Privacy Policy

1. What data do we collect?

To operate the app, we collect the following:

• Account details: Email address and name — so you can log in and be identified in the app.
• Player data: Name, jersey number, position, and optionally date of birth — for age-based team grouping and reminders in the team calendar.
• Match statistics: Shots, goals, assists, and timestamps linked to specific players and matches.
• App usage: Anonymised data about how the app is used (e.g. pages visited) via Vercel Analytics. No tracking cookies are used for this purpose.
• Language preference: A functional cookie (NEXT_LOCALE) is stored in your browser when you choose a language in the app. It contains only your language preference (e.g. "sv" or "en"), is not used for tracking, and does not require separate consent under the ePrivacy Directive.

2. Why do we collect this?

We process your data on the basis of consent — you actively accept the terms when you create your account or log in for the first time. The purpose is to provide the service: manage login, visualise team performance over time, and administer line-ups.

3. Where is data stored?

We use the following sub-processors:

• Supabase: Database and authentication. Data is stored in Europe (EU). A Data Processing Agreement (DPA) is in place.
• Vercel: Application hosting. Static files are distributed globally via CDN — this does not entail storage of personal data outside the EU. A DPA is included in Vercel's terms of service.

Your personal data is not disclosed to third parties beyond the sub-processors listed above.

4. How long do we retain data?

We retain your data for as long as you have an active account. If you choose to delete your account, your personal data (email, name, exact date of birth) will be removed. Historical match statistics may be retained in anonymised form — the link to you as an individual is severed.

If an individual player profile is removed from a team, personal data (including exact date of birth) is deleted, but birth year may be retained to preserve accurate age categorisation in historical statistics.

5. Minors

The app is not intended for direct use by children under 13. Player profiles for underage players are entered by the team's adult administrator, who is responsible for obtaining necessary consent from parents or guardians in accordance with applicable law.

6. Your rights

Under GDPR, you have the right to:

• Access: Request a copy of the information we hold about you.
• Rectification: Ask us to correct inaccurate data.
• Erasure: Ask us to delete your data (the "right to be forgotten").
• Data portability: Take your data to another service.
• Withdraw consent: You may withdraw your consent at any time, which will result in your account being closed.

If you believe we are handling your data incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.

7. Contact

Questions about how we handle your personal data, or if you wish to exercise your rights, can be submitted via the app's feedback function (available when logged in).