Privacy & cookies

Hincha is a local football news service. This policy explains what we collect when you sign up and how we use it. Questions? Email hello@hincha.football.

When you sign up we store:

• Your email address (required)
• The club you support (required)
• Your country (optional)
• Your phone number and the time you gave consent — only if you opt in to WhatsApp updates
• Technical and marketing context: the date you joined, the page that referred you, campaign parameters (UTM tags), your assigned test variant, and your browser's user-agent string

We use the club and campaign data in aggregate to understand demand and decide which clubs to cover first.

If you opt in to WhatsApp updates, we collect your phone number solely to send you your weekly bulletin via WhatsApp, and we record when you gave consent. Your bulletin still arrives by email as well. You can withdraw at any time by replying STOP to any of our WhatsApp messages, or by emailing hello@hincha.football. We never share your number.

We process your signup data on the basis of your consent. We use double opt-in: after signing up you receive an email asking you to confirm. You can withdraw consent and ask us to delete your data at any time by emailing hello@hincha.football.

We keep cookies to a minimum:

• Essential: a cookie that remembers which version of the page you saw (for A/B testing) and your cookie choice.
• Cookieless analytics: we use Umami, a privacy-first analytics tool that sets no cookies and collects no personal data, to count page views and key actions in aggregate. This runs whatever you choose below.
• Marketing & analytics:PostHog and Google Analytics (traffic measurement) load only if you click “Accept”. The Meta (Facebook) Pixel (to measure and improve our ads) loads on every visit but starts in a consent-revoked state — it sends nothing to Meta until you accept, and a decline keeps it silent.

If you accept and then sign up, we also send a hashed (irreversible) copy of your email and a one-off event identifier to Meta via its Conversions API, so we can measure which ads led to sign-ups. We never send your email in plain text. If you decline, nothing is shared with Meta.

Signup data is stored in a Supabase (PostgreSQL) database hosted in the EU (London). We may use Resend to send confirmation emails; Umami, PostHog and Google Analytics for traffic measurement; Meta Platforms (the Facebook/Instagram Pixel and Conversions API) for advertising measurement (only with consent); our WhatsApp messaging provider to deliver WhatsApp bulletins (WhatsApp opt-ins only); and Vercel for hosting. Each processes data only to provide its service. Sharing with Meta may involve transfers to the United States under appropriate safeguards.

We keep your data until you ask us to remove it. You have the right to access, correct or delete your data — just email us. If you're in the EU/UK you also have the right to complain to your data protection authority.