Privacy policy

Who is responsible for what

For the accounts of league admins and team admins, and for how the platform runs, [company name to be completed] ([country to be completed], [address to be completed]) is responsible.

For the people a league publishes (players, their names, shirt numbers, photos and statistics), the league decides what is collected and published, and we process that data on the league's behalf to run its site.

What we handle

Admins: email address, a password (stored only as a hash), and the browser and IP address of their sessions.

League content: teams, players (name, shirt number, position, an optional photo), competitions, matches and events, standings and statistics, suspensions, news, photos, pages and sponsors.

Squad requests: what the team admin asks to change, their note, and the proof of payment file for a new player.

Technical logs: requests to the service, with IP address and browser, to keep it secure and working.

Why we use it

To provide the service: to sign admins in, show the league's public site and let admins manage it.

To keep it secure, prevent abuse and fix problems.

To answer you when you write to us. We don't sell personal data and we don't use it for advertising. We don't run analytics or advertising trackers.

Who sees it

The public site shows what the league publishes: players' names, shirt numbers, photos and statistics are visible to anyone who visits.

Admins see their league's data. A team admin sees only their own team. Proofs of payment are only opened by the league's admins and that team's admin.

Our staff can open a league's admin to give support only in read-only mode, for a short time (30 minutes) and recorded in an audit log. Support access never shows proofs of payment.

We use hosting, storage and email providers to run the service. They process data on our instructions.

Proofs of payment

A proof of payment is removed automatically 12 months after the league accepts or rejects the request it came with. Requests still waiting keep theirs. The request itself, without the file, stays in the league's history.

Cookies and local storage

We only use what the service needs to work: to keep an admin signed in and to remember a language. We don't use analytics or advertising cookies, so no cookie banner is needed. These are all of them:

The marketing pages, and the public site's data, set no cookies.

How long we keep data

League data is kept while the league has an account. You can download it from the admin and ask us to delete it at [email protected].

Data export files are deleted 7 days after they are created.

Your rights

You can ask to see, correct, delete or take a copy of your personal data, and object to how it is used. If your data is on a league's site, the league can do most of this itself in its admin; otherwise write to [email protected].

You can also complain to the data protection authority where you live.

How we protect it

Each league's data is kept apart and can only be reached from that league's own admin. Passwords are stored hashed, connections are encrypted, and private files are never given a public link.

Changes to this policy

When this policy changes, we update the date above and tell the league's admins about significant changes.

Contact

[company name to be completed], [address to be completed], [country to be completed]. Email: [email protected].