Privacy policy

Last updated 21 September 2026

This policy explains how we handle personal information on our marketing website, themagicsponge.app — for example when you book a demo or get in touch.

The product is different. When a football club runs its own branded site and app on our platform, the club decides how its members', coaches' and players' data is used (it is the “controller”) and we only process that data on the club's instructions. That relationship is governed by our Data Processing Agreement, not this policy.

Who we are

This website is operated by The Magic Sponge, a business based in the United Kingdom (“we”, “us”). We are the data controller for the information described here; if you need our formal registration details, just ask at the email below.

For anything about your data, email privacy@themagicsponge.app.

What we collect, and why

Information you give us

If you complete the “Book a demo” form or email us, we collect the details you provide — typically your name, club, email address, role and any notes. We use this to respond to your enquiry and arrange a demo. Lawful basis: taking steps at your request before entering a contract, and our legitimate interest in responding to enquiries.

Technical information

Like most websites, our hosting provider automatically logs technical data (such as your IP address, browser type and the pages you request) to deliver the site securely and prevent abuse. Lawful basis: our legitimate interest in a secure, working website.

Analytics

We use Cloudflare Web Analytics to see how the site is used. It is privacy-first: it sets no cookies, does not fingerprint you, and cannot track you across other websites — it only records anonymous, aggregated visit data. See our Cookie policy.

Who we share it with

We do not sell your data. We share it only with the service providers who help us run the site and answer you:

• Cloudflare — website hosting, content delivery and security.
• Web3Forms — passes your “Book a demo” form submission to us by email.
• Google (Gmail) — we receive and reply to enquiries by email.

Each provider only processes your data to provide their service to us. Some are based outside the UK (for example in the US); where your data is processed abroad, appropriate safeguards such as the UK International Data Transfer Agreement or standard contractual clauses apply.

How long we keep it

We keep enquiry correspondence for as long as we're in contact and for a reasonable period afterwards so we can follow up, then delete it. Server logs are kept only as long as needed for security and are then rotated out.

Your rights

You have the right to access, correct, delete or restrict our use of your personal data, to object to processing, and to data portability. To exercise any of these, email privacy@themagicsponge.app. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to help first.

Changes

We may update this policy from time to time; the date at the top shows when it last changed.