Privacy Policy

1. What data do we collect?

To operate the app, we collect the following:

• Account details: Email address and name — so you can log in and be identified in the app.
• Player data: Name, jersey number, position, and optionally date of birth — for age-based team grouping and reminders in the team calendar.
• Match statistics: Shots, goals, assists, and timestamps linked to specific players and matches.
• Suggested changes to goals: If you suggest a change to a goal, the suggestion is stored with who made it and an optional comment; only the team’s administrators see who suggested it, the comment is removed 12 months after the end of the season, and the whole suggestion is deleted if your account is deleted.
• App usage: Anonymised data about how the app is used (e.g. pages visited) via Vercel Analytics. No tracking cookies are used for this purpose.
• Activity log: Which screens you use and for how long, what you do in the app (e.g. shots registered, matches started, fines issued), device type and app version, and technical errors. It is linked to your account so we can improve the app and help you when something goes wrong. Only the platform administrator can see it. It is kept for 24 months and deleted immediately if your account is deleted.
• Admin and security log: Logins and administrative events (e.g. approved accounts, changed roles, created teams) with the email address of whoever made them — so changes can be traced and misuse detected. Only the platform administrator can see it.
• Language preference: A functional cookie (NEXT_LOCALE) is stored in your browser when you choose a language in the app. It contains only your language preference (e.g. "sv" or "en"), is not used for tracking, and does not require separate consent under the ePrivacy Directive.

2. Why do we collect this?

We process your data on the basis of consent — you actively accept the terms when you create your account or log in for the first time. The purpose is to provide the service: manage login, visualise team performance over time, and administer line-ups.

Data about the players in a team is entered by the club. For that data, the club decides the purpose and the legal basis (see section 7).

3. Where is data stored?

We use the following sub-processors:

• Supabase: Database and authentication. Data is stored in Europe (EU). A Data Processing Agreement (DPA) is in place.
• Vercel: Application hosting. Static files are distributed globally via CDN — this does not entail storage of personal data outside the EU. A DPA is included in Vercel's terms of service.
• Sentry: Error reporting. When something goes wrong in the app, technical error data (the error message, where in the app it happened, browser, device type and app version) is sent together with your account id and the club and team you have selected — never your name or email address. Data is stored in the EU (Frankfurt, Germany). A DPA is included in Sentry's terms.

Your personal data is not disclosed to third parties beyond the sub-processors listed above.

4. How long do we retain data?

Your account (email and name) is kept for as long as you have it. If you delete your account, it is removed immediately. Other data is deleted after fixed periods:

• Activity log: 24 months, or immediately when your account is deleted.
• Admin and security log: 24 months. If your account is deleted, your email address in the log is replaced with "raderad" (deleted).
• Feedback: What you send through the in-app feedback is kept for 24 months. If you delete your account, your email is removed from what you sent.
• Access applications: Name, email, club and message are kept for 6 months after the application has been handled.
• Player profile and match statistics: A player's name, number and statistics remain in the team's history even when the player's account is deleted, but the date of birth is then reduced to the birth year only. If the team administrator removes the player profile, its name and date of birth are deleted with it. If the player is marked as a "Former player", the name is replaced, and the player's fines, fika, seller name, comments on replies and attendance, and match ratings are deleted; the statistics remain without a name.
• Player photo: A player's photo is deleted when the player profile is removed and when the photo is replaced with a new one.
• Video clips: Clips in a match review are deleted when the clip is removed or when the match is deleted from the calendar.
• On your device: When you log out, line-ups, attendance, the local activity log and saved sessions are cleared from the device. If something has not been sent yet, you choose whether to delete it. What is no longer needed is cleared after 30 days.

Deletion runs automatically every night.

5. Minors

Your own account from 13. Anyone who signs in to plusminus confirms that they are 13 or older. Someone younger may have an account if a parent or guardian has approved it.

Players under 18. The details of the team's players (name, shirt number, date of birth, statistics and any photos) are entered by the team's adult coaches – the player does not need an account. The team admin confirms in the team settings that the parents or guardians of the team's players under 18 have approved that these details are in plusminus, and the app reminds the admin until that