Privacy Policy

Effective date: November 5, 2026
Last modified: November 9, 2026

Hall of Fans, Inc. ("Hall of Fans," "we," "us," or "our") operates Hall of Fans, a fan engagement service that lets sports fans check in to games, collect digital player cards and event cubes, earn points, post and chat with other fans, and follow their club. This Privacy Policy explains what personal data we collect through our web app at app.halloffans.net, our website at halloffans.net, our Android and iOS apps when they are available, and related services (together, the "Services"), how we use it, who receives it, how long we keep it, and what rights you have.

The Services are offered mainly in Spanish and are directed to fans in Mexico. This policy is intended to serve as our privacy notice (aviso de privacidad integral) under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, the "LFPDPPP") and to give the disclosures required by other laws that may apply to you, including United States state privacy laws. This policy is available in Spanish and English. For users in Mexico, the Spanish version prevails if the two differ.

1. Who We Are and How to Contact Us

Hall of Fans, Inc. is a corporation incorporated under the laws of the State of Delaware, United States (Delaware file number 10757324). Hall of Fans, Inc. is the party responsible for your personal data (the "responsable" under the LFPDPPP and the "controller" under other laws), wherever you live.

Privacy questions and requests: privacy@halloffans.net
Account support: support@halloffans.net
Legal notices: legal@halloffans.net
Registered office and mailing address: Hall of Fans, Inc., c/o Harbor Business Compliance Corporation, 2915 Ogletown Road, Newark, Delaware 19713, United States

We have not appointed a data protection officer.

2. Who May Use the Services

You must be at least 18 years old to create an account. We ask for your date of birth when you create an account, including when you sign in for the first time with Google, Apple, or Facebook, and our servers refuse an account for anyone under 18. We do not keep your date of birth itself: we keep only the dates derived from it that our age check needs. If an account created through Google, Apple, or Facebook gives a date of birth under 18, we delete that account immediately.

We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has an account, write to privacy@halloffans.net and we will delete it.

3. Personal Data We Collect and Why

We collect only what the features below need. We do not ask you for sensitive personal data (such as health, religion, political opinions, sexual orientation, racial or ethnic origin, or biometric data) and we do not use your data to infer such characteristics. Photos and documents you choose to upload may show information about you; see Sections 3.6 and 3.9.

For people in the European Economic Area, the United Kingdom, or Switzerland, each subsection names the legal basis we rely on.

3.1 Account Data

When you create an account with an email address and password, we collect your email address and your password (stored only as a cryptographic hash by our authentication provider). We also collect the username (handle) you choose, the club you declare as yours (optional), your home city, the dates derived from your date of birth for the age check, the versions and dates of the Terms of Service and Privacy Policy you accepted, and a record of the consents you gave and when (Section 3.3). We use this data to create and secure your account, to sign you in, to send account emails (confirmation, sign-in codes, and password resets), and to show the Services in the right form for your club and city. Legal basis: performance of our contract with you.

3.2 Signing In with Google, Apple, or Facebook

Where we offer it, you may create an account or sign in with a Google, Apple, or Facebook (Meta Platforms) account instead of a password. The provider asks your permission, then sends us the information described below. We never receive your password for that provider.

Google. We request only Google's basic sign-in permissions (the "openid", "email", and "profile" scopes). Google sends us your Google account identifier, your email address and whether Google has verified it, your name, and the address of your Google profile picture. We do not request, and cannot read, your Gmail, Google Drive, contacts, calendar, or any other Google data. See Section 4 for how we handle data from Google.
Apple. Apple sends us an Apple account identifier, your email address, and, the first time only, the name you choose to share. If you choose Apple's "Hide My Email" option, we receive a private relay address that forwards to your real address; we never see your real address, and emails we send to the relay address reach you through Apple.
Facebook (Meta Platforms). Meta sends us your Facebook account identifier for our app, your email address, your name, and the address of your profile picture.

We use the account identifier and email address to create your account, to sign you in, and to send account emails. Our authentication provider stores the name and profile picture address together with your sign-in record, but the Services do not display them or use them for anything else: your public identity in the Services is the handle you choose. After the provider signs you in, you must finish your account (handle, date of birth, acceptance of these documents, and the consents in Section 3.3). If you do not finish it within 72 hours, we delete the unfinished account automatically. Legal basis: performance of our contract with you.

