MatchPass
MatchPass
Your club uses MatchPass. Here's everything you need to know.
If you've set up the app, you won't get turned away. It takes two minutes.
MatchPass is a safety system your club uses to manage entry and keep matchdays safe for everyone. Instead of queuing with a paper ticket, you scan a QR code at the gate — two seconds and you're in. Your clean record follows you to any club on the network. Think of it like a matchday passport.
Your club uses MatchPass. You'll use an app called Signet — it's your personal identity wallet. You set up once, and it works at every club on the network.
Get Signet →Set up takes about two minutes.
Signet works on iOS and Android. If you don't have a smartphone, your club can issue an NFC wristband instead — see below.
There's no account, no email address, no password. Your identity is generated on your device and stays there. You own it. Nobody else has access — not even MatchPass.
On your phone, with a backup to a decentralised storage network. It is not stored on MatchPass servers. At the gate, your photo is checked against the one from your first scan of the season to make sure it's really you.
The steward scans your QR code. Your photo appears on their screen for a visual match. They see a status light — green (all clear), amber (has a card, admitted as normal), or red (not admitted). That's all they see. No name, no history, no personal details.
Your club can issue an NFC wristband. Tap it at the gate instead of scanning a QR code. Works the same way — two seconds and you're in. Ask at the club office or the gate on matchday.
The wristband is linked to your identity, just like the app. Tap it at the reader and you're through. No battery needed, no screen to crack.
Your club may provide them free or at a small cost — typically under two quid. If you lose yours, get a replacement at the club office. The old one is deactivated immediately.
Under-16s need a parent or guardian to set them up.
If your child is under 16, you need to link their identity to yours before matchday. This requires a one-time in-person visit to the club's safeguarding officer — you'll both need to be present. Once linked, your child's identity works at the gate just like yours.
Safeguarding. The officer verifies that you're the parent or guardian. It can't be done online because the relationship needs to be confirmed face to face. This protects your child.
You and your child. Both of you will need your devices (or wristbands). The safeguarding officer will verify the link between the two.
16 and 17 year olds can self-certify for gate entry. Full online features require the same in-person verification as under-16s.
Their chosen name, their photo (stored on their device, not on MatchPass servers), and which parent or guardian is linked. The safeguarding officer's identity is published on your club's matchpass.club page so you can verify who they are before your visit.
The parent-child link is automatically removed. Their identity becomes fully independent. All linkage data is deleted within one year.
Yellow and red, just like on the pitch.
If a steward sees behaviour that isn't on — abuse, aggression, pitch incursion, that sort of thing — they can issue you a card. Yellow for a warning, red for something serious. The vast majority of fans will never see one. But if you do, here's how it works.
What it means: A warning. You can still attend matches. Stewards are aware you've had an incident.
How long it lasts: Active for 12 months. After 5 matches attended without incident, it's automatically cleared. If you don't get another within 12 months, it's deleted from the system entirely.
What happens next match: You'll see it in your app. At the gate, the steward sees an amber status — you're admitted as normal, but they know to keep an eye out.
What it means: A serious incident. Depending on club policy, you may need to show ID at the gate next time.
How long it lasts: Active for 24 months. After 10 clean matches, it can be cleared. Deleted after 24 months either way.
Two yellows: Two yellows in a rolling period triggers an automatic red, reviewed by the safety officer.
Identity verification: If you receive a red card, you'll be asked to show government photo ID to a designated club official at your next visit. This is a one-time check — once verified, you don't need to show ID again unless you receive another red.
Suspensions: A set number of matches you cannot attend. Issued for more serious or repeated incidents. Records kept for 2 years after the suspension ends, then deleted.
Bans: Time-limited or indefinite. For the most serious incidents — violence, weapons, racial abuse. Records kept 5–10 years depending on severity, then reviewed.
Cross-club visibility: If you're banned at one club on the network, other clubs on the network can see it. Your reputation — good or bad — travels with you.
Cards aren't final. Here's how the process works.
If you think a card was issued unfairly, you can challenge it. Every card is reviewed. You'll get a decision.
Through the Signet app. You'll see the card, the reason it was issued, and an option to submit your side of the story.
Yellow cards are reviewed within 48 hours. Red cards within 7 days.
Confirmed — the card stands.
Downgraded — a red reduced to a yellow.
Dismissed — removed entirely.
You'll see the outcome in the app.
Suspensions and bans can also be appealed. The appeal is reviewed by the club. If overturned, the record is updated and you'll see the outcome in the app.
The club's decision is the club's decision — MatchPass provides the process, not the judgement. If you believe the club has acted unfairly, your recourse is with the club directly or with the relevant football authority.
What we collect, how long we keep it, and your rights.
MatchPass collects the minimum needed to run safely. Your club is the data controller — they decide what happens with your data, not us.
Your public identity (the name you chose), a reference to your photo (the photo itself stays on your device), attendance records, and any cards or sanctions.
Your photo and a status light: green (all clear), amber (has a card — admitted, monitored), or red (banned or suspended — not admitted). They don't see your history, your name, or anything else.
| Record | Retention |
|---|---|
| Scan logs | 30 days |
| Yellow cards | 12 months (or cleared after 5 clean matches) |
| Red cards | 24 months (or cleared after 10 clean matches) |
| Suspensions | 2 years after end date |
| Bans | 5–10 years depending on severity |
| Parent-child links | Until the child turns 19, plus 1 year |
All deletions are automatic. No human decides to keep your data longer than the schedule allows.
You can ask to see your data (subject access request). You can ask for it to be deleted — but if you have an active card, suspension, or ban, the club can lawfully refuse under UK GDPR because the record is necessary for safety. Once the retention period ends, it's gone — automatically and permanently.
In your club's own database, hosted in Germany. Not shared with the FA, the police, or any third party unless required by law.
No. MatchPass is free for fans. Always. Your club doesn't pay either.
Talk to the stewards at the gate. The club can look you up or issue a temporary wristband. You won't be turned away.
Talk to the stewards at the gate. Your club may be able to help you set up on the spot or let you in with a temporary arrangement for your first visit. But it's much easier to do it the night before — two minutes on your phone.
Yes — at any club on the MatchPass network. Your identity and reputation travel with you. One setup, every ground.
Find your club on matchpass.club and let them know you'd like them to join. Fan demand is the fastest way clubs come on board.
No. MatchPass is community-owned, not government-run. Your identity lives on your own device — there's no central database. No email address, no account, no register.
Yes. You can wipe your identity from your device at any time. Active discipline records at your club will remain until their retention period ends (this is a legal requirement for safety), but your personal identity data is deleted.
If both clubs are on the MatchPass network, the other club will see your ban and can refuse entry. Your reputation goes with you, good and bad. That's the point: it keeps everyone safe.
That's fine. Ask your club about an NFC wristband — tap and go, no phone needed.