Privacy Policy

UM Tracker is operated by Amin El-Bekry, based in Halmstad, Sweden ("we", "us", or "our"). We are the data controller responsible for your personal data.

For privacy-related questions, contact us at privacy@umtracker.com.

Account data: email address, name, and password (stored in hashed form).

User content: Universe data you create in the app, including shows, superstars, matches, storylines, and related information.

Technical and usage data: IP address, browser and device information, error reports, and session diagnostics collected when you use the service.

Communications data: messages we send to you (such as verification and password-reset emails) and metadata related to email delivery.

Cookies and similar technologies: authentication session cookies, preference cookies (such as sidebar state), and diagnostics cookies used by our error-monitoring tools. See the Cookies section below for details.

We process your personal data only when we have a lawful basis under the GDPR:

Providing the service (legal basis: performance of a contract): creating and managing your account, storing and displaying your Universe data, and authenticating you when you sign in.

Service communications (legal basis: performance of a contract): sending account-related emails such as email verification, password reset, and important service notices.

Security and abuse prevention (legal basis: legitimate interest): rate limiting, fraud prevention, and protecting the service and its users.

Error monitoring and reliability (legal basis: legitimate interest): diagnosing bugs and improving stability using error-reporting tools, which may include your user ID and email when you are signed in.

Product improvement (legal basis: legitimate interest): understanding how the service is used in aggregate to improve features and performance.

We do not sell your personal information. We do not use your data for cross-context behavioural advertising.

We use trusted service providers (data processors) to run UM Tracker. They process data on our instructions and only as needed to provide their services:

Neon — database hosting and storage of your account and Universe data.

Railway — API hosting and server infrastructure.

Vercel — frontend hosting for the app and marketing website.

Resend — delivery of transactional emails (verification, password reset, and service messages).

Sentry — error monitoring, performance diagnostics, and session replay on a sampled basis when errors occur.

We may also disclose data if required by law, court order, or to protect the rights, safety, and security of our users and the service.

Some of our service providers may process personal data outside the European Economic Area (EEA), including in the United States.

When we transfer data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework or equivalent mechanisms offered by our providers.

You may contact us at privacy@umtracker.com for more information about transfers and the safeguards we use.

Account and Universe data: kept for as long as your account is active. If you delete your account or request erasure, we delete or anonymise your personal data unless we must retain it for legal obligations.

Archived Universes: permanently deleted 30 days after you archive them.

Technical logs and error reports: retained for a limited period needed for security and troubleshooting, typically up to 90 days unless a longer period is required to investigate an incident.

Email delivery records: retained as long as needed for delivery troubleshooting and legal compliance, typically up to 24 months.

Strictly necessary cookies: authentication session cookies required to keep you signed in. These do not require consent.

Functional cookies: preference cookies that remember UI settings (such as sidebar open/closed state).

Diagnostics cookies: our error-monitoring provider may use cookies or local storage to capture error context and, in some cases, session replay to help us diagnose issues. Where required by law, we will ask for your consent before enabling non-essential diagnostics.

You can control cookies through your browser settings. Disabling strictly necessary cookies may prevent you from using the service.

Under the GDPR, if you are in the EU or EEA (including Sweden), you have the right to:

Access the personal data we hold about you.

Rectify inaccurate or incomplete data.

Erase your data ("right to be forgotten") in certain circumstances.

Restrict processing in certain circumstances.

Data portability — receive your data in a structured, commonly used format where technically feasible.

Object to processing based on legitimate interests.

Withdraw consent at any time, where processing is based on consent (this does not affect processing already carried out).

You can access and update much of your account data in the app. To exercise any of these rights, contact us at privacy@umtracker.com. We respond within one month, which may be extended by up to two further months for complex requests.

You also have the right to lodge a complaint with your local supervisory authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY) at imy.se.

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

UM Tracker is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us at privacy@umtracker.com and we will delete it.

We use industry-standard technical and organisational measures to protect your personal data, including encryption in transit, access controls, and secure hosting. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date. For material changes, we will notify you through the app or by email where appropriate.

For privacy questions or to exercise your rights, contact us at privacy@umtracker.com