Privacy Policy

Bawler ("we", "us", "our") is a football analytics website operated as a sole trader in the United Kingdom. We publish football predictions and track our results publicly. This Privacy Policy explains what personal data we collect, why we collect it, and how we handle it.

If you have questions about this policy, email us at privacy@bawler.ai. You can also reach us via DM at @bawlerai on X.

We collect the minimum data needed to run the site. Specifically:

• Account data — if you create an account: your email address and a hashed password (stored by our auth provider, Supabase). We do not see your password in plain text.
• Daily email list — if you sign up for the daily email: your email address, the list you joined, whether your sign-up is waiting for confirmation, confirmed or unsubscribed, a random code used in your personal confirm and unsubscribe links, and the times you signed up, confirmed or unsubscribed. This list is kept on our own server, not with an advertising or mailing-list company.
• Usage data — anonymised page-view counts, country (approximated from IP), and basic device info (browser, screen size), used to improve the site.
• Cookies — see Section 6.
• Communications — if you email us or DM us, we keep that correspondence to reply.

We do not collect your real name (unless you choose to give it), your address, or any payment details — the site is free and takes no payments.

Each category of data has a specific purpose:

• Account data — to identify you when you log in and to send account emails (password reset, etc.). Legal basis: contract (we need this to provide the service you signed up for).
• Daily email list — to send you the daily email you asked for: the model's most confident predictions for the day. Legal basis: consent. We use double opt-in: signing up only sends you one confirmation email, and nothing else is sent until you click the link in it. Every daily email has an unsubscribe link at the bottom, which works with one click.
• Usage data — to understand which features users find valuable and to fix bugs. Legal basis: legitimate interest (running the site).
• Cookies — see Section 6. Legal basis varies (necessary cookies = contract; analytics = consent).

We share data only with the third-party services that make Bawler work:

• Supabase (EU servers) — authentication and user account database. Their privacy policy: supabase.com/privacy.
• Cloudflare (global) — CDN, DDoS protection, and analytics. Their privacy policy: cloudflare.com/privacypolicy.
• Resend (US/EU) — sends our emails: the daily email, its sign-up confirmation, and account emails such as password reset. Resend receives your email address and the content of each email so it can deliver it. Their privacy policy: resend.com/legal/privacy-policy.
• Anthropic (US) — we send anonymised pick context (team names, statistics) to Claude to generate the AI rationale on each pick. No user data is sent. Privacy policy: anthropic.com/legal/privacy.

We do not sell your data to advertisers or data brokers.

• Account data — for as long as your account is active. If you delete your account, we erase your data within 30 days.
• Daily email list — while you are subscribed. If you unsubscribe, we keep your address marked as unsubscribed so that you are not emailed again; email privacy@bawler.ai if you want it erased completely. If you never confirm a sign-up, you receive nothing further from us.
• Usage analytics — aggregated and anonymised after 90 days.
• Email correspondence — 2 years from last reply, then deleted.

We use a small number of cookies:

• Authentication cookie (set by Supabase) — keeps you logged in. Necessary for the site to work.
• Cloudflare cookies — security, bot protection. Necessary.
• Preferences — remembers small display choices, such as whether you've dismissed a tip. Stored in your browser only, not sent to us.

We do not use third-party advertising or tracking cookies. You can clear or block cookies in your browser settings; the site will still work but you may need to log in each visit.

You have the right to:

• Access the personal data we hold about you
• Correct any inaccurate data
• Delete your account and all associated data
• Object to processing for legitimate-interest purposes
• Export your data in a portable format
• Complain to the Information Commissioner's Office (ICO) — ico.org.uk

Email privacy@bawler.ai with any request. We aim to respond within 7 days and will act on valid requests within 30 days as required by UK GDPR.

Bawler carries no advertising and places no affiliate tracking on any link, so no advertiser or affiliate partner receives your email or any other personal data from us. If that ever changes, we will update this policy and the disclosure page first.

If we make material changes to this policy, we'll update the "Last updated" date at the top and, for significant changes, notify registered users and email subscribers at least 7 days before changes take effect.

Bawler is operated by a UK sole trader. For any privacy questions, complaints, or data requests:

Email: privacy@bawler.ai
X / Twitter DM: @bawlerai