Privacy policy

This is an English translation for your convenience. If the English and German versions differ, the German version applies. Deutsche Fassung

Hoppster works without an account – then everything you enter stays on your phone. No tracking, no ads, no selling of data. Here is what we do process anyway, and why.

As of: 22 September 2026

1. Controller

Philipp Stach · Brunnenstr. 20 · 28203 Bremen · Germany · info@hoppster.online

2. This website

The site consists of static files and is delivered via Amazon CloudFront (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg; stored in Frankfurt). When you visit, AWS necessarily processes your IP address, the time, the page requested and your browser identifier in order to deliver the page and fend off attacks. We do not analyse this data and keep no access logs of our own.

How often each page is visited. When you open a page, a small script on our website reports the address of that page to our server – only the path, for example “/hilfe”, without search terms and without where you came from. From this the server counts how often each page was visited per day, for example “/hilfe: 42 visits on 21 Sept”. Nothing else is stored. The server technically sees your IP address when receiving the report but does not store it, not even in logs. There is no identifier, no cookie and no local storage: nothing is stored on your device, and we cannot tell whether two visits come from the same person. This shows us which pages are needed and where we need to improve. The legal basis is our legitimate interest in a useful website (Art. 6(1)(f) GDPR). You can object at any time – by email to info@hoppster.online, or simply by switching off JavaScript or using a content blocker; the site still works.

• No cookies, no third-party analytics, no embedded third-party content, no external fonts.
• Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
• We have a data processing agreement with AWS under Art. 28 GDPR.

2a. Contact by email and beta

If you write to us. We read and answer emails to info@hoppster.online – questions, suggestions and beta sign-ups. For this we store your email address, your name and what you write, and for the Android beta also your phone model and Android version. The mailbox is hosted by iCloud Mail from Apple (Apple Distribution International Ltd., Ireland). The legal basis for beta sign-ups is your participation (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering your request (Art. 6(1)(f) GDPR). We delete emails once the matter is settled, at the latest after two years; beta sign-ups six months after the end of the beta.

For the beta we pass your email address to Apple (TestFlight) or Google (Google Play, closed testing) so that you can get the test version. Their privacy policies also apply there.

3. The app without an account

Without an account, nothing you enter leaves your device:

• your logbook with visits, notes, ratings, reports and photos
• your trips and your wish list
• profile name, profile photo, home town and settings
• photos of tickets – your phone reads the text on them itself; the photo never leaves the device

If you back up your phone via iCloud or your Google account, the operating system includes your logbook – in your own account with Apple or Google, not with us.

4. The app with a Hoppster account

An account is optional. With it, your logbook is also stored on our server in Frankfurt so that it is backed up, can be moved to a new phone and shared with friends. The following goes there:

• email address and password – managed by Amazon Cognito in Frankfurt; we never see your password
• username, display name, “About me” and your club
• your logbook: visits, notes, ratings, reports, ticket details (price, block, seat) and full-size photos – we do not upload photos of tickets
• trips and wish list
• whom you follow, who follows you, whom you have blocked; likes and comments
• your reports about grounds

Shared trips. If you share a trip, we store its name, note and the matches (fixture, kick-off, ground, town) on the server. Only Hoppster users you invite can see the trip, your username and who has accepted. Shared trips are deleted automatically after 180 days. The link for friends without the app contains the matches in the link itself; the page hoppster.online/trip reads them only in your browser and does not send them to us. It contains no names of people.

Bug reports and suggestions. If you report a bug, a ground or an idea, we store your text, and for grounds also the name and location of the ground. For bugs in the app we attach – if the “Technical details” switch is on – app version, device model, operating system version, language and region, the number of your logbook entries and the country packs you have loaded. No location, no device identifier. Without an account, a prepared email to info@hoppster.online opens instead, which you send yourself. If you delete your account, we remove your name and the technical details from your reports; the text stays without any link to you so that the correction remains traceable. Reports are deleted after two years.

Beta tests. If you are registered as a beta tester, you see test cases in the app. If you report a result, we store it with your username, your note and the same technical details as for bug reports. We delete the results at the latest six months after the end of the beta, and immediately if you delete your account.

Beta versions installed via TestFlight are distributed by Apple. Apple passes on to us your email address or name from the invitation, as well as crash reports and feedback you send in TestFlight. Apple’s privacy policy also applies.

The legal basis is the performance of the user agreement for the account (Art. 6(1)(b) GDPR).

What others see

• username, display name, club and your figures – if you allow it
• match reports and their photos only as you set for each report: public, followers, friends or nobody. “Public” means all signed-in hoppers, including on the page of the ground and of the club.
• “Who was there” and the ground leaderboard – can be switched off under Privacy
• with “Hide me” you are invisible to others; your logbook is still backed up
• patches you design and publish – with your username only if you choose so when publishing

Minimum age

We only create Hoppster accounts for people aged 16 or over (Art. 8 GDPR). Without an account the app can be used by anyone, because then nothing leaves the device. See the terms of use for details.

5. What always leaves the device

• Fixtures and country packs come from our server. It sees your IP address, but not who you are.
• How often the app is opened: when opened, the app reports to our server only whether it runs on iOS or Android, its version and the major version of the operating system (for example “iOS, 0.4, 26”). No identifier, no account, no device model, and nothing is stored on your device for this. From this the server only counts daily totals; it technically sees your IP address when receiving the report but does not store it. This tells us how much Hoppster is used and which versions are still in use. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). You can object by email to info@hoppster.online.
• Ground photos and club crests are loaded by the app directly from the servers they are hosted on (mainly API-Football, plus Wikimedia Commons and individual club and sports sites) when displayed. The respective operator sees your IP address. The images are then cached on your phone.
• Travel times are calculated by Apple Maps. For this, start and destination are sent to Apple.
• Map on Android. In the Android app, the map is shown by Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your IP address, the map sections you view and technical details about device and app are sent to Google. We do not pass your location to Google; but if you look at the map around your location, Google sees that section. Google processes the data under its own responsibility, including in the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in a working map (Art. 6(1)(f) GDPR). More from Google: policies.google.com/privacy. On the iPhone, the map comes from Apple Maps.
• If you open a route in Google Maps, Apple Maps or on bahn.de, the app passes start and destination there – as the start your location, or your home town if you have set it that way. From then on the privacy policy of the respective provider applies.

6. Location

• Your location is only used while the app is open: for the map, for travel times and for “confirmed on site”. You grant permission in iOS or Android (consent, Art. 6(1)(a) GDPR).
• We only store that you were on site – never where else you are. Without an account your location does not leave the device. (For the map on Android see above.)
• You can withdraw permission at any time in your phone’s settings. Hoppster also works without it; it then calculates from your home town.

7. Where the data is stored and for how long

On Amazon Web Services servers in Frankfurt, encrypted. Emails with confirmation codes and for “Forgot password” are sent by Amazon Cognito on our behalf. Emails you write to us are stored with iCloud Mail (see “If you write to us”). The data remains as long as your account exists.

Deletion: Without an account – if you delete the app, all data is gone. With an account – “Delete account” in the app immediately removes everything on the server, including photos and your sign-in; the logbook on your phone stays. Backup copies of the server disappear after 35 days at the latest.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You can withdraw consent at any time. Write to info@hoppster.online – or use “Export” and “Delete account” in the app, which works immediately and without us.

Any data protection supervisory authority accepts complaints; the one responsible for us is the State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen (Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen).

9. Changes

If a new feature processes data differently, we update this page. The date is at the top.