Version 2026.10 · effective 14 October 2026
Pilgria (“we”, “us” or “our”) is a football travel companion. This policy describes exactly what the product does with information — no more and no less. Where it says we do something only with your consent, the product genuinely will not do it until you have said yes.
Account data. Your email address and sign-in method, held by our authentication provider, plus the profile you choose to fill in: display name, handle, home city and country, favourite club and competition.
Google sign-in. If you choose “Continue with Google”, Google confirms your identity and shares your email address and basic profile details (such as your name) with Pilgria's authentication provider. Google's own privacy policy applies to your Google account. Email sign-in does not involve Google.
Error reports. If Pilgria fails to load a page, technical details of the error (the error message and the page address) may be sent to our application hosting platform so the fault can be fixed. These reports are not product analytics and do not depend on your analytics choice.
Travel and Passport data. The trips you plan, the matches you save, the matches you record as attended, your ratings, reviews, notes and any photos you add. This is the point of Pilgria, so it is kept for as long as you keep your account.
Policy and consent records. Which version of the Terms you accepted, which version of this policy you acknowledged, and every consent decision you have made, each with a timestamp and where it was made. These records are never overwritten — changing your mind adds a new entry rather than erasing the old one.
Product analytics — only with your consent. If you switch product analytics on, we record which parts of Pilgria are used: screens opened, searches by place, competition, club or stadium, trips created or finalised, planning steps opened, reviews written and partner links followed. Each event carries a per-tab session identifier, the app version, whether you are on mobile or desktop, and the entity concerned. Events are stored linked to your account, so they are pseudonymous, not anonymous. Events pass through a filter that strips anything resembling credentials, contact details, names or free-form notes before they leave your browser.
Product analytics covers only these optional usage events. Your trips, matches, reviews, ratings and other Pilgria service data are stored and processed to provide the service regardless of this setting.
Marking a review “Only me” hides its written text and photos from other travellers. Its structured ratings and category choices may still contribute to Pilgria's internal and aggregated insights.
We never record passwords, authentication tokens, payment details, your private notes or any special-category personal data in analytics.
We process account, trip and Passport data to provide the service you ask for. We use legitimate interests where necessary to keep Pilgria secure, prevent abuse and maintain service integrity. Product analytics, and any future personalisation, research or marketing purpose listed as optional, relies on your consent and remains off until you turn it on. If a consent-based purpose changes materially, we ask again.
We disclose personal data only where needed for the purposes described here: to service providers that operate Pilgria's hosting, database, authentication, email and related infrastructure; where you direct us to connect with another service; where law requires it; or if Pilgria itself is handed over to another operator, subject to appropriate safeguards and advance notice. Providers process data under their own legal obligations and, where they act for Pilgria, under our instructions.
The service providers currently involved are: our application hosting and edge network; our database, authentication and file storage provider; our email delivery provider; OpenFreeMap, which serves map tiles to your browser when a map is shown; and API-Sports, which serves club badges and flags to your browser; and Wikimedia Commons, which serves some stadium photos to your browser. Map and image providers receive technical request data such as your IP address. Pilgria does not run any session-recording service.
Travel partners. Flight and accommodation searches open on the partner's own site in a new tab, only after you press the button. The link carries the search (destination, dates, airport or ground, number of guests) and Pilgria's affiliate identifier — never your name, email or notes. Flights open on Kiwi.com via Travelpayouts; accommodation opens on Stay22, which may route you on to booking sites. On those sites their own privacy and cookie policies apply, including any analytics, session recording, error monitoring or advertising cookies they use. Pilgria may receive a referral fee.
International transfers. Pilgria's database, authentication and file storage are hosted in the EU (Frankfurt, Germany). [PLACEHOLDER — controller to confirm: whether the application hosting and edge network, the email delivery provider, Google (for Google sign-in), OpenFreeMap, API-Sports and Wikimedia process data outside the EU/EEA, and the safeguard that applies to each, e.g. an adequacy decision or Standard Contractual Clauses.]
We may publish or share aggregated insights about football travel — popular destinations, competitions, clubs and stadiums, seasonality, typical trip length, cities per trip, and demand around fixtures. These figures are produced by counting and grouping: any pattern shared by fewer than three travellers is excluded, and no individual journey, profile or event row is ever included or made available.
This may in future support commercial insight products such as market or destination reports. Any new use that materially changes the purpose or requires consent will be introduced transparently and, where required, offered as a separate choice.
Account, trip, Passport and review data is kept while your account exists. Consent and policy records are kept for as long as we may need to demonstrate a historical acceptance. Product analytics events are kept for up to two years (730 days) and are then deleted entirely. If you delete your account, its analytics events are deleted with it.
You can access and correct your data, download a copy of it, withdraw consent at any time, object to or ask us to restrict processing, and delete your account. Downloading your data, managing every privacy preference and deleting your account are all available in Settings → Privacy. Withdrawing consent stops the relevant collection immediately; it does not undo processing that already happened lawfully.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU/EEA country where you live or work, or where an alleged infringement took place. The authority for the controller, who is established in Finland, is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), PL 800, 00531 Helsinki, Finland — tietosuoja.fi, where complaints can be made through its online notification form.
Pilgria uses very little browser storage, and none of it for advertising. The Cookie Policy lists what is stored and why.
Pilgria is operated by a private individual, not a company. That individual is the controller of your personal data, and “we” in this policy means them: [PLACEHOLDER — controller's full legal name], [PLACEHOLDER — postal address for data-protection correspondence]. For privacy questions and data protection requests, contact the controller at info@pilgria.com.
Questions, requests or complaints about this policy are welcome at info@pilgria.com.