Legal
Privacy policy
Effective 7 October 2026
Touchline Studio collects as little as possible. Players never need an account. Coaches give us a name, an email address and the plans they create, and if they use team sheets, their players' first names and shirt numbers. We don't sell data, show adverts or use tracking.
Who we are
Touchline Studio is run by Jonathan Keefe trading as KeefeCodes, a sole trader based in the UK, of 8 harriers Crescent, Liverpool L32 4AD. We are the “controller” of the personal data described here under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Contact us about anything in this policy at admin@keefecodes.com, or use the Privacy request button under Team week → Your data & help.
What we collect and why
| What | From whom | Why | Lawful basis |
|---|---|---|---|
| Name, email address, password (stored only as a one-way scrambled hash), the date you agreed to our terms | Coaches who create an account | To run your account, let you log in and contact you about your account | Contract |
| Teams, weekly plans, messages to players, sessions, drills and plays you create | Coaches and assistant coaches | To save your work and show it to the people you share it with | Contract |
| Players' first names or nicknames and shirt numbers (the squad list), and who is picked, a substitute or not available | Coaches and assistant coaches | To make and share team sheets | Legitimate interests (helping the team organise matches) |
| Email address of an assistant coach you invite | The coach who invites them | To send the invitation | Legitimate interests (helping coaches work together) |
| Plan and billing records: your plan, subscription status, renewal and trial dates, and Stripe's reference numbers for you. We never see or store your full card number | Coaches who subscribe | To take payments, give you the right features and keep tax records | Contract; legal obligation (accounting records) |
| Feedback, reports of concern and privacy requests, with any email address you give | Anyone who uses the forms | To answer you and keep the service safe | Legitimate interests; legal obligation for safety reports and data protection complaints |
| A count of how many times each player page is opened | Anyone opening a player link (no identity recorded) | So coaches can see their link is being used | Legitimate interests |
| IP address and basic request details, kept briefly in server logs and in memory to stop repeated login attempts | Everyone who visits | Security and preventing abuse | Legitimate interests |
We don't use your data for marketing, profiling or automated decisions, and we don't use it to train AI models. If we ever want to email you news, we'll ask first.
Players and children
Players don't create accounts. The only player information we hold is what a coach adds for team sheets: a first name or nickname and a shirt number. The team sheet on a player page shows only the players picked to start or be a substitute; who isn't available is visible to coaches only, and no reason is ever recorded. A player page shows only what the coach chooses to post, and opening it doesn't set any cookie or record who you are. Because players may be under 18, our Terms and Safeguarding page tell coaches not to post players' personal details such as surnames, phone numbers, addresses, dates of birth, medical information or photos. If you see something on a player page that shouldn't be there, use Report a concern at the bottom of the page and we'll remove it.
Coach accounts are for adults (18 and over) only.
Who we share it with
Only the companies that help us run the service, under contracts that require them to protect it and use it only on our instructions:
- IONOS: hosts our server and database in theUnited Kingdom.
- Resend, Inc.: sends account emails (password resets, invitations). Data is processed in the United States, under the UK International Data Transfer Addendum in their data processing agreement.
- Stripe (Stripe Payments UK Ltd): processes payments when you subscribe. You enter your card on Stripe's page. Stripe also uses your payment details for fraud prevention and its own legal duties, as explained in Stripe's privacy policy. Some of its processing happens outside the UK under approved safeguards.
Fonts and code libraries are served from our own server, so no third party sees your visit. We may also share information if the law requires it, or to protect someone's safety.
How long we keep it
- Your account and everything you created: until you delete your account. You can do that yourself at any time.
- Backups: kept for 14 days, then deleted automatically, so deleted data disappears from backups within 14 days.
- Published player pages: until the coach deletes them, or the account is deleted.
- Squad lists: until the coach removes the player, deletes the team or deletes the account.
- Feedback, reports and requests: up to 2 years, so we can show how we handled them.
- Payment and invoice records: 6 years after the end of the tax year they relate to, because UK tax law requires it. Stripe keeps its own records for the same reason.
- Server logs: up to 30 days.
- Accounts unused for 2 years: we'll email you, then delete the account if you don't reply within 30 days.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or give it to you in a portable format. Coaches can download all their data and delete their account themselves under Team week → Your data & help. For anything else, email us or use the Privacy request form. We'll reply within one month.
Complaints
If you're unhappy with how we've handled your data, please tell us first: email admin@keefecodes.com or use the Privacy request form. We'll acknowledge your complaint within 30 days, look into it, keep you updated and tell you the outcome without undue delay.
You can also complain to the Information Commission at ico.org.uk/make-a-complaint or on 0303 123 1113.
Security
All connections are encrypted (HTTPS). Passwords are hashed with scrypt and never stored in readable form. Login cookies can't be read by scripts. Our server is firewalled, kept up to date and backed up nightly. If a breach ever puts your data at risk, we'll tell you and the Information Commission as the law requires.
Cookies
We use one essential cookie to keep coaches logged in, and nothing for tracking or adverts. See our Cookies page.
Changes
If we make a significant change, we'll tell coaches by email or in the app at least 14 days before it takes effect, and ask you to agree again where needed.