Privacy Policy

Effective from 25 August 2026

coyg.io (“the site”) is a non-profit fan site run personally by an Arsenal fan. This page explains what information we receive and how we use it when you log in or post something.

1. What we collect

• Google login — your Google account’s unique identifier and email address. We don’t receive your name or photo from Google.
• What you enter when signing up — your nickname and main club.
• What you create while using the site — posts, comments, saved line-ups, player ratings and rating comments. We store who wrote each one (we need this to check who may edit or delete it).
• Feedback board (usable without logging in) — the nickname and message you enter, and the address of the page you wrote it from. To prevent spam we also store your IP address converted into a value that can’t be reversed. We do not store your original IP address.
• Visit statistics — we use Vercel Web Analytics. It uses no cookies and does not identify individuals. It aggregates the time of visit, pages viewed, where you came from (referring link), region (city level), operating system, browser and device type.

2. Why we use it

• To keep you logged in and confirm it’s you
• To show who wrote posts, comments, line-ups and ratings, and to check who may edit or delete them
• To prevent spam and abuse (the converted IP value on the feedback board)
• To see, in aggregate, which pages get used so we can improve the site

We don’t use it for advertising, and we don’t sell it or pass it on. We don’t provide it to third parties other than the processors listed in section 4.

3. Retention and deletion

• If you delete your account, your data is erased immediately. Deleting your account from My account removes it together with your nickname, club, posts, comments, line-ups and ratings. We keep no separate copies.
• ⚠️ Messages on the feedback board aren’t linked to your account, so they remain after you delete your account (a consequence of letting people post without logging in). If you want one removed, tell us via Feedback and we’ll delete it.
• Visit statistics are aggregated and don’t identify individuals, so there is nothing per person to delete. They are kept for 1 month.

4. Processors and international transfers

We use the services of the companies below only as far as needed to run the site. There is no separate marketing purpose.

The items transferred to Vercel and Google are those listed in section 1, and they are transferred over the network as and when you use the site. How long the recipients keep them follows each company’s own policy. If you don’t agree, you can still use the site without logging in, but features that need a login (community, saving line-ups, ratings) won’t be available.

5. Your rights

• View and correct — on My account you can change your nickname and club at any time, and see all the posts, comments, line-ups and ratings you’ve made.
• Delete — posts, comments and line-ups can be deleted directly where they appear; to delete everything, delete your account from My account.
• Other requests (access, suspension of processing, etc.) — let us know via Feedback and we’ll handle it.

6. Security measures

• Every table has access control (RLS), so the database itself ensures logged-in users can only edit and delete their own data.
• Rating comments are anonymous. Names aren’t just hidden on screen — the data the summary view reads doesn’t contain who wrote them at all.
• All traffic is sent over HTTPS.

7. Contact

For questions about personal information, leave a message via Feedback and we’ll check and reply. If you mark it as private, only the operator can see it.

8. Changes

If we change this policy, we’ll update the effective date and post it on this page. Significant changes will also be announced separately on the site.