Privacy Policy

Fight Stack (“we”, “us”, “our”) provides the Fight Stack website. For UK data protection law, we are the controller of personal data processed through that service.

Depending on how you use Fight Stack, we may process:

• Account data — email address, password (stored hashed by our auth provider), display name, account type (fighter or promoter), and for fighters date of birth. If under 16, a parent/guardian email for consent.
• Profile and content — fight record details, physical/profile fields you choose to add, gym/region, bio, social links, photos, and other media you upload or embed.
• Promoter and event data — organisation name, events, bout submissions, and related content you create.
• Billing data — subscription status and Stripe customer/subscription identifiers. Payment card details are handled by Stripe; we do not store full card numbers.
• Technical data — session tokens needed to keep you signed in, and standard server logs (for example IP address and timestamps) that our hosting and infrastructure providers may process to operate and secure the service.

We use personal data to:

• Create and manage your account
• Show public profiles, events, and records you choose to publish
• Provide subscriptions and billing
• Send essential service emails (for example sign-up confirmation and password reset)
• Keep the service secure and reliable
• Comply with legal obligations

We do not use your data for marketing emails, newsletters, advertising networks, or selling lists. We have no marketing contact programme associated with this product.

Under UK GDPR, we rely on:

• Contract — to provide the account, profiles, and paid features you request.
• Legitimate interests — to secure the service, prevent abuse, and improve reliability, where those interests are not overridden by your rights.
• Legal obligation — where we must keep or disclose information to meet the law (for example tax or accounting records related to subscriptions).
• Consent — where you optionally provide information or content beyond what is required for the core service; you can withdraw consent by removing that content or closing your account.

Content you publish on a public fighter profile or event page (name, record, photos, links, and similar) is visible to anyone with the link. Do not publish information you are not comfortable making public. You can edit or remove profile content from your account while it remains active.

We do not sell personal data. We do not share personal data with third parties for their own marketing.

We use trusted processors who only handle data on our instructions to run Fight Stack:

• Supabase — authentication, database, file storage, and related backend services.
• Stripe — payment processing and subscription billing.

We may also disclose data if required by law, or to protect rights, safety, or the integrity of the service.

We use cookies or local storage only as needed for authentication and keeping you signed in. We do not use advertising cookies or third-party analytics trackers on the Fight Stack website.

Our processors may store or process data outside the UK. Where that happens, they use appropriate safeguards required by UK data protection law (such as standard contractual clauses or equivalent mechanisms provided by those vendors).

We keep account and profile data while your account is active. If you delete content or close your account, we remove or anonymise personal data that is no longer needed, except where we must retain limited records (for example billing history) for legal, tax, or dispute purposes. Backup copies may persist for a short period before being overwritten.

Under UK GDPR you have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure (“right to be forgotten”)
• Restrict or object to certain processing
• Receive a copy of data you provided (portability)
• Withdraw consent where processing is based on consent
• Complain to the Information Commissioner’s Office (ICO)

You can update most profile information directly in your account. Access, export, and full account deletion will be available through the product as those tools ship. For privacy requests, use the contact form. You can also complain to the ICO at any time.

Reach us via the contact form. Messages are used only to respond to your enquiry — not for marketing.

Fight Stack allows fighter accounts for users under 16 only with parent or guardian consent. We collect date of birth at signup and, where required, a parent/guardian email to send a consent link. The account stays locked until consent is confirmed. If we learn that we hold a child’s data without appropriate consent, we will delete it.

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of Fight Stack after an update means you should review the revised policy.