Privacy Policy
Last updated: February 27, 2026
1. Data Controller
Nico Lebert
Martener Str. 314
44379 Dortmund
Email: support@hoppr.life
2. Overview of Processing Activities
The following overview summarizes the types of data processed and the purposes of their processing.
3. Purpose and Legal Basis of Data Processing
3.1 Account Creation and User Management
- Purpose: Providing app functionality, authentication
- Data: Email address, username, profile picture, date of birth (only age group stored, not exact date)
- Legal basis: Art. 6(1)(b) GDPR (contract performance)
- Retention: Until account deletion
3.2 Location Use (Check-ins)
- Purpose: Verifying presence at the stadium (700m radius)
- Data: GPS coordinates (NOT permanently stored)
- Legal basis: Art. 6(1)(a) GDPR (consent)
- Retention: Only during check-in process
3.3 Social Features (Community, Posts, Comments)
- Purpose: Social interaction between users
- Data: Posts, comments, likes, follower relationships, chat messages
- Legal basis: Art. 6(1)(b) GDPR (contract performance)
- Retention: Until deletion by user or account deletion
- Note on chats: Upon account deletion your chat copies are deleted. Your conversation partner's copy remains in pseudonymized form (without your name, profile picture or sender identifier in messages; the technical conversation identifier remains) — legal basis is the partner's legitimate interest in the integrity of their own correspondence (Art. 6(1)(f) GDPR).
- Note on posts: Upon account deletion, posts and comments are anonymized (without name and profile), not removed.
3.4 Photo and Video Upload
- Purpose: Sharing stadium experiences
- Data: Photos, videos, metadata (timestamps)
- Legal basis: Art. 6(1)(a) GDPR (consent)
- Retention: Until deletion by user or account deletion
3.5 Push Notifications
- Purpose: Notifications about game events, social interactions
- Data: FCM token (device identifier)
- Legal basis: Art. 6(1)(a) GDPR (consent)
- Retention: Until revocation or account deletion
3.6 Trip Planning and Affiliate Links
- Purpose: Travel planning and booking referrals
- Data: Travel dates, destinations
- Legal basis: Art. 6(1)(a) GDPR (consent)
- Note: When clicking affiliate links (Booking.com, Airbnb, Omio), their privacy policies apply. Hoppr receives a commission.
4. Processors and Third Parties
| Service | Provider | Location | Purpose | Safeguard |
|---|---|---|---|---|
| Firebase/Google Cloud | Google LLC | USA | Auth, Database, Storage, Push | EU-US Data Privacy Framework |
| Mapbox | Mapbox Inc. | USA | Maps, Geocoding | EU-US Data Privacy Framework |
| Cloudflare R2 | Cloudflare Inc. | Global | Video hosting | EU-US Data Privacy Framework |
| API-Football | API-Sports | France | Sports data | EU (no third country transfer) |
| SportMonks | SportMonks | Netherlands | Sports data | EU (no third country transfer) |
| TheSportsDB | TheSportsDB | UK | Team data, images | UK adequacy decision |
| Booking.com | Booking.com B.V. | Netherlands | Hotel booking (affiliate) | EU (no third country transfer) |
| Airbnb | Airbnb Inc. | USA | Accommodation (affiliate) | EU-US Data Privacy Framework |
| Omio | Omio GmbH | Germany | Transport (affiliate) | EU (no third country transfer) |
5. Data Transfers to Third Countries
Where data is transferred to the USA, this is done on the basis of the EU-US Data Privacy Framework (DPF). All US providers are DPF-certified.
6. Retention Periods
| Data Type | Retention |
|---|---|
| Account data | Until account deletion |
| Posts & comments | Until deletion by user; anonymized upon account deletion (without name and profile) |
| Photos & videos | Until deletion by user |
| Location data | Only during check-in (not stored) |
| Push tokens | Until revocation or uninstall |
| Chat messages | Until chat deletion or account deletion; the copy held by your conversation partner remains in pseudonymized form (Art. 6(1)(f) GDPR, see section 3.3) |
| Trip data | Until trip deletion or account deletion |
7. Your Rights (Art. 15-22 GDPR)
You have the following rights:
- Right of access (Art. 15): Information about data we store about you
- Right to rectification (Art. 16): Correction of inaccurate data
- Right to erasure (Art. 17): Deletion of your data ("right to be forgotten")
- Right to restriction (Art. 18): Restriction of processing
- Right to data portability (Art. 20): Export your data in machine-readable format
- Right to object (Art. 21): Object to processing
To exercise your rights, contact: support@hoppr.life
8. Right to Withdraw Consent
You can withdraw any consent at any time:
- Location: In app settings or iOS/Android system settings
- Push notifications: In app settings
- Photos/Videos: Delete via the app
- Account: Complete deletion in settings
Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
9. Right to Complain
You have the right to lodge a complaint with a supervisory authority. The competent authority is the data protection supervisory authority of the federal state in which you reside.
10. Minor Users
- Use of Hoppr is permitted from 13 years of age
- Users under 13 may not use the app
- Users between 13 and 15 confirm during registration that their parent or guardian has consented to their use (Art. 8 GDPR)
- No data is collected beyond what is necessary for app functionality (data minimization)
- No profiling or personalized advertising takes place
11. Camera, Microphone and Location
- Camera: Used ONLY for check-in photos and videos (with consent)
- Microphone: Used ONLY for video recording (with consent)
- Location: Used ONLY for check-in verification (700m radius, not permanently stored)
12. This Website (hoppr.life)
This website is a static information page. The following principles apply:
- No cookies, no tracking: This website does not use cookies, analytics, or tracking services.
- Hosting: The website is delivered via Cloudflare (Cloudflare, Inc., USA — EU-US Data Privacy Framework). When you access the site, Cloudflare processes technically necessary connection data (including IP address, timestamp, requested resource) in server logs to provide and secure the service (Art. 6(1)(f) GDPR — legitimate interest in secure, performant operation).
- Contact by e-mail: If you write to us at support@hoppr.life, we process your information to handle your request (Art. 6(1)(b) or (f) GDPR).
- Launch notification (waiting list): If you sign up for the launch notification on this website, we store your e-mail address (Cloudflare Workers KV, see above) solely to notify you once when the app is released (Art. 6(1)(a) GDPR, consent). The list is deleted afterwards. You can withdraw your registration at any time by e-mailing support@hoppr.life.
Hoppr