Privacy — GAA Pitch

Who we are

GAA Pitch is a session planner for grassroots GAA coaches. It is operated by Michael Whyte, trading as GAA Pitch, a sole trader based in Northern Ireland. We are the controller for the personal data we collect about users of the site and the app, and we can be reached for any privacy question at support@gaapitch.com. If you need our postal address, for a data-protection request or anything else, email us and we will provide it.

This page explains what personal data we hold, why we hold it, and the rights you have over it. We welcome users from GAA clubs around the world; this policy applies to all of them.

What we collect

Account details — your email address (and optionally your name) when you sign in via our authentication provider, Clerk.
Content you create — the sessions and drills you build inside the app, including their names, durations, and any notes you add.
Server access logs — request method, path, response status, and duration. We use these to debug and protect the service. Logs do not contain request bodies.
Usage data — aggregate information about how the app is used, such as which drills are viewed, added to sessions, or created. We use this to understand what coaches find useful and to improve GAA Pitch.

We do not use third-party advertising trackers, session-replay scripts, or social pixels.

Why we hold it

To sign you in and keep you signed in — handled through Clerk.
To deliver the service — we store the sessions and drills you create so you can return to them on any device.
To keep the service running — access logs help us investigate outages and abuse.
To improve the app — aggregate usage data helps us see which features and drills are useful and decide what to build next.

Our legal basis for each use

Where the UK or EU GDPR applies to you, we rely on the following bases:

Performance of a contract — creating and running your account, storing the sessions and drills you make, and providing and billing a paid subscription. Without this data we cannot give you the service you signed up for.
Legitimate interests — keeping the service secure and available, investigating abuse, and understanding in aggregate which features are used so we can decide what to build. Our interest is running a working, safe product; we use the least identifying data that answers the question.
Legal obligation — retaining records we are required to keep, such as those underlying tax and accounting for a purchase.
Consent — any optional analytics or marketing cookies, and marketing email. You can withdraw consent at any time, and doing so does not affect processing carried out before you withdrew it.

Who processes data on our behalf

We rely on a small number of vendors to operate the service. Each processes your data only on our instructions.

Clerk — authentication. Stores your email address and session tokens.
Google Cloud — application hosting and database, located in the European Union (europe-west1, Belgium).
Vercel — frontend hosting.

We do not sell your data, share it with advertisers, or use it for marketing. Our usage data is used only to run and improve GAA Pitch.

Clerk and Vercel are headquartered in the United States, so some processing happens outside the UK and the EU. We rely on the standard safeguards (UK International Data Transfer Agreement, EU Standard Contractual Clauses) that these vendors put in place for international transfers.

Payments are different. When you buy a subscription, the payment is taken by Paddle.com Market Limited, which acts as merchant of record. Paddle collects your billing details and payment data directly, as an independent controller of that data rather than as our processor, and uses it to take the payment, manage your subscription, calculate and remit sales tax, issue invoices and handle refunds. We never see or store your card details. What we receive back from Paddle is limited to what we need to grant you the right plan: a customer reference, your subscription status and when the period ends. Paddle’s own privacy notice covers what it does with your data.

We may also share data with professional advisers, such as our accountant, and with authorities where the law requires it or where it is needed to protect someone’s rights or safety.

Cookies

GAA Pitch uses only the essential cookies set by Clerk to keep you signed in. Any usage data we collect is measured on our own servers, not through tracking cookies, so we do not set advertising, marketing, or preference cookies, and you will not see a cookie consent banner. If we introduce non-essential cookies in future, we will ask for your consent first.

Where your data lives

Application data is hosted in the European Union (Google Cloud europe-west1, Belgium). Authentication and frontend hosting may process limited data in the United States as described above.

How long we keep it

We hold your account and the content you create for as long as your account is active. If you delete your account, we remove your account record and your content from our live database promptly. Encrypted database backups are retained for up to 7 days before they are overwritten.

Your rights

Under UK data protection law — and equivalent laws that apply where you live, such as the EU GDPR — you have the right to:

access the personal data we hold about you,
correct it if it is wrong,
delete it (subject to the backup window above),
receive a copy in a portable format,
object to how we use it.

To exercise any of these rights, email support@gaapitch.com. Our lead data protection regulator is the Information Commissioner’s Office (ICO). If you live elsewhere you can also complain to your local data protection authority.

Children

GAA Pitch is intended for coaches and is not designed for use by children under 16. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we will remove it.

Changes to this policy

We may update this policy as the service evolves. If we make a material change, we will email account holders before it takes effect. The “Last updated” date at the top of this page tells you when the current version was published.

Contact

Questions about this policy or your data? support@gaapitch.com.