values (such as lg_checkout_sids) so your Stripe checkout flow stays in sync if you switch tabs

You can clear this data at any time using your browser's site-data controls. Doing so will reset your anonymous session and your claim-limit history on this device.

6. Data retention

We retain listing, payment, and report data for as long as it is reasonably needed to operate LetsGoal, meet our legal and accounting obligations, and resolve disputes. Anonymous analytics may be kept longer in aggregated form.

7. Your choices

You can request access to, correction of, or deletion of your personal information by emailing us. California residents and residents of other jurisdictions with similar privacy laws have additional rights to know, correct, delete, and limit the use of their personal information, and to opt out of "sale" or "sharing" — LetsGoal does not sell personal data.

8. Children

LetsGoal is intended for general audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. Contact

Privacy requests and questions: privacy@letsgoal.us.