Privacy Policy

This Privacy Policy describes how Hedgehog Software LLC, doing business as TransferPing ("TransferPing," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our website at transferping.com (including www.transferping.com), our web application, and related services (collectively, the "Service").

Controller / operator details for privacy inquiries:

• Legal entity: Hedgehog Software LLC (d/b/a TransferPing)
• Business address: 30 N. Gould St. Ste R, Sheridan, WY 82801, United States
• Privacy / support contact: support@transferping.com

By accessing or using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree, please do not use the Service.

This Policy applies to personal information processed when you visit our marketing and programmatic SEO pages, create or use an account, manage club and journalist preferences, connect notification channels, subscribe to a paid plan, contact support, or otherwise interact with the Service.

This Policy does not apply to third-party websites, apps, or services that we do not control (including X/Twitter source posts, Telegram, Discord, Stripe-hosted checkout pages, or Clerk-hosted authentication flows), even if linked from the Service. Those services are governed by their own privacy notices.

3.1 Information you provide

• Account information.When you register, we process identifiers such as your email address and display name. Authentication is provided by Clerk, Inc. ("Clerk"). Depending on the method you choose, this may include magic-link email authentication or Google OAuth profile information made available by your identity provider.
• Alert preferences. Clubs you track, journalists/sources you follow, and your preferred interface locale (for example English, Turkish, German, French, Spanish, or Italian).
• Notification channel settings. For Telegram, connection codes and linkage metadata needed to deliver alerts to your Telegram account. For Discord (where available on your plan), the Discord webhook URL you voluntarily provide so we can post alerts to your chosen channel or server.
• Support communications. Content of emails or other messages you send to support@transferping.com, and any information reasonably necessary to respond.
• Billing-related choices. Plan selection (for example Pro or Unlimited) and subscription management actions initiated from your account. We do not store full payment card numbers on our servers.

3.2 Information collected automatically

• Usage and device data. Standard technical data such as approximate browser type, pages viewed, referring URLs, and timestamps, collected to operate, secure, and improve the Service.
• Analytics. We use a self-hosted Umami analytics instance (currently served from analytics.moluagency.com). Umami is configured in a cookieless manner for product analytics events (for example signup and checkout funnel events and certain public page views). It is not used to sell advertising profiles.
• Local preference storage.We may store non-sensitive preferences in your browser's local storage (for example theme and locale preferences, and temporary plan selection across an auth redirect). These are not used as cross-site advertising identifiers.
• Authentication cookies / session tokens. Clerk sets session cookies necessary to keep you signed in. Separately, our admin console (if used by authorized operators) may set an HttpOnly admin session cookie.

3.3 Information from payment processors

Paid subscriptions are processed by Stripe, Inc. ("Stripe"). Stripe processes payment method details on its infrastructure. We receive subscription status, plan tier, billing period dates, cancellation flags, and invoice metadata (such as amounts, dates, and invoice URLs) needed to provision and display your subscription. Card numbers are handled by Stripe under Stripe's terms and privacy policy.

3.4 Public / non-personal content

The Service monitors publicly available football transfer reporting (for example public posts on X/Twitter) and publishes informational summaries on public pages (including club, journalist, and league pages). That content generally concerns public figures and public reporting, not private consumer profiles. If you believe content about you should be reviewed, contact support@transferping.com.

We use personal information to:

• Create and authenticate accounts, and maintain sessions;
• Deliver and personalize football transfer alerts according to your club, source, and channel settings;
• Process subscriptions, verify checkout, display invoices, and manage upgrades, renewals, and cancellations;
• Provide customer support and respond to inquiries;
• Monitor reliability, prevent abuse, debug failures, and secure the Service;
• Analyze aggregated product usage to improve features, onboarding, and conversion;
• Comply with legal obligations and enforce our Terms of Service; and
• Communicate service-related notices (for example account, billing, or security messages).

