Privacy Notice

Effective 31 August 2026. Last updated 8 October 2026. Standsong (formerly Chants) is operated by ThunderRiver Tech LLC in Texas, United States. Contact support@chantsfc.com. Business correspondence can be sent to ThunderRiver Tech LLC, 5667 Treaschwig Rd #1014, Spring, TX 77373, United States. This notice covers the app, Standsong public pages, and email you choose to send about support, safety, rights, account requests, or the supporter-group pilot.

Information we use

• Sign-in and account identifiers to create, secure, verify, and recover your account.
• Your display name, public creator handle and bio, optional profile picture, and confirmation that you meet the 17+ account rule. Your onboarding birth date is checked on your device and is not sent to our server as a birth date.
• The club you pick as yours and any second club you add. These stay private to your account and are used to show your club first and in its colours.
• If you sign in with X or Google, the name and profile photo that account shares, only when you choose to use them. A photo you choose goes through the same review as any other profile picture.
• If you turn on notifications, a notification token for your phone and which phone system it uses, kept only to send the notices you asked for. Nothing is created until you turn notifications on, and the token is deleted or made unusable when you turn them off, sign out, or delete your account.
• If you browse without an account, the app keeps a random ID on your device. When you play a performance or report something without an account, we keep scrambled forms (hashes) of that ID and of your network address in short-lived abuse-limit counters, which are deleted automatically within about three days. A report you send without an account is kept like other moderation records (see Retention and deletion), with a scrambled form of the device ID so the same device cannot report the same thing twice. It does not include your network address.
• Chants, captions, comments, replies, approved videos, votes, likes, follows, views, shares, mentions, reports, blocks, feedback, corrections, Chant Call-Up ideas you enter, the idea you back in each Chant Call-Up, and moderation and evidence history needed to operate and protect Standsong.
• Technical details such as app and device versions, installation or attestation signals, network information, errors, and crash traces processed by our service providers.
• Email you choose to send to Standsong, including your address, message, and any group affiliation or other details you include. Supporter-group pilot correspondence is used to reply, understand interest, and plan a conversation. It does not enroll or verify a group.

Aggregate product counts

We count actions to understand which parts of Standsong are useful: opening Chant Call-Ups, starting or entering ideas, backing, reading a shortlist or lyrics, opening or saving Matchday packs, saving a Songbook, sharing, submitting chants, confirming or revoking evidence, viewing the sign-in screen, signing in by each method, finishing account setup, and picking or skipping a club. These totals contain only the kind of action, the UTC day and, where relevant, a public Chant Call-Up or club reference. They contain no account, device, advertising or chant identifier, saved Songbook contents, or link identifying the same person across days. We do not use an analytics SDK for these counts. Counts are approximate actions, not unique people. Existing security, account and diagnostic processing described here remains separate.

Approximate server renders count eligible public HTML responses built by our server. They are not visitors, reach or retention. Cached views are missed, and crawler filtering does not catch every bot. The user agent is checked transiently to filter known crawlers, but is not stored in these totals; neither are IP addresses or raw URLs.

What is public

Your public creator name, handle, bio, approved profile picture, approved performances, visible contributions, and popularity totals can be seen by other people. Public share pages can be opened without signing in and may be copied or cached elsewhere.

Profile pictures are reviewed before public display. A pending replacement keeps your previous approved picture visible. Review previews are restricted to you and authorized operators. Removing a picture stops new authorized reads; already delivered images or cached copies cannot be recalled.

A Chant Call-Up idea appears publicly only after review, credited to the chant's creator. Who entered an idea and which idea you backed are not public; each idea's total backing appears only after the Chant Call-Up closes.

Login details, private account status, saved Songbook and Matchday packs, follow records, blocks, notifications, drafts, Chant Call-Up backing choices, and reports are not part of your public profile. Authorized operators can access information needed for support, safety, and moderation.

Devices and providers

Camera or microphone access is requested only when needed for a performance. Media-library access is requested when you choose a performance or profile picture. Uploaded files can contain faces, voices, background details, and embedded metadata. Profile pictures are resized and re-encoded before review and publication to remove embedded source metadata. The server does not store the original profile-picture upload. Standsong does not need your contacts or precise location for current features.

Google and Firebase provide authentication, database, media storage, hosting, server processing, abuse protection, and crash reporting. Enabled sign-in providers and external tune or evidence links have their own privacy terms.

Retention and deletion

Profile-photo review candidates expire after seven days. Replaced, removed, rejected or expired pictures enter exact-object cleanup. Paused or failed cleanup remains pending; it is not proof of erasure. Approved pictures remain until replaced, removed or withdrawn, or account deletion is requested.

We keep account information while needed to provide the account. Verified account deletion is targeted within 30 calendar days. User-authored text, public creator identity, private activity, and owned uploads are removed through a durable cleanup process. Chant Call-Up backing choices and ideas still in review are removed; reviewed Chant Call-Up records stay without your account identity so the public result remains explainable. Comment and reply rows can remain only as non-identifying structural tombstones so thread structure and other people's replies remain intact.

Restricted safety or moderation records created by someone else may retain the deleted account ID as their target. Necessary safety or legal records require a defined reason and restricted access. Ordinary closed support and supporter-group pilot correspondence is targeted for deletion after 90 days. Closed moderation records are reviewed and targeted for deletion or genuine de-identification within 12 months. Routine logs and expired upload limits or sessions are targeted for 30 days.

Unresolved cleanup evidence stays until cleanup is verified. Provider backups or recovery copies, if enabled, follow their configured periods and are not treated as live Standsong content. Provider-controlled diagnostic copies follow their disclosed periods.

Your choices

You can edit your creator profile, manage blocks, and request deletion. Email support@chantsfc.com to request access, correction, deletion, or a copy of your information, or to exercise another right available where you live. We verify identity proportionately and never ask for your password or one-time sign-in code.

Agreeing to the Terms and Community Rules is not blanket consent to unrelated uses of personal information.