Privacy Policy

1. Data Controller

Hoppr
Email: support@hoppr.life

2. Overview of Processing Activities

The following overview summarizes the types of data processed and the purposes of their processing.

3. Purpose and Legal Basis of Data Processing

3.1 Account Creation and User Management

  • Purpose: Providing app functionality, authentication
  • Data: Email address, username, profile picture, date of birth
  • Legal basis: Art. 6(1)(b) GDPR (contract performance)
  • Retention: Until account deletion

We store the date of birth you provide during registration in your private account record. We use it to determine your age and control age-dependent features. Your date of birth is not a public profile field.

3.2 Location Use (Check-ins, Maps and Nearby Search)

  • Purpose: Verifying presence at the stadium, displaying your location on maps, finding nearby matches and grounds, and optional check-in reminders.
  • Data: Location coordinates, derived distances and verification metadata. Offline check-ins also involve timing, accuracy and synchronization information.
  • Legal basis: Art. 6(1)(a) GDPR (consent).
  • Check-in processing: For location verification of a regular check-in, your precise location coordinates are sent to our server. The server calculates your distance from the stadium. The regular check-in record stores the verification result and distance, rather than raw device coordinates. The visited match or ground location remains part of your history.
  • Offline processing: Until synchronization, coordinates are temporarily stored in protected storage on your device. After successful synchronization or transfer to review, the app removes raw coordinates from the local operation. For pending operations, they remain available for further processing.
  • Other location features: Processing by map and search services is separate from check-in verification. With your permission, optional reminders may also access location in the background. You can change location permissions in system settings.

3.3 Social Features (Community, Posts, Comments)

  • Purpose: Social interaction between users
  • Data: Posts, comments, likes, follower relationships, chat messages
  • Legal basis: Art. 6(1)(b) GDPR (contract performance)
  • Retention: Until deletion by user or account deletion
  • Note on chats: Upon account deletion your chat copies are deleted. Your conversation partner's copy remains in pseudonymized form (without your name, profile picture or sender identifier in messages; the technical conversation identifier remains) — legal basis is the partner's legitimate interest in the integrity of their own correspondence (Art. 6(1)(f) GDPR).
  • Note on posts: Upon account deletion, posts and comments are anonymized (without name and profile), not removed.

3.4 Photo and Video Upload

  • Purpose: Sharing stadium experiences
  • Data: Photos, videos, metadata (timestamps)
  • Legal basis: Art. 6(1)(a) GDPR (consent)
  • Retention: Until deletion by user or account deletion

3.5 Push Notifications

  • Purpose: Notifications about game events, social interactions
  • Data: FCM token (device identifier)
  • Legal basis: Art. 6(1)(a) GDPR (consent)
  • Retention: Until revocation or account deletion

3.6 Trip Planning and Affiliate Links

  • Purpose: Travel planning and booking referrals
  • Data: Travel dates, destinations
  • Legal basis: Art. 6(1)(a) GDPR (consent)
  • Note: When clicking affiliate links (Booking.com, Airbnb, Omio), their privacy policies apply. Hoppr receives a commission.

3.7 Advertising in the app (Google AdMob)

To fund Hoppr, the free app displays banners and clearly labelled ads within its content. We use Google AdMob for this. This section concerns the app; this website does not embed AdMob advertising.

  • Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For users in the EEA and Switzerland, Google Ireland Limited is generally responsible for Google's processing; for users in the United Kingdom and outside these regions, this is generally Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google also processes advertising data as a controller in its own right. See Google's Privacy Policy for details.
  • Purposes: Delivering and displaying ads, limiting repeated ads, measuring impressions and interactions, and detecting fraud and abuse.
  • Data: Google's advertising SDK may process your IP address and approximate location derived from it, device and app information, available device or app identifiers, information about ads shown and interactions, and technical performance and diagnostic data. The identifiers available depend in part on your consent and device settings. Hoppr does not supply your email address, Hoppr user identifier, chat content, uploaded photos or precise GPS coordinates to AdMob as advertising targeting data.
  • Non-personalised advertising: Hoppr requests non-personalised ads. Selection uses the current context, such as an approximate region, rather than a profile of your past behaviour. Personal data and identifiers may still be processed for ad delivery, frequency capping and measurement. “Non-personalised” therefore does not mean “anonymous” or “without consent”.
  • Consent and legal basis: We only load ads requiring consent after you agree. We use Google's User Messaging Platform (UMP) to request and manage your choices. Processing covered by your consent is based on Art. 6(1)(a) GDPR; storing or accessing information on your device that requires consent is additionally based on Section 25(1) of the German TDDDG. Technically necessary storage of your privacy decision serves to respect your choices (Section 25(2)(2) TDDDG; Art. 6(1)(f) GDPR). The consent dialogue explains the specific purposes and advertising providers involved.
  • Your choices: You can decline consent and change or withdraw your choices at any time through the advertising privacy settings in the app. Declining prevents processing that requires your consent; the app's core features remain available. Withdrawal takes effect for the future and does not affect the lawfulness of earlier processing.
  • Ad-free Pro: No AdMob ads are loaded while Hoppr Pro is active. Processing needed for other app features, as described elsewhere in this policy, remains separate.
  • Retention: Your privacy decision is stored on the device until it is changed, reset or requested again. Google's retention periods vary by data type, purpose, security needs and legal retention obligations. See Google's retention information for details and deletion options. Deleting your Hoppr account does not automatically delete all advertising data processed by Google as a controller in its own right.