3.3 Consents You Give When You Create an Account

When you create an account we ask for two consents, each with its own checkbox, and we record which wording you agreed to and when. You can see both, and withdraw or give again the location consent, in Settings, Your consents:

Location for check-ins: that we may use your device's location when you check in to a game in person, to verify that you are there, and keep that location with the check-in (Section 3.4).
International transfer: that your personal data may be transferred to, stored, and processed in the United States and other countries outside your own, by Hall of Fans and the service providers that host and run the Services (Section 6).

The international transfer consent is required to create an account. The location consent is optional: if you do not give it at sign-up, the app asks for it the first time you check in in person, and without it you can still check in as a public viewing or streaming fan. You may withdraw either consent at any time (Section 9). Because the Services are hosted in the United States, we cannot operate your account without the international transfer consent; withdrawing it means closing your account.

3.4 Location Data

In-person check-ins. Only when you choose to check in "in person" and allow it, the app reads your device's precise location once (using your device's own location services) and records it with the check-in, together with the distance to the venue and whether your device reports the location as simulated ("mocked"). We use it to confirm that you are at the stadium, to refuse simulated or impossible locations, and to review disputes. 30 days after each check-in we delete its precise coordinates; the rest of the check-in, including the distance to the venue, stays. Other fans never see your location. Check-ins as a public viewing or streaming fan do not use your location. Legal basis: your consent.

Verify I travel (optional, adults only). If you turn on Verify I travel in Settings, after an explanation screen and your device's own permission prompt, the app reads your approximate location in the background, including when the app is closed, and sends it to us. We keep only one area of about 10 km (a 0.1 degree grid cell) per night, for 31 days, never your exact position and never your route. We use it only to check whether you live 100 km or more from your club's stadium, which affects road-game rewards. No staff member can read it. Turning the feature off stops the readings and deletes every stored night at once. We record that you agreed, which wording you agreed to, and when, and also when you turn the feature off. Legal basis: your consent.

We do not track your location at any other time, and we do not use location for advertising.

3.5 Your Activity in the Services

We record what you do in the Services so they can work: check-ins (game, type, status, and time), event cubes and the answers you write in them (such as what made a game special and your player pick), player cards and card packs you open, badges, Loyalty Points, Chispas (our activity score, called "Sparks" in English), hot takes and whether they came true, post-match survey answers (a rating and an optional short note), the subhalls (fan groups) you create or join, the fans you block, and the reports you send. We use this data to operate the features, to keep leaderboards and rewards fair, to prevent fraud and cheating, and to answer support requests. Legal basis: performance of our contract with you and our legitimate interests in preventing fraud.

Our staff also use this data to produce aggregate statistics, such as attendance, a loyalty index, fan segments, and counts per club and city, to run and improve the Services. When we show such statistics to clubs, Section 5 applies.

3.6 Photos, Videos, and Profile Photos

Cube photos and videos. You may add photos and short videos (up to 15 seconds, with sound) to your event cubes, taken with your camera or chosen from your library. Only the media you pick is uploaded. These files are private to you: other fans cannot see them, even on a public cube. Authorized Hall of Fans staff may view them when reviewing a check-in, a card, or a report.

Profile photo (adults only). You may upload a profile photo. The app crops it and re-encodes it on your device before upload, which removes embedded location and camera information. Your profile photo is shown wherever your avatar appears, to every signed-in fan, and anyone who has its web address can open it. You may instead use one of our drawn avatars.

Legal basis: performance of our contract with you.

You may write posts and hot takes, send messages and reactions in live game chats and subhalls, use stickers, and create custom emojis (drawn on a pixel grid in the app, or uploaded as a picture) ("User Content"). Posts, hot takes, chat messages, public cube answers, subhall names, and live custom emojis are visible to other signed-in fans together with your handle and avatar. Uploaded emoji pictures are visible only to you and our staff until our staff approve them.

Moderation. To keep the Services safe we: (a) automatically refuse text that contains terms on our blocked list; (b) hide a post, message, photo, or emoji once three different fans report it, until our staff decide; (c) have staff review reports and uploaded emoji pictures, and remove content or suspend accounts that break the Terms of Service. Staff decisions are recorded (Section 7). Legal basis: performance of our contract with you and our legitimate interests in keeping the Services safe.