We do not sell your personal information. We do not share personal information with third parties for their independent cross-context behavioral advertising.

If you are located in the European Economic Area or the United Kingdom, we process personal information under one or more of the following legal bases under the GDPR / UK GDPR:

• Contract. Processing necessary to provide the Service you request (account, preferences, alert delivery, subscription provisioning).
• Legitimate interests. Improving and securing the Service, preventing fraud/abuse, and understanding aggregate product usage, where those interests are not overridden by your rights.
• Consent. Where required for optional processing or certain communications; you may withdraw consent where applicable without affecting the lawfulness of processing before withdrawal.
• Legal obligation. Where processing is required to comply with applicable law (for example tax or accounting records related to paid subscriptions).

We share personal information only as needed to operate the Service:

• Clerk — authentication, session management, and account identity.
• Stripe — payment processing, invoicing, and customer portal / checkout.
• Telegram / Discord — delivery of alerts to channels you connect; Discord webhook URLs are stored so we can post to the destination you configure.
• Infrastructure providers — hosting, logging, and networking providers that process data on our behalf under contractual obligations.
• Professional advisors and authorities — where reasonably necessary for legal compliance, dispute resolution, or protection of rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

Our backend application programming interface processes authenticated requests using a Clerk-issued session token. We do not place a custom long-lived API password in browser local storage for end-user auth.

We and our processors use the following categories of storage technologies:

• Strictly necessary. Clerk authentication cookies and security-related session mechanisms required to sign you in and protect accounts.
• Functional. Local storage keys for theme, locale, and temporary plan selection during signup/checkout redirects.
• Analytics. Cookieless Umami pageview / event measurement as described above.

You can clear local storage and cookies through your browser settings. Doing so may sign you out or reset preferences. Because core authentication cookies are necessary for the logged-in Service, the product may not function fully if they are blocked.

We retain personal information for as long as needed to provide the Service, maintain your account, and fulfill the purposes described in this Policy, then for a further period as required or permitted by law (including billing and dispute records).

You may request deletion of your account from the account settings in the dashboard, which initiates deletion of your TransferPing account data and associated Clerk user record according to our deletion workflow. Some information may remain in encrypted backups or logs for a limited time, or where we must retain it for legal, security, or accounting reasons. Alert history and channel configuration are deleted or de-associated in line with account deletion, subject to those exceptions.

We implement technical and organizational measures designed to protect personal information, including encrypted transport (HTTPS), access controls, server-side authorization checks for account data, and separation of privileged admin tooling from end-user authentication. No method of transmission or storage is completely secure; you use the Service at your own residual risk. You are responsible for maintaining the confidentiality of access to your email inbox, OAuth accounts, Telegram account, and any Discord webhook URL you configure.

We are based in the United States. Personal information may be processed in the United States and other countries where we or our processors operate. Where required, we rely on appropriate transfer mechanisms (such as contractual safeguards used by our processors) for transfers from the EEA/UK. By using the Service, you understand that your information may be transferred to jurisdictions that may have different data protection laws than your country of residence.

Depending on your location, you may have rights to access, correct, delete, or export certain personal information; to object to or restrict certain processing; and to lodge a complaint with a supervisory authority. California residents may have additional rights under the CCPA/CPRA, including the right to know categories of personal information collected and to request deletion, subject to statutory exceptions. We do not sell personal information as that term is commonly understood under the CCPA.

To exercise privacy rights, email support@transferping.com with sufficient detail to verify your request. You may also update preferences and initiate account deletion from your TransferPing account where those controls are available.

The Service is not directed to children under 16 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will change when we do. Material changes may also be communicated through the Service or by email where appropriate. Continued use of the Service after an update constitutes acceptance of the revised Policy to the extent permitted by law.

For privacy questions or requests: support@transferping.com. Postal correspondence may be sent to Hedgehog Software LLC, 30 N. Gould St. Ste R, Sheridan, WY 82801, United States.