Soccer Trippers

Privacy Policy

Last updated: 26 August 2026.

1. Who is responsible for your data

Clubhouse Concepts is the controller for personal data processed through Soccer Trippers. Clubhouse Concepts is registered with the Netherlands Chamber of Commerce under number 73643076 and has its business address at Professor Oudemansstraat 30, Delft, the Netherlands. Privacy questions and requests can be sent to info@soccertrippers.com.

2. Data we process

  • Saved-trip data: email address, optional first name, destination, club, fixture, travel dates, departure city, group size, ticket preference, trip status and the page or campaign that generated the request.
  • Email and preference data: consent status, destinations, travel stage, frequency preferences, delivery, opens, clicks, bounces, complaints and unsubscribe events.
  • Ticket-alert data: email address, optional first name, the exact fixture, club, city, current listed kick-off, alert status, source page and confirmation or delivery status. We keep alerts separate per fixture so one alert never overwrites another.
  • Contact and community data: information you send through a contact, venue suggestion, rating, correction, hotel tip or business-claim form, including supporting links and business details where relevant.
  • Essential technical data: a random first-party browser identifier, requested page, event type, security logs and a one-way hash derived from an IP address for rate limiting. We use the hash to recognise repeated requests without storing the IP address in the rate-limit record.
  • Shared Trip Room data:an expiring share status and anonymous “I'm in”, “Discuss” or “Skip” reactions to itinerary items. We do not ask group members for a name or email address to react.
  • Analytics data: if you allow analytics, Google Analytics receives browsing, device and approximate location information in accordance with your consent choice. We do not send the contents of trip or contact forms to Google Analytics.

3. Why we process data and our legal bases

  • Provide a requested service: save and reopen an exact trip, follow an exact fixture for verified ticket-sale information, send the corresponding confirmations and alerts, process a contact request or publish an approved contribution. The legal basis is taking steps at your request or performing our agreement with you.
  • Marketing email: send relevant planning advice and offers only after an affirmative opt-in. The legal basis is consent, which you can withdraw at any time.
  • Analytics: load Google Analytics only after you select analytics in the cookie preferences. The legal basis is consent.
  • Affiliate measurement: retain a limited publisher or campaign reference for up to 30 days only after you select affiliate measurement in the cookie preferences. The legal basis is consent.
  • Operate and protect the service: prevent abuse, diagnose errors and keep information current. The legal basis is our legitimate interest in operating a secure and useful service. We limit this processing and do not use it to make decisions with legal or similarly significant effects.
  • Comply with law and resolve disputes: retain information where needed for legal obligations, claims or complaints.

4. Saved trips and access links

Each saved trip is stored as a separate record. Its confirmation email contains a unique access link that reopens that trip; the secret part of the link is stored in hashed form where the service supports it. Treat the link as private because someone who receives it may be able to view the plan or update its status. You can ask us to delete a saved trip by emailing us from the address used to save it.

A trip organiser can create a separate read-only Trip Room link for their group. That view shows the destination, dates, group size and non-skipped itinerary items, but not the organiser's email address, name, departure point, private notes, external booking links or management controls. Group members can submit an anonymous reaction per item. The link expires after 30 days and the organiser can replace or disable it earlier; anyone with a live link can view the shared information, so it should still be shared carefully.

5. Ticket alerts, email consent and service messages

A saved-trip confirmation or fixture-specific ticket alert is sent because you requested that service. A ticket alert remains linked to that fixture and can include a verified announcement, live-sale or changed-sale-time message. Each ticket-alert email provides a link to stop that alert without changing other alerts or marketing preferences. Planning sequences, newsletters and promotional messages require the separate marketing checkbox. Each marketing email provides an unsubscribe or preference link. We may retain a minimal suppression record after an opt-out so that we do not accidentally subscribe the address again.

When you provide an email address for a requested service, contact enquiry, venue or hotel contribution, or business claim, we also keep one deduplicated customer record that identifies those service relationships. New records are non-mailable by default. Creating this record does not grant marketing consent, and an existing marketing opt-in is not changed by using another service.

6. Cookies, browser storage and analytics

Soccer Trippers creates an essential HTTP-only cookie named st_aidonly after you request a continuity-dependent service, such as saving a trip, creating a ticket alert or voting on a shared shortlist. It contains a random identifier, lasts for up to 12 months and is not used for advertising.

If you allow Google Analytics or affiliate measurement, we may use a separate HTTP-only identifier named st_mid for up to 180 days to connect first-party planning actions. When neither optional purpose is allowed, general interaction events receive a one-off identifier that is not stored in your browser and cannot be used to recognise a later visit.