3.8 Notifications

If you turn on notifications (for example, card alerts), we store a notification token for your device or browser. On the Android and iOS apps the token is issued through Expo's push service, which passes notifications to Apple Push Notification service or Google Firebase Cloud Messaging; in a web browser, the notification is delivered through your browser maker's push service. Turning notifications off, or signing out, removes the token. Legal basis: your consent (given by turning notifications on).

3.9 Proof of Address for a Home City Change

If you ask to change your home city, we ask you to upload one proof of address, such as a recent bill, bank statement, or official letter showing your name and your address in the new city, as a photo or a PDF. The document may show other details printed on it. Only the Hall of Fans staff members who review home city requests can see it; they open it one at a time through a link that expires after 60 seconds, and each viewing is recorded. You cannot view it again after upload. We do not share it with clubs, partners, or other fans. We delete the document 30 days after we approve or reject your request or after you withdraw it; a document uploaded without a request is deleted after 24 hours. The record of the request (the city, its status, the dates, and any reason for a rejection) is kept while your account exists. We do not use the document as a shipping address and do not keep the address shown on it. Legal basis: performance of our contract with you and our legitimate interests in keeping home city statistics accurate.

3.10 Ticket Information from Clubs

A club may give us its ticket sales records (number of tickets, date, amount, and sales channel) so that it can compare ticket sales with attendance. We do not receive or store the email addresses in the club's file: the club's file identifies each buyer by a one-way code (a SHA-256 hash) of the email address, and we match it to the same code of the email address you signed up with. If it matches, the ticket record is linked to your account and is used only by our staff to produce statistics for that club (Section 5). It is never shown to other fans. Legal basis: our legitimate interests in measuring attendance for our club partners.

3.11 Device, Log, and Diagnostic Data

When you use the Services, our hosting and service providers receive technical data that any internet service receives, such as your IP address, browser or device type, operating system, and the time of each request, and keep it in their logs for security and troubleshooting. Our authentication provider also keeps a log of sign-in and account events that includes your email address. Supabase keeps these logs for up to 7 days. Netlify keeps its request logs under its own retention schedule.

If the app or website crashes or meets an error, we may send a crash report to Sentry. We also send Sentry performance measurements for a sample of app starts, page loads, and screen changes: which page or screen was loading, how long each step took, and the addresses of the requests it made, without their query strings. Crash reports and performance measurements are stripped of email addresses, sign-in tokens, and account identifiers (including the ids of fans, cubes, and posts that appear in page addresses) before they are sent, and contain the error or measurement, the device model, operating system and app version, and a random installation identifier that is not linked to your account.

On the Android and iOS apps, we also send Sentry a session replay for a sample of app sessions, and for sessions in which an error occurs, covering about the minute before the error and the rest of that session. A replay is a video-like recording of the app's screens, made on your device with all text, images, and graphics masked, so it shows the layout of the screens but not what they say or show. It also records your taps and swipes, screen changes, the app's own log messages, and the address, method, size, and result of each network request, but not the content of the requests. A replay is not linked to your account, but a request address in it can contain the id of a page or item you opened. The website does not record replays. Sentry keeps crash reports, performance measurements, and replays for up to 90 days.

The Android and iOS apps also send a random identifier when they check for app updates through Expo; it is not linked to your account. We do not use advertising identifiers, and we do not collect the list of apps installed on your device. Legal basis: our legitimate interests in keeping the Services secure and working.

3.12 Cookies and Browser Storage

We do not use advertising or analytics cookies and we do not use third-party advertising or analytics tools. Sentry (Section 3.11) is used only to find and fix errors and slow screens. In a web browser, the Services keep a few items in your browser's own storage that the Services need to work: your sign-in session, your language and display theme, whether you dismissed the install banner or a survey card, and, for a few minutes during sign-in with Google, Apple, or Facebook, a marker that the sign-in is in progress. On the Android and iOS apps, the same items are kept on your device. Clearing your browser's storage signs you out.

3.13 Website Early Access List

If you enter your email address in the early access form on halloffans.net, we receive it through our website host's form service (Netlify) and use it only to tell you when the Services or new features are available. You can ask us to remove it at any time at privacy@halloffans.net. Legal basis: your consent.

