Privacy Policy

This Privacy Policy explains how The Follow-On (“we”, “us”, “the site”) collects, uses and protects your personal data when you use thefollow-on.com. The Follow-On is an independent, volunteer-run cricket statistics platform for the Northern Cricket Union (NCU). We are the data controller responsible for your personal data.

We take your privacy seriously and only collect what we need to run the site. This policy is written in plain English so you can understand exactly what happens to your data.

What data we collect

You can browse almost all of The Follow-On (leaderboards, player and team pages, league tables, Team of the Week, grounds and par scores) without an account and without giving us any personal data.

If you create a free account, we collect and store:

• Your email address
• Your chosen username
• Your favourite team (optional)
• The players you choose to follow (“My Players”)
• Your email and notification preferences
• If you turn on push notifications, the push subscription for each device you enable them on (an endpoint provided by your browser or device’s push service, plus the keys needed to deliver a message to it). You can remove this at any time by turning push off in your settings.
• The date and time you agreed to this Privacy Policy, and whether you opted in to email updates

Your password is never stored by us in a readable form. It is handled and securely hashed by our authentication provider, Supabase.

Like almost all websites, our hosting provider (Netlify) automatically processes limited technical information such as your IP address and browser type in order to serve pages and keep the site secure. We do not use this information to identify or profile you, and we do not run any advertising or cross-site tracking tools. See our Cookie Policy for details of the cookies we use.

To understand how the site is used and improve it, we keep privacy-preserving, anonymous usage statistics: which pages are viewed and for how long, where visits arrive from (the referring website), and coarse technical details such as device type, browser and country. This is first-party (nobody else receives it), sets no cookies and stores nothing on your device. To count unique visitors we use a key generated on our own server that rotates every day and is never linked to your identity, so it cannot recognise you or connect your visits across different days, and we never store your IP address. None of this builds a profile of you or tracks you across other sites. Lawful basis: our legitimate interest in understanding and improving the service, applied in a way designed to have no material effect on your privacy.

How we use your data and our lawful basis

• To provide your account — creating and securing your login, remembering your favourite team and followed players, and personalising your homepage. Lawful basis: performance of a contract with you.
• To send you the emails and push notifications you have asked for — such as Team of the Week announcements, highlights for players you follow, and the weekly digest. Push notifications are only sent to devices where you have explicitly turned them on. Lawful basis: your consent, which you can withdraw at any time in your account settings.
• To keep the site running and secure — for example preventing abuse and rate-limiting login attempts. Lawful basis: our legitimate interest in operating a safe, reliable service.

We will never sell your personal data, and we do not use it for third-party advertising.

Club membership and community features

If you join a club on The Follow-On, we additionally collect and use:

• Your first and last name, and the email on your account, which are recorded when you ask to join so the club can identify, contact and approve you. They are stored with your membership. Your name is shown to the club’s committee and its approved members; your email is shown only to the club’s committee. Neither is ever public.
• A role the club gives you. A club can give an approved member a title, for example Secretary, a captaincy or Treasurer. Your title is shown to the club’s committee and decides which parts of the members area (the committee noticeboard, member management, team selection or the club’s finances) you are able to see.
• Content you post to a club feed— text, comments, availability responses and any photographs you choose to upload. Members-only content is visible to that club’s approved members; content the club posts publicly appears on the club’s public page.
• Team selection— if a club captain picks you in a team, your name appears on that team sheet in the club’s members feed. Unless you turn club notifications off in your settings, we send you a push and email to let you know you have been selected.

Lawful basis: your consent, given when you choose to join a club and post, together with performance of the club membership service. You can leave a club at any time, and deleting your account removes your content. As the site operator, we may access club feeds, including private members areas, solely to moderate content and keep the site safe and lawful.

Who processes your data

We use a small number of trusted service providers (data processors) to run the site. They only process your data on our instructions:

• Supabase — database and account authentication (stores your profile and login credentials).
• Netlify — website hosting and delivery.
• Resend — sending the notification emails you have opted in to.
• Browser and device push services(such as Google, Apple and Mozilla) — if you enable push notifications, these services deliver the notification to your device. We only send them the message and your device’s push subscription; we cannot read anything from your device through them.

Some of these providers may process data on servers outside the UK and the European Economic Area. Where that happens, they operate under appropriate safeguards (such as Standard Contractual Clauses) to protect your data to UK/EU standards.

How long we keep your data

We keep your account data for as long as your account is active. If you delete your account (using the “Delete My Account” option in your settings) or ask us to delete it, your personal data is removed. Some limited technical logs held by our providers may persist for a short period as part of their normal security and backup processes before being overwritten.

Your rights

Under UK GDPR (and EU GDPR where it applies to you), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data — you can update your username, email, favourite team and preferences directly in your account settings.
• Deleteyour account and data — use “Delete My Account” in your settings, or contact us.
• Withdraw consent to marketing/notification emails at any time via your notification preferences.
• Object to or restrict certain processing, and request a copy of your data in a portable format.

To exercise any of these rights, please get in touch using our Contact form. We aim to respond within one month.

Children

Cricket is a game for all ages, and much of the statistical data on the site relates to players of all ages as a matter of public sporting record. However, registered accounts are intended for users aged 13 or over. If you are under 13, please do not create an account. If you believe a child under 13 has registered, contact us and we will remove the account.

Complaints

If you are unhappy with how we have handled your data, we would like the chance to put it right — please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. If you are in the Republic of Ireland or the EU, you may contact your local data protection authority.

Changes to this policy

We may update this policy from time to time as the site develops. When we make significant changes we will update the “Last updated” date at the top of this page, and — where the change materially affects how we use your data — we may ask you to review and re-confirm your agreement.

Contact us

For any privacy question or data request, please use our Contact form. This is the reliable way to reach us, as our sending address does not receive incoming email.