// The fine print
Privacy Policy
Last updated: September 1, 2026
The Wing Scout ("we," "us") runs thewingscout.com, the web app at app.thewingscout.com, and Scout Fest ticketing. This policy explains what we collect, why, and who touches it. Short version: we collect what the product needs to work, we don't sell your data, and you can delete your account whenever you want.
What we collect
- Account info — your email, username, and password. Passwords are stored only as secure hashes by our authentication provider; we never see them. If you turn on two-factor authentication, we store your 2FA enrollment and hashed backup codes.
- Your content — wing reviews, ratings, sauce scores, spot submissions, and photos you upload. Reviews are public by design; that's the app.
- Location — if you grant browser location permission, your position is used in your browser to sort and find wing spots near you. We do not store a history of your movements.
- Notifications — if you enable push notifications, we store your browser's push subscription so we can send them. Turn them off any time and the subscription is deleted.
- Usage & security — basic page-visit counts recorded against a hashed identifier that rotates daily (it can't be joined across days into a profile of you), and security events like failed sign-in attempts, used to lock out brute-force attacks.
- Scout Fest tickets — if you buy tickets, we collect your name and email to issue and check in your ticket. Payments are processed by Stripe; your card number never touches our servers.
Who processes it
Third-party services that handle data on our behalf:
- Supabase — database, authentication, and file storage (reviews, accounts, photos).
- Vercel — hosting and serving the site and app.
- Stripe — Scout Fest ticket payments.
- Browser push services (Apple, Google, or Mozilla, depending on your browser) — delivering push notifications you've opted into.
- Email delivery — sending account emails such as password resets and ticket confirmations.
- Telegram — internal operational alerts to our team (for example, a new review needing moderation).
Each of these processes data only to provide their service to us. We do not sell your personal information to anyone, and we don't run third-party advertising trackers.
How long we keep it
Account data lives as long as your account does. Public reviews stay up as part of the map unless you delete them or your account. Security-event records and hashed visit counts are short-lived operational data.
Deleting your account
You can delete your account from the profile settings inside the app — it removes your account and personal data. You can also email us at hello@thewingscout.com and we'll do it for you.
Children
The Wing Scout is not directed at children under 13, and we don't knowingly collect their information.
Changes
If this policy changes materially, we'll update this page and the date at the top.
Contact
Questions about your data: hello@thewingscout.com
Back to base