Privacy Policy

Last updated October 2026

Arsenal Detroit is an independent, supporter-run community site and app. This page describes what we collect and why, on both the website and the mobile app.

Account information

When you create an account, we store your username, email address, and — if you sign up with a username and password — a salted hash of your password (we never store the password itself). If you sign in with Google or Apple instead, we store the stable account identifier that provider gives us, not your password.

Location — Arsenal 38 check-in

The Arsenal 38 attendance feature asks for your device's location only at the moment you check in at a venue, to confirm you're actually there. That coordinate is used once, on our server, to calculate a distance and is never saved — we don't store or track your location beyond that single check.

Camera

The mobile app uses your camera only to scan the Arsenal 38 QR code at a venue. Nothing is photographed, recorded, or uploaded — the camera view is used locally on your device to read the code.

Push notifications

If you allow notifications, we store a device push token so we can send you match-day Arsenal 38 reminders, new watch-party announcements, and new episodes of our own videos and podcasts. You can turn notifications off at any time in your device settings.

Payments

Shop purchases are processed by Stripe. We never see or store your card number — Stripe handles payment details directly and shares only what we need to fulfill your order (items, shipping info, and order status).

Cookies and sessions

The website uses a session cookie to keep you signed in. The mobile app uses a comparable device-stored session token instead of cookies.

Videos and podcasts

Videos on the site are YouTube videos. Until you press play, the site shows only the video's still image, loaded from YouTube's image server, and no YouTube player or cookies. When you press play, the video loads from YouTube's privacy-enhanced youtube-nocookie.com player, and YouTube's own privacy policy applies to what you watch there. Podcast episodes play straight from the podcast's host, which sees your request the same way any podcast app's would. In the app, videos and episodes open in YouTube or your browser.

Deleting your account

You can delete your account from within the mobile app at any time. This removes your personal information (email, username, and provider sign-in links); posts and orders stay on record, credited to a deleted account, so forum threads and order history stay intact for other members.

Questions

Reach out via the contact page with any privacy questions.