Optional accounts · No cookies · No ads

Privacy Policy

The short version: reading the site needs no account. If you create one, we keep your email address and the name you choose, only to show them back to you. If you buy Premium, the payment is handled by Stripe and Link, and we keep only the state of your subscription.

What we collect

  • Nothing, if you don't sign in. Reading the predictions, the track record and the blog needs no account and no personal data.
  • If you sign up with your email, we store the address, the name you choose and, if you set one, your password — kept by our authentication provider as a salted hash that nobody, us included, can read back. Prefer no password? Ask for a one-time sign-in link by email instead.
  • If you sign in with Google, Google shares with us your name, your email address and your profile picture link (theopenid, email and profile scopes). We ask for nothing else: no contacts, no calendar, no Drive, no access to your Google account after you sign in.
  • Sign-in records. When you sign in, our authentication provider records the time and the IP address of the request, to keep accounts secure and to stop abuse.
  • If you buy Premium, the payment is taken by Link, LLC, the merchant of record of our payment provider, Stripe. Your card details, billing address and payment history are held by Stripe and Link, who act as controllers for the payment under the Stripe privacy policy and the Link privacy policy. We never see your card. We keep only what Premium needs to work: your plan, the status of your subscription, its renewal date, and the Stripe customer and subscription ids that link it to your account.
  • Your country, for your prices. Cloudflare, which serves this site, notes the country your address comes from in one cookie (fi_country, two letters, kept for a day) so the plans page shows your prices. When you start a Premium checkout, your IP address is sent to an IP geolocation service to find your country, which sets your price and whether Premium is available where you are; if that lookup fails, the country in that cookie, or the one your browser's time zone points to, is used instead. Only the country is used, and neither the address nor the country is stored by us.
  • One cookie, no tracking. The only cookie this site sets is the country one above. When you sign in, your session is kept in your browser's local storage so you stay signed in; signing out deletes it. Nothing is stored for tracking.
  • Cookieless analytics. We use Umami, which counts page views, referrers, countries, browsers and page-load speed without cookies and without storing IP addresses. It does not follow individual visitors and is not linked to your account.
  • Hosting logs. The site is served by Cloudflare, whose infrastructure processes IP addresses in transit to deliver pages and mitigate abuse, per Cloudflare's privacy policy. We do not receive or store those logs.
  • Email to us. If you write to support@footinsights.com, we keep the correspondence for as long as it takes to resolve, and use your address only to reply.

How we use it

  • The operator of FootInsights (see the legal information page) is responsible for this data. Reach us at support@footinsights.com.
  • Your email address signs you in — with your password or a one-time link — and Google sign-in identifies your account. Your name is shown only to you, on your account page and in the site's top bar.
  • We email you only when you ask for something: a sign-in link, a password reset, or the confirmation of your address when you sign up. No newsletters or marketing unless you turn emails on, on your account page or the welcome page: then we may email you when Premium opens and with the occasional offer, and the same switch turns it off. We keep the date you turned it on.
  • We do not sell, rent or share your data with anyone for advertising, and we do not use it for profiling, for training models or for any purpose other than the account features above.

Google user data

Data received through Google sign-in (name, email address, profile picture link) is used only to create and identify your FootInsights account and to show your name on your account page. It is not transferred to anyone except the service providers listed below, which store it on our behalf, and it is never used for advertising. FootInsights' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can also remove FootInsights' access at any time from your Google account's third-party connections.

Who processes it for us

  • Supabase — database and authentication, hosted in the European Union (Ireland). Your account and the state of your subscription live here.
  • Resend — delivers the sign-in, confirmation and password-reset emails.
  • Cloudflare — hosts the site, and stores a weekly backup of the database (encrypted at rest) so the track record and your saved data cannot be lost.
  • Umami — the cookieless analytics above; it receives no account data.
  • Stripe and Link — take and manage Premium payments, as described above.
  • An IP geolocation service — turns the IP address of a Premium checkout into a country. We send it only the address and keep nothing ourselves.

Each acts only on our instructions and under its own data protection terms. Some of them may process data outside the European Union under the safeguards those terms provide.

How long we keep it, and deleting it

  • Your account and everything saved with it are kept until you ask us to delete them.
  • To delete your account, use "Delete account" on your account page: the account is removed immediately. You can also write to support@footinsights.com from the address you signed in with and we do it for you within 30 days. Weekly backups are replaced on a rolling basis, so deleted data leaves them within eight weeks.
  • You can also ask for a copy of your data, or for it to be corrected, the same way. If you are in the EU or the UK you have these rights under the GDPR, and the right to complain to your data protection authority.

What we don't do

No advertising networks, no third-party trackers, no selling or sharing of data, no profiling. If any of this ever changes, this page changes first and says so plainly.

Terms of use

The terms for using the site and Premium are on their own page: Terms of Service.

Contact

Questions about this policy, or requests about your data: support@footinsights.com.

Last updated: 15 October 2026.