Privacy policy
HoangNam Analytics · last updated 21 September 2026
This policy covers hoangnams.com, the club channel at
/app.html, and the tagging app at /tagger/. It is written to be read
rather than to be survived, so it says what is actually stored, in the order you are likely to
meet it.
HoangNam Analytics is a football data labelling and analysis service run by Hoang Nam Dang. If you want anything on this page explained or acted on, email dnam2501@gmail.com.
1. Your account
You can create an account with an email address and a password, or with Continue with Google.
If you sign in with Google
We receive exactly three things from your Google account: your email
address, your name, and your profile picture. That is
the whole of it. We request only the openid, email and
profile scopes, which means we have no access to Gmail, Drive,
Contacts, Calendar, Photos or any other Google service, and no ability to act on your behalf
anywhere in Google.
We do not use data received from Google for advertising, and we do not use it to train machine-learning or AI models. We do not sell it, and we do not pass it to anyone outside the processors listed in section 7.
If you sign in with a password
Your password is held by our authentication provider, Supabase, in hashed form. We never see it and never store it ourselves. The site keeps your email address in your own browser so the sign-in box is not empty next time; it never keeps a password there.
2. Your club's channel
A channel is one club's own space. So that the people running it can see who has access, we store, for each member: the email address and the display name of that account, and the role it holds (admin, analyst or viewer).
When an admin invites someone who does not have an account yet, we store the email address they were invited at until that person signs in and the invitation becomes a membership.
3. Settings, for analysts
The tagging app saves your keyboard shortcuts and macros against your account, so they follow you from one machine to another. Nothing else about how you work is recorded — no timings, no keystroke logs, no session tracking.
4. The contact form
If you use the enquiry form on the front page, we store what you typed: name, email address, club, your role, country, your message, and the video link if you gave one. We also store two things you did not type:
- A hash of your IP address — a SHA-256 of the address with a secret salt, never the address itself. It exists to rate limit the form and to notice a flood of submissions, and neither of those needs the real address.
- Your browser's user-agent string, for the same reason.
The enquiry is emailed to us through Resend. It is used to answer you, and for nothing else — you are not added to a mailing list, because there is no mailing list.
5. Match data
The service exists to tag matches. For a match a club commissions, we hold the events we tagged (what happened, when, and where on the pitch), the team sheets, and the names and shirt numbers of the players on both sides.
Player names are personal data about people who are not our users. We hold them only to produce the analysis the club asked for, only for as long as that club is a customer, and only the club's own channel can read them. Where a squad includes youth players, we hold those names on the club's instruction and on the club's legal basis for holding them.
Match video that a club uploads for tagging is stored in Cloudflare R2 and is reachable only through short-lived signed links, not from a public address.
6. What is kept in your browser
The apps keep some things in your browser's own storage so that a reload, or a lost connection, does not cost you work. These never leave your device except where a feature explicitly syncs them to your account:
- your sign-in session, so you are not asked to sign in on every visit;
- tagged events, line-ups and match details in progress;
- your keyboard shortcuts and macros (also synced to your account, see section 3);
- small conveniences — the last email address used to sign in, whether the side rail is open, which film tools you had selected.
Clearing your browser's site data removes all of it.
7. Who else handles the data
We are a small operation and we do not run our own servers. These are the services that process data on our behalf, and the whole list:
| Service | What it does for us |
|---|---|
| Supabase | Holds the database and the accounts, including passwords in hashed form |
| Signs you in, only if you choose Continue with Google | |
| Cloudflare | Runs the contact form endpoint, and stores match video in R2 |
| Resend | Delivers the email that tells us a contact form was submitted |
| GitHub Pages | Serves the website itself |
| jsDelivr, cdnjs | Serve two JavaScript libraries the pages load; your browser's request tells them your IP address, as any request to any server does |
8. What this site does not do
There is no analytics on this site. No Google Analytics, no Tag Manager, no Plausible, no Mixpanel, no Facebook pixel, no advertising network, no tracking cookie, and no third-party tracker of any kind. Nothing here follows you to another website, and no cookie banner is needed because there is nothing to ask you about.
We do not sell, rent or trade personal data. We do not build profiles for advertising. We do not share data between one club's channel and another's — that separation is enforced by the database itself, not by our good intentions.
9. How long we keep it
- Accounts and channel membership — until you ask us to delete the account, or the club's channel is closed.
- Match data and reports — for as long as the club that commissioned them is a customer, and then for as long as they ask us to keep them available.
- Contact enquiries — kept as the record of the enquiry and of what we did about it. Ask and we will delete yours.
10. What you can ask for
Email dnam2501@gmail.com and we will:
- tell you what we hold about you;
- correct anything that is wrong;
- send you a copy of it;
- delete your account and the personal data attached to it.
If you are in the United Kingdom or the European Economic Area, those are your rights under the UK GDPR and the GDPR, and you may also complain to your national data protection authority. We would rather you came to us first.
If you signed in with Google and want to disconnect that, you can also remove this app's access from your own Google account at myaccount.google.com/permissions. That stops future sign-ins; email us to have the account itself deleted.
11. Children
Accounts are for adults acting on behalf of a club, academy or analysis team. We do not knowingly create accounts for children. Squad lists we tag may contain the names of youth players, as described in section 5; those are held for the club, and a club can ask us to remove any of them at any time.
12. Changes to this policy
If this policy changes, the date at the top changes with it. If a change affects what we collect or who we share it with, we will email the address on each affected account rather than leave it to be noticed.
13. Contact
Hoang Nam Dang — HoangNam Analytics
dnam2501@gmail.com
hoangnams.com