Further information: Google Mobile Ads SDK data practices and non-personalised ads.

4. Processors and Third Parties

Service Provider Location Purpose Safeguard
Firebase/Google Cloud Google LLC USA Auth, Database, Storage, Push EU-US Data Privacy Framework
Google AdMob / UMP Google Ireland Limited / Google LLC Ireland / USA App advertising and privacy choices (section 3.7) DPF / Standard Contractual Clauses, see section 5
Mapbox Mapbox Inc. USA Maps, Geocoding EU-US Data Privacy Framework
Cloudflare R2 Cloudflare Inc. Global Video hosting EU-US Data Privacy Framework
API-Football API-Sports France Sports data EU (no third country transfer)
SportMonks SportMonks Netherlands Sports data EU (no third country transfer)
TheSportsDB TheSportsDB UK Team data, images UK adequacy decision
Booking.com Booking.com B.V. Netherlands Hotel booking (affiliate) EU (no third country transfer)
Airbnb Airbnb Inc. USA Accommodation (affiliate) EU-US Data Privacy Framework
Omio Omio GmbH Germany Transport (affiliate) EU (no third country transfer)

5. Data Transfers to Third Countries

Where data is transferred to the USA, this is done on the basis of the EU-US Data Privacy Framework (DPF). All US providers are DPF-certified.

Google AdMob and UMP may also process data outside the EEA. Google describes safeguards including the EU-US Data Privacy Framework for appropriately certified US recipients and, where required, Standard Contractual Clauses. Details and links to these safeguards are available in Google's data transfer frameworks.

6. Retention Periods

Data Type Retention
Account data Until account deletion
Posts & comments Until deletion by user; anonymized upon account deletion (without name and profile)
Photos & videos Until deletion by user
Location data Local raw coordinates until the pending check-in is processed; visited places and verification metadata remain in your history until the entry or account is deleted. Map and search services process location data separately.
Push tokens Until revocation or uninstall
Chat messages Until chat deletion or account deletion; the copy held by your conversation partner remains in pseudonymized form (Art. 6(1)(f) GDPR, see section 3.3)
Trip data Until trip deletion or account deletion
Advertising data and privacy choices Depends on data type and purpose; see section 3.7

7. Your Rights (Art. 15-22 GDPR)

You have the following rights:

  • Right of access (Art. 15): Information about data we store about you
  • Right to rectification (Art. 16): Correction of inaccurate data
  • Right to erasure (Art. 17): Deletion of your data ("right to be forgotten")
  • Right to restriction (Art. 18): Restriction of processing
  • Right to data portability (Art. 20): Export your data in machine-readable format
  • Right to object (Art. 21): Object to processing

To exercise your rights, contact: support@hoppr.life

8. Right to Withdraw Consent

You can withdraw any consent at any time:
- Location: In app settings or iOS/Android system settings
- Push notifications: In app settings
- Photos/Videos: Delete via the app
- Advertising: Through the advertising privacy settings in the app (section 3.7)
- Account: Complete deletion in settings

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

9. Right to Complain

You have the right to lodge a complaint with a supervisory authority. The competent authority is the data protection supervisory authority of the federal state in which you reside.

10. Minor Users

  • Use of Hoppr is permitted from 13 years of age
  • Users under 13 may not use the app
  • Users between 13 and 15 confirm during registration that their parent or guardian has consented to their use (Art. 8 GDPR)
  • We limit processing to what is necessary for each purpose. Advertising data processing and the required consent are described in section 3.7.
  • Hoppr does not create interest profiles to select ads and does not request personalised ads for minors either.

11. Camera, Microphone and Location

  • Camera: Used ONLY for check-in photos and videos (with consent)
  • Microphone: Used ONLY for video recording (with consent)
  • Location: Used with your permission for check-in verification, maps, nearby search and optional reminders. Background access requires the corresponding permission.

12. This Website (hoppr.life)

This website is a static information page. The following principles apply:

  • No cookies, no tracking: This website does not use cookies, analytics, or tracking services.
  • Hosting: The website is delivered via Cloudflare (Cloudflare, Inc., USA — EU-US Data Privacy Framework). When you access the site, Cloudflare processes technically necessary connection data (including IP address, timestamp, requested resource) in server logs to provide and secure the service (Art. 6(1)(f) GDPR — legitimate interest in secure, performant operation).
  • Contact by e-mail: If you write to us at support@hoppr.life, we process your information to handle your request (Art. 6(1)(b) or (f) GDPR).
  • Launch notification (waiting list): If you sign up for the launch notification on this website, we store your e-mail address (Cloudflare Workers KV, see above) solely to notify you once when the app is released (Art. 6(1)(a) GDPR, consent). The list is deleted afterwards. You can withdraw your registration at any time by e-mailing support@hoppr.life.