Privacy Policy

When you visit the site, we collect certain information about your device, your interaction with the site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.

Device information we collect includes:

• Version of web browser, IP address, time zone and cookie information
• What pages or products you view, search terms and how you interact with the site
• This is collected automatically using cookies, log files, web beacons, tags or pixels
• This information is shared with our processor Shopify

Order information we collect includes:

• Name, billing address, shipping address and email address
• Payment information including credit card numbers and phone number
• This is collected to fulfil your order, process payment, arrange shipping and communicate with you
• This information is shared with our processor Shopify

Our website and app are not intended for individuals under the age of 16. We do not intentionally collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.

We share your personal information with service providers to help us provide our services and fulfil our contracts with you. This includes:

• Shopify: to power our online store
• Payment processors: to process your payment securely
• Evri: to fulfil and deliver your order
• Analytics providers: to help us understand how our site is used

The app uses additional providers, listed in Section 09.

We do not sell your personal information to third parties for their own marketing purposes.

On our website, we use your personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. You can opt out of targeted advertising by visiting the relevant opt-out pages for the advertising networks we use.

You can also opt out of some of these services by visiting the Digital Advertising Alliance opt-out portal at optout.aboutads.info.

The app does not show third-party adverts and does not track you across other companies' apps or websites.

We use the personal information we collect to provide, improve and administer our services. This includes:

• Processing and fulfilling your orders
• Communicating with you about your order or subscription
• Screening orders for potential risk or fraud
• Sending marketing communications where you have opted in
• Improving and optimising our site

We use cookies to keep track of your shopping cart, remember your preferences and understand how you use our site. You can control cookies through your browser settings. However, disabling cookies may affect your ability to use some features of the site.

For more information about how we use cookies please review our cookie policy or contact us directly.

If you are a resident of the UK or European Economic Area you have the right to access the personal information we hold about you, to port it to a new service, to ask that we correct, update or delete your personal information, and to object to or restrict how we use it.

To exercise these rights, contact us using the details below. We will respond to your request within 30 days. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), although we would appreciate the chance to help first.

For more information about our privacy practices, or if you have questions or complaints, please contact us.

This section explains how the Mystery Jersey King mobile app (the "App") collects, uses and protects your information. It applies in addition to the policy above. Mystery Jersey King Ltd is the data controller for the App.

Information we collect through the App:

• Account information: your email address, display name and password, collected when you create an account so we can identify you and keep your account secure. Your password is stored securely by our authentication provider and we never see it.
• Profile: your profile picture, optional bio and your settings, such as whether your collection is public and whether others can see when you are online.
• Photos: the shirt photographs you upload and your profile picture, stored so your collection and profile display in the App.
• Collection data: the shirts you add, including club or nation, season, kit, brand and condition. If you are an MJK Pro member, also any private notes and the price you paid. Private notes and prices are only ever visible to you.
• Social activity: friend requests and connections, messages you send, likes, comments, and any reports or blocks you make.
• Online status: if "Show when I'm online" is switched on, people who can see your profile can see when you have the App open. You can switch this off at any time in Account.
• App activity: badges, XP, levels and League standings.
• MJK Pro subscription: whether you have MJK Pro, your plan, and its renewal or end date. Payments are handled entirely by Apple or Google; we never receive your card details.
• Mystery box subscription: if you choose to link your Mystery Jersey King subscription, the details needed to show it in the App.
• Technical information and crash reports: if the App crashes or hits an error, we collect a crash report so we can fix it. This includes what went wrong, your device model, operating system, app version, language and time zone, a random identifier for your installation, and your account's internal ID number (not your name or email). Crash reports never include your messages, comments, shirt details, photos or anything else you type.
• Notifications: if you allow notifications, a notification token for your device and your notification choices (new messages, friend requests, accepted friend requests and comments on your shirts). You can change these at any time in Account > Notifications or in your device settings.

How we use this information:

• To create and manage your account
• To display your collection, profile, badges, XP and League position
• To enable social features between collectors
• To feature public collectors in areas such as The Floodlights and the League
• To provide MJK Pro features to subscribers
• To show your mystery box subscription if you have linked it
• To keep the App safe, including reviewing reports and enforcing our Terms
• To send account emails and, if you allow them, notifications
• To operate, secure, fix and improve the App

We rely on the following legal bases: providing the service you signed up for (contract), keeping the App safe and improving it (legitimate interests), meeting our legal obligations, and your consent where required, for example for notifications, which you can withdraw at any time in your device settings.

Who can see your information:

• You choose whether your collection is public or private, and can change this at any time in Account.
• Public collections: other signed-in users can see your display name, profile picture, bio, public shirts, badges, level and League position, and you may be featured in The Floodlights.
• Private collections: only you and your accepted friends can see them.
• Private shirts, private notes and prices paid are never shown to other users.
• Messages are only visible to the people in the conversation, and to our moderators if a message is reported to us.
• Your email address is never shown to other users.

Who we share it with:

• Supabase: our secure database, sign-in and photo storage provider, which stores your account, collection and App data on our behalf.
• RevenueCat: manages MJK Pro subscriptions and tells the App whether you are a subscriber.
• Apple and Google: distribute the App, process MJK Pro payments and deliver notifications to your device (Google through Firebase Cloud Messaging).
• Expo: delivers App updates and passes notifications to Apple and Google for delivery.
• Sentry: our crash reporting provider, which receives crash reports so we can find and fix problems. Crash reports are stored in the European Union and deleted automatically after 90 days at most, and IP addresses are not stored.
• SendGrid: sends account emails such as sign-up confirmation and password resets.
• Recharge: accessed only to show your mystery box subscription if you choose to link your account.
• Shopify: our online shop, which opens inside the App when you visit The Kit Room. Purchases there are covered by Sections 01 to 07 above.

Some of these providers process data outside the UK. Where they do, we rely on approved safeguards such as the UK International Data Transfer Agreement or UK adequacy regulations.

We do not sell your personal information. The App does not show third-party adverts and does not track you across other companies' apps or websites.

How long we keep it:

We keep your App data while your account is open. When you delete your account, your profile, collection, photos, badges, XP, your conversations and the messages in them, and other account data are deleted straight away. Copies may remain in secure backups for up to 30 days before being overwritten. We may keep limited records where the law requires it, or records of reports and moderation decisions where needed to keep the App safe.

Your choices and rights:

• You can edit your profile, change your privacy settings and delete shirts at any time in the App.
• You can delete your account in the App under Account > Delete account. If you cannot access the App, see our account deletion page.
• Deleting your account does not cancel an MJK Pro subscription. Please cancel it in your App Store or Google Play settings.
• The rights in Section 07 (access, correction, deletion, portability) apply equally to App data. You can also object to or restrict how we use your data.
• You have the right to complain to the Information Commissioner's Office (ico.org.uk), although we would appreciate the chance to help first.

Security: we use encryption in transit, strict access controls and database rules so that people can only see what they are allowed to. No system is perfectly secure, so please use a strong, unique password.

Children: as stated in Section 02, the service, including the App, is not intended for individuals under 16. If you believe someone under 16 has created an account, contact us and we will delete it.

For any questions about the App's data practices, contact us at info@mysteryjerseyking.com.