If you allow affiliate measurement and arrive through a source-tagged editorial or publisher link, we may store a limited HTTP-only attribution cookie named st_distribution or st_earned_distributionfor up to 30 days. It contains only a publisher reference and, where relevant, a club, campaign or content label. It does not contain your email address or the raw page you came from. The most recent measured publisher touch replaces an older one. We do not create or use these attribution cookies when affiliate measurement is off, and turning it off removes existing versions.

Your optional-cookie choices are stored in your browser undersoccertrippers_cookie_consent_v2 and in an essential preference cookie named st_cookie_consent. Google Analytics is loaded directly, not through Google Tag Manager, and is not loaded until you allow analytics. Advertising storage and ad-personalisation remain disabled. You can withdraw either optional choice through “Cookie preferences” in the footer.

Vercel Web Analytics provides our aggregate page-view baseline without cookies. It does not create a cross-day visitor profile. We remove query parameters, redact shared-shortlist and Trip Room tokens and exclude private admin and deliberate QA routes before those page views are sent. Google Analytics remains our separate, consent-dependent funnel measurement.

We also use limited device storage to remember actions such as a sports-bar rating or closure report. A Stay22 hotel map loads only after you click to open it. At that point, or when you follow another external partner link, the third party may process data under its own privacy notice.

7. Affiliate links

Some external booking links contain a campaign or placement reference. The partner or affiliate network can use it to attribute a booking and calculate a commission. We may receive transaction-level reporting such as partner, destination, campaign reference, booking date, status and commission amount. We do not receive your full payment-card details from these links.

Ordinary external booking links remain available when you decline optional cookies. The destination partner receives the parameters in the link after you choose to follow it and then applies its own privacy notice. Our affiliate measurement preference only controls Soccer Trippers' own 30-day attribution cookies; it does not subscribe you to marketing.

8. Service providers and recipients

We use providers that help us operate the service, including:

  • Vercel for website hosting, delivery and aggregate cookie-free page-view measurement;
  • Supabase for database and server-side application services;
  • Resend for transactional and consented email delivery;
  • Google Analytics after analytics consent;
  • our content-management and football-data providers; and
  • booking providers and affiliate networks such as Booking.com/CJ, Stay22, Expedia/Partnerize, GetYourGuide, Tiqets, Omio/Impact and, when activated, P1 Travel, when you choose to use the relevant link or widget.

Providers that process data for us receive only what is reasonably needed for their task and are subject to contractual or legal safeguards. A booking provider you visit acts under its own terms and privacy notice for the booking journey it controls. We may also disclose information if required by law or necessary to protect legal rights and service security.

9. International transfers

Some providers may process data outside the European Economic Area. Where the receiving country does not have an applicable adequacy decision, we rely on an appropriate transfer mechanism, such as the European Commission's Standard Contractual Clauses, and any additional safeguards required for the transfer.

10. How long we keep data

We use the following retention criteria:

  • saved-trip data is kept while the plan and its follow-up remain useful and is then deleted or anonymised when it is no longer reasonably needed;
  • ticket-alert records are kept while the relevant fixture and requested notification remain active, then completed, deleted or anonymised when no longer reasonably needed; delivery and suppression records may be retained to prevent duplicate or unwanted sends;
  • marketing profiles are kept while subscribed; after an opt-out, only the data needed to honour the suppression and resolve delivery issues is retained;
  • contact, claim and community records are kept while we review, publish or defend the contribution and then according to the needs of the record;
  • security and first-party event data is kept only as long as reasonably needed to prevent abuse, troubleshoot and measure the service; and
  • records required for a legal obligation or dispute are kept for the applicable statutory period.

11. Security

We use access controls, signed or hashed tokens, server-side administration, rate limiting and transport encryption where appropriate. No online service is completely risk-free. If you believe a saved-trip link or personal data has been exposed, contact us promptly.

12. Your privacy rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests or withdraw consent. You always have the right to object to direct marketing. Withdrawing consent does not affect processing that lawfully took place before withdrawal.

Send a request to info@soccertrippers.com. We may ask for proportionate information to confirm your identity. You may also lodge a complaint with the Dutch Data Protection Authority, or with the supervisory authority in your country.

13. Children

Soccer Trippers is not directed at children under 16 and we do not knowingly request their data for marketing. If you believe a child has provided personal data without appropriate permission, contact us so we can review and remove it.

14. Changes and contact

We may update this policy when the service, providers or applicable rules change. The latest version and date will remain on this page. Questions or privacy requests can be sent to info@soccertrippers.com or through the contact page.