Privacy Policy — Matchday Passport

Last updated: 27 September 2026

Your passport is private by default. It lives on your iPhone and in your own iCloud. A stamp becomes visible to anyone else only if you publish it. There are no ads, no analytics, no tracking, and no third-party SDKs — the app's only backend is Apple's iCloud (CloudKit).

Your passport: your iPhone and your own iCloud

The matches you log — teams, scores, venues, dates, notes, and any photos or videos you attach — are stored on your iPhone. If you're signed in to iCloud, the app also backs them up to your private iCloud database, so your passport comes back on a new iPhone or after a reinstall. That private database belongs to your Apple ID: we can't read it, and nobody else can either.

If you aren't signed in to iCloud, nothing is backed up and your passport stays on your iPhone only. Export (Profile → Export passport) builds a zip of your stamps, photos and videos on your device; where it goes next is up to you.

What other fans can see (only if you use the social features)

If you claim a fan handle and publish stamps, the following is stored in the app's shared CloudKit database so other fans can see it, under the visibility you chose (followers or everyone):

• Content you publish — the stamps you choose to share (match, score, your text, photos, video), comments, reactions, follows, and match check-ins.
• Your fan profile — the @handle and display name you pick, and the club you've set as your team in the passport, if any.
• Your Apple user identifier — the anonymous CloudKit user record ID that comes with your iCloud account. It links your published content to your account. We never see your name, email, phone number, or Apple ID credentials.
• Reports you file — if you report content, the report (reason and your user identifier) is stored so we can act on it.

Stamps published to “everyone” also get a public web page on this site (under /stamps/), so a link you share opens for people who don't have the app. The page shows the match, date, venue, your text, your photos and your @handle. The pages are rebuilt every few hours: when you unpublish a stamp, make it followers-only, or delete your fan account, its page is removed at the next rebuild, normally within six hours.

All of this is used solely to make the app work. It is never used for tracking or advertising, and is never sold or shared with anyone. Signing in is your iCloud account itself — the app has no passwords and no sign-up forms.

Location

The app never requests or uses your location. The “who's here” list on a match page is filled only by your own explicit check-in, and shows a stadium name — never coordinates.

Venue search and the footprints map use Apple Maps. When you search for a venue, what you type is sent to Apple Maps to find places. For a stamp whose venue you typed yourself, the footprints map asks Apple Maps once where that venue is and keeps the answer on your iPhone. A venue's map position is stored with your stamp on your iPhone and in your private iCloud backup; it is never published with a stamp.

Photos and videos

Attaching media uses the system picker; the app does not request access to your full photo library. Media is shared with other fans only as part of a stamp you publish, and is deleted from the shared database when you unpublish the stamp or delete your account.

Making a stamp from a ticket reads the ticket's text on your iPhone, with Apple's on-device text recognition; the ticket image is not uploaded. The photo is kept with the stamp only if you choose to, and then with its barcodes and QR codes blurred.

Notifications

If you allow notifications, the app tells you about activity on your stamps and reminds you before your team's matches. Activity alerts are delivered by Apple (iCloud and the Apple Push Notification service); match reminders are scheduled on your iPhone. You can switch either off in iOS Settings.

Your App Store country

The app checks which country's App Store your Apple ID uses to decide which features are offered where — for example, the social features aren't offered in mainland China. This check happens on your iPhone and the result isn't sent anywhere.

Deleting your data

• Shared content: Profile → “Delete my fan account” permanently deletes your fan profile and everything you shared — published stamps, media, comments, reactions, follows, and check-ins — for everyone. No email or support contact is required.
• Your iCloud backup: iOS Settings → your name → iCloud → Manage Account Storage → Matchday Passport → Delete Data.
• On your iPhone: deleting the app removes the passport stored on the phone.

Children

The app is rated 13+ and is not directed at children.

Service providers

Your backup and the shared content are stored in Apple's CloudKit service under Apple's own security and privacy practices. Match schedules and scores come from the Football-Data.org API through our own scheduled job; the app never contacts them and nothing about you is sent to them.

This website

This site is static: no cookies, no analytics, no forms. Some pages load fonts from Google Fonts, which receives your IP address the way any web request does.

Changes

If this policy changes, the updated version will be posted here with a new date.

Contact

Questions? Email cnwt20060606@outlook.com.

Matchday Passport is an independent fan app. It is not affiliated with, endorsed by, or connected to FIFA, any national football association, or any official tournament organizer.