StadiumTracker
Privacy Policy
Last updated 9 September 2026
StadiumTracker lets you record the stadiums and arenas you have visited. This policy explains exactly what the app collects, why, and where it is kept. We do not sell your data, we do not run advertising, and there are no third-party trackers or analytics SDKs in the app.
What we collect
| Data | Why | Where it lives |
|---|---|---|
| Email address and username | To create and sign in to your account, and to send password resets | Our server |
| Password | Sign-in | Our server, stored only as a bcrypt hash — we never see or store the password itself |
| Home ZIP code (optional) | To tell you when teams you follow are playing near you | Our server, with the coordinates it resolves to |
| Teams you follow | To pick which games to tell you about | Our server |
| Your visits — stadium, date, ratings, notes, seat details, photos | They are the point of the app | Free plan: your device only. Sync subscription: our server |
| Precise location | Only when you tap “At the game? Log this visit”. Your coordinates are sent to our server once, to look up which stadium is within a mile of you | Not stored. Used to answer that one request and then discarded; it is never written to your visit or your account |
| Notification token | Only if you turn on notifications, so we can send them | Our server |
| Anonymous visit counting | To count daily visitors to the site | Our server, as an irreversible SHA-256 hash of your IP address, browser identifier and the date. We do not keep your IP address or browser identifier |
Location, specifically
The app asks for location only when you tap the “log this visit” button, and only while the app is open. Your coordinates are sent to our server once so it can tell you which stadium you are standing in. They are used to answer that request and are not saved — not to your visit, not to your account, and not to any log we keep for analysis. They are never used for advertising or shared with anyone.
There is no background location tracking of any kind. Denying the permission disables that one button and nothing else.
Photos
Photos you attach to a visit are stored on your device on the free plan. With a sync subscription they are uploaded to our own storage, resized, and served only to you over an authenticated connection — they are not public, not indexed and not shared. The app reads photos you explicitly choose or capture; it does not scan your photo library.
Others we rely on
| Service | What reaches them |
|---|---|
| Zippopotam.us | Your ZIP code, if you enter one, to convert it to coordinates |
| Amazon SES | Your email address, to deliver password-reset messages |
| Firebase Cloud Messaging (Google) | A device notification token, only if you enable notifications |
| Apple / Google | Subscription purchases, if you buy one. We never see your payment details |
| MLB Stats API | Nothing about you. Schedules and team data are fetched by our servers, not your device |
| ESPN (a.espncdn.com) | Stadium photographs are loaded by your device directly from ESPN's image servers, so your IP address is visible to them, as it would be visiting any website. No account information is sent |
| Ticket, hotel and seating sites | Only if you tap one of those links. You leave for StubHub, SeatGeek, Ticketmaster, Vivid Seats, TickPick, Booking.com, Expedia, Hotels.com, Kayak or RateYourSeats, and their own privacy policies apply from that point. Some of those links are affiliate links that carry a tracking code identifying us as the referrer — that code says the visit came from StadiumTracker, and carries nothing about who you are |
Map imagery is not fetched from a third party — the map is drawn from geography built into the app, so opening the map tells nobody anything about you. Team logos are likewise bundled with the app rather than loaded from elsewhere.
Children
StadiumTracker is not directed at children under 13 and we do not knowingly collect their information.
Your choices
- Export everything. Profile menu → “Back up my data” produces a plain .zip of your visits and photos that is yours to keep.
- Delete your account. Profile menu → “Delete account”, or see the deletion page. This permanently removes your account, visits and photos from our servers. It cannot be undone.
- Turn off notifications at any time in the app or in your device settings.
- Withdraw location access at any time in your device settings.
Retention
Account data is kept until you delete your account, at which point it is removed from our live systems immediately.
We take routine backups so the service can be recovered after a failure. A deleted account may still exist inside a backup taken before the deletion, for up to 90 days, after which that backup is destroyed. Backups are not used to restore individual accounts and are not searched or analysed.
Anonymous daily-visitor hashes are aggregate counts, are not tied to any account, and are unaffected by account deletion because they cannot be linked back to you.
Contact
Questions about this policy: support@stadiumtracker.net.
← Back to StadiumTracker