Who is responsible
TifoMaker is run by Demetrios Vlassis, a private individual based in Sofia, Bulgaria, who is the data controller for this website.
For any privacy question or request, write to dimitrios.v.2002@gmail.com.
What we collect
- Contact and access request forms: your name, email address, team, club or organization, your role, timeframe and expected crowd size, your message, how you want us to reply, and, only if you give it, a phone or WhatsApp number. We also record which page and language you used.
- Accounts, for people who were given access: username, email address, password (stored only as a secure hash, never in readable form) and the stadiums, choreographies and images you create.
- Usage data: Google Analytics, loaded through Google Tag Manager, records the pages you view, your device and browser type, your approximate location (country and city), how you arrived on the site and actions such as button clicks. Google Analytics 4 does not store IP addresses.
- Technical data stored in your browser: your language choice and, when you sign in, a login token. Both are needed for the site to work.
Why we use it
- To answer your enquiry, prepare a mockup and set up access for you, at your request (GDPR Art. 6(1)(b)).
- To run your account and let you use the design tool (Art. 6(1)(b)).
- To understand how the site is used and improve it, and to keep it secure and free of spam, based on our legitimate interest (Art. 6(1)(f)). You can object at any time, see Cookies below.
- We do not sell personal data, and we do not use it for advertising.
Services that process data for us
- Brevo (Sendinblue SAS, France): sends the emails of the site, such as form notifications, confirmations and account emails.
- Google (Gmail, Google Analytics, Google Tag Manager, Google Fonts): the mailbox where enquiries arrive, website analytics and web fonts. Google may process data in the United States under the EU-U.S. Data Privacy Framework.
- Microsoft Azure: hosts the website and the application server.
- Supabase: hosts the database of the application, in the European Union (Ireland).
- Cloudinary: stores images that you upload to your designs.
- WhatsApp (Meta): only if you ask us to reply on WhatsApp, we message you there.
Each of these providers processes the data only to provide its service, under its own data processing terms.
How long we keep it
- Enquiries: as long as needed to handle your request and follow up, and at the latest 24 months after our last contact, unless you become a user.
- Accounts: until you ask us to delete your account.
- Analytics: up to 14 months, after which Google Analytics deletes the detailed data.
Your rights
Under the GDPR you can ask to access the data we hold about you, correct it, delete it, restrict or object to its use, and receive it in a portable format. Write to dimitrios.v.2002@gmail.com and we will reply within one month.
You can also complain to the Bulgarian data protection authority, the Commission for Personal Data Protection: cpdp.bg
Children
TifoMaker is not directed at children under 16, and we do not knowingly collect their data.
Changes to this policy
When we change this policy we update this page and the date at the top.