All the purposes above are needed to provide the Services (primary purposes), except: location for in-person check-ins (Section 3.4), Verify I travel (Section 3.4), notifications (Section 3.8), and the early access list (Section 3.13), which need your consent and which you can withdraw without losing the rest of the Services. We do not send marketing emails today. If we start, we will ask for your consent first and every such email will include a way to unsubscribe.

We do not sell your personal data, we do not share it for targeted advertising, and we do not show advertising in the Services.

4. How We Handle Data from Google

This section applies to information we receive when you sign in with Google (Section 3.2).

What we access: your Google account identifier, email address, email verification status, name, and profile picture address, through Google's basic sign-in permissions only.
How we use it: only to create your account, sign you in, recognize you when you return, and send you account emails. We do not use it for advertising, we do not sell it, and we do not use it to develop, improve, or train artificial intelligence or machine learning models.
How we store and protect it: in our authentication provider's database (Supabase, hosted in the United States), transmitted only over encrypted connections, readable only by our servers and by authorized staff for support, security, or legal reasons.
How we share it: we do not share it with anyone except the service providers that host and run the Services on our behalf (Section 5), or where the law requires it.
How long we keep it and how to delete it: until you delete your account, which deletes it at once (Section 7); an account you never finish is deleted after 72 hours. You can also remove Hall of Fans's access at any time in your Google Account settings (myaccount.google.com/permissions); you will then need another way to sign in.

Hall of Fans's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who Receives Your Personal Data

Other fans. Your handle, avatar or profile photo, declared club, public check-ins (game and time, never location), Loyalty Points, badges, leaderboard position, public cubes, posts, hot takes, chat messages, and live custom emojis are visible to other signed-in fans.

Service providers. These companies process personal data on our behalf, under our instructions, only to run the Services. Under the LFPDPPP these are "remisiones" (communications to processors), not transfers:

Supabase, Inc.: database, authentication, file storage, and server functions (all account data). United States (Amazon Web Services region us-west-1, California).
Netlify, Inc.: hosts the web app and the website, and receives the early access form. United States and its global delivery network.
Functional Software, Inc. (Sentry): crash and error reports, performance measurements, and session replays from the Android and iOS apps (Section 3.11). United States.
650 Industries, Inc. (Expo): app updates and push notification delivery, Android and iOS apps only. United States.
Apple Inc. and Google LLC: delivery of push notifications to your device. United States and other countries.
Resend: sends our emails. United States.
Anthropic, PBC: writes summaries from aggregate statistics and suggests player moments from public game box scores; it does not receive your account data. United States.

Sign-in providers. If you sign in with Google, Apple, or Facebook, that provider knows that you signed in to Hall of Fans, under its own privacy policy.

Clubs and leagues. We do not give clubs or leagues your name, handle, email address, location, or any other data that identifies you. A club that has signed a data processing agreement with us may see aggregate statistics about its fans (for example, check-ins per game or cards by rarity), in which any group of fewer than 5 fans is withheld.

Legal requirements and safety. We may disclose data where required by law, subpoena, or court order, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of Hall of Fans, our users, or the public.

Business transfers. If Hall of Fans is involved in a merger, acquisition, sale of assets, or insolvency, personal data may pass to the acquiring entity, which must honor this policy. We will notify you before your data becomes subject to a different privacy policy.

6. International Data Transfers

Hall of Fans, Inc. is a United States company and our main hosting is in the United States. If you use the Services from Mexico or another country, your personal data is sent to, stored in, and processed in the United States, and some providers in Section 5 may process it in other countries. Data protection laws there may differ from those in your country. You agree to this when you give the international transfer consent at sign-up (Section 3.3). Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on the safeguards recognized by those laws, such as the European Commission's Standard Contractual Clauses.

7. How Long We Keep Your Data

We keep your personal data while your account exists, and then as described here:

When you delete your account (Profile, Settings, Delete Account), we delete at once your account, sign-in identities, profile, profile photo, check-ins and their locations, cubes, photos and videos, posts and hot takes, chat messages and reactions, custom emojis, points and Chispas history, badges, notification tokens, blocks, reports, and consent records. Player cards stay in circulation without an owner, player picks stay as anonymous counts, and a subhall you created stays without a creator. Our public account deletion page lists exactly what is deleted and kept.
Unfinished accounts created through Google, Apple, or Facebook: deleted after 72 hours.
Check-in locations: the precise coordinates of each in-person check-in are deleted 30 days after it; the rest of the check-in stays while your account exists.
Verify I travel: each night kept 31 days; all deleted when you turn the feature off.
Proof of address: deleted 30 days after the decision or withdrawal; 24 hours if never sent with a request.
Security and audit records. We keep a record of security-relevant actions on the Services, such as check-in submissions and staff decisions on them, team declarations, staff reviews of collectibles and content, and account deletion requests. These records identify your account by an internal account identifier, not by your name or email address, and may include details of the action (for example, how far a check-in was from the venue). Only authorized Hall of Fans staff can access them. When you delete your account, we keep these records, still linked only to that internal identifier, for as long as necessary to prevent fraud, resolve disputes, and meet our legal obligations. Legal basis: our legitimate interests.
Provider logs: as stated in Section 3.11.
Early access list: until you ask us to remove your email, or until the list is no longer needed.

8. Security

We protect personal data with technical and organizational measures, including: encrypted connections (HTTPS) for all data in transit; database access rules enforced on our servers for every request, so that each account can reach only the data it is allowed to; private storage for cube media, proofs of address, and pending emoji pictures; short-lived links for staff access to private files; staff access limited to people who need it, with sensitive actions recorded; removal of personal data from crash reports and performance measurements; and masking of all on-screen text, images, and graphics in session replays. We maintain procedures to detect and respond to personal data breaches and will notify you and the authorities where the law requires. No system is completely secure, and we cannot guarantee absolute security.

9. Your Rights and How to Exercise Them

Depending on where you live, you have the right to:

Access the personal data we hold about you and how we use it;
Rectify (correct) inaccurate or incomplete data;
Cancel (delete) your data, subject to the retention described in Section 7;
Oppose (object to) processing for specific purposes;
Withdraw a consent you gave, without affecting processing done before;
Limit the use or disclosure of your data, and receive your data in a portable format where the law provides it.

In Mexico these are your ARCO rights (acceso, rectificación, cancelación y oposición) and your right to revoke consent.

How to make a request. Delete your account in the app (Profile, Settings, Delete Account), withdraw the location consent in Settings, Your consents, turn off Verify I travel or notifications in Settings, or write to privacy@halloffans.net from the email address of your account. Your request should include your handle, the right you want to exercise, a clear description of the data concerned, and anything that helps us find it. If you write from another address, or through a representative, we may ask you to prove your identity or the representative's authority. We will answer within 20 business days of receiving a complete request and, if we grant it, carry it out within 15 business days after our answer, unless a shorter period applies to you. These requests are free. We will not treat you differently for exercising your rights.

Complaints. If you are in Mexico and believe we have not respected your rights, you may file a complaint with the Mexican data protection authority (the Secretaría Anticorrupción y Buen Gobierno). If you are in the European Economic Area or the United Kingdom, you may complain to your local supervisory authority.

10. United States State Privacy Rights

If you live in a U.S. state with a consumer privacy law, including California: in the last 12 months we have collected the categories of personal information described in Section 3, which correspond to identifiers, internet or electronic network activity information, geolocation data, audio and visual information (photos and videos you upload), commercial information (ticket records from clubs, Section 3.10), and inferences (fan segments). We collected them from you, from your device, from sign-in providers, and from clubs, for the purposes in Section 3, and disclosed them to the service providers in Section 5 for business purposes. We do not sell or share personal information as those terms are defined under California law, and we do not use sensitive personal information to infer characteristics about you. You may exercise the rights in Section 9 and appeal a refusal by writing to privacy@halloffans.net.

11. Changes to This Policy

We may update this Privacy Policy. If we make a material change, especially to how we use data received from Google or other sign-in providers, we will notify you in the Services or by email before it takes effect and, where the law requires, ask for your consent again. The date at the top shows the latest version.

12. Third-Party Services

The Services may link to websites and services we do not operate, including the sign-in providers in Section 3.2. Their privacy practices are governed by their own policies.