Privacy Policy
Last updated 8 October 2026
BlueBibs is an app for pay-and-play football. Hosts post games, and players join and pay for them. This policy explains what we at BlueBibs collect when you use the app at bluebibs.app, why, who else sees it, and what you can ask us to do with it.
What we collect
- Your account: your email address, @username and full name, and, if you add them, a photo and your playing position.
- If you sign in with Google: your name, email address and Google account ID (more below).
- Games: the games you host, join or leave, your place on the team sheet, cash payments you ask the host for, the comments you post, the alerts you set, and any report you make about a game.
- Money: your credit balance and its history (top-ups, games, refunds, earnings and withdrawals) and your bank transfer reference, such as BB-0001. If you save a card, its brand and last four digits. The full card number goes to Stripe and never reaches us. If you add bank details to withdraw money, the account name, sort code and account number, which we store encrypted.
- Messages to us: what you send through Help in the app or by email.
- Notifications: if you turn them on, the address your browser gives us for sending them to your device.
- Technical details: the sign-in cookie, and what every web server receives with each request (your IP address, your browser and the time), which our server keeps in its logs.
We don't collect your location, your contacts or anything else from your device.
How we use it
- To run your account and sign you in. We email you a login code, which works for 15 minutes.
- To let you host and join games, keep the team sheets, and handle payments, refunds, credit, earnings and withdrawals.
- To tell you about your games and your money: in the app, by email, and as notifications if you turn them on.
- To check reported games, prevent fraud and misuse, and keep BlueBibs secure.
- To answer you when you contact us.
- To keep the accounting records the law requires.
We don't sell your data, we don't show ads, and we don't send marketing emails.
Our legal reasons
- Contract: most of the above is needed to give you the service you signed up for.
- Legal obligation: keeping payment records for tax.
- Legitimate interests: keeping BlueBibs safe, preventing fraud, checking reported games, and fixing problems.
- Consent: notifications. You can turn them off at any time in your device's or browser's settings.
What other people can see
BlueBibs is about playing with other people, so some of your details are public:
- Anyone, even without an account, can see games, their team sheets with each player's @username, photo and position, and the comments on a game.
- Anyone can open your profile, which shows your @username, full name, photo and position, how many games you've played and hosted, and the games you're hosting next.
- Hosts can find you by @username or full name to invite you to a game. A game's host sees who has paid and who has asked to pay cash.
- Nobody but us sees your email address, card details, bank details or credit balance.
Who we share it with
A few companies help us run BlueBibs. They handle your data only to provide their service to us:
- Amazon Web Services: our server and its backups, in London, and sending and receiving our emails.
- Stripe: card payments, Apple Pay and Google Pay. Stripe also uses your payment details under its own privacy policy, for example to prevent fraud.
- Google: sign-in, if you choose it, and our inbox (Gmail), where emails to us arrive. The app's font also loads from Google Fonts, so Google sees your IP address when the app opens.
- Your browser's notification service (from Apple, Google or Mozilla), which delivers our notifications to your device if you turn them on.
- YouTube: if a host adds a YouTube video to a game, it loads from YouTube's privacy-enhanced mode when you open that game.
We also share data if the law requires it, or to protect someone's safety. Some of these companies may handle data outside the UK; when they do, they use the safeguards UK law requires.
Signing in with Google
If you choose Continue with Google, Google gives us your name, your email address and your Google account ID. We use them only to sign you in and, when you first sign up, to fill in your full name, which you can change. We don't ask for access to anything else in your Google account, such as your contacts, Gmail or Drive. We don't share this information with anyone else, and we don't use it for advertising. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Cookies and storage on your device
We use one cookie, to keep you signed in. It lasts 180 days, or until you log out. The app also keeps a few things on your device so it opens quickly: copies of pages you've looked at, your light or dark setting, and comments you haven't sent yet. These stay on your device. On payment pages, Stripe sets its own cookies to prevent fraud. We use no advertising or tracking cookies, which is why there's no cookie banner.
Who we are
BlueBibs is run by Tung Xuan Le, a sole trader in the United Kingdom (“we”, “us”). For UK data protection law, we are the controller of your personal data. Questions or requests: privacy@bluebibs.app.
How long we keep it
- Your account: until you close it.
- Payment and credit records: while your account is open. After you close it, they stay without your name for as long as BlueBibs runs (UK tax law asks for at least 6 years).
- Server logs: 1 year, for looking into security problems and payment disputes.
- Backups: 7 days.
When you close your account, we delete your email address, name, photo, position, Google ID, saved card and bank details, and ask Stripe to delete what it holds for us about you. The games you played and your payment records stay, shown as “Deleted player”, because other players' team sheets and our accounts need them.
Your rights
You can ask us to:
- give you a copy of your data;
- correct it (you can change most of it yourself on Me);
- delete it and close your account;
- restrict or stop how we use it;
- send it to you in a format another service can read.
Email privacy@bluebibs.app and we'll reply within a month. Before we close an account, its credit has to be £0, so withdraw it in Wallet first. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, but we'd like the chance to put it right first.
Children
BlueBibs is for people aged 18 and over. We don't knowingly collect data about anyone younger; if we find we have, we delete it.
Keeping it safe
Everything travels over encrypted connections (https), bank details are stored encrypted, and only the BlueBibs admin can see email addresses and payment details.
Changes to this policy
When we change this policy, we update the date at the top. For a big change, we tell you in the app or by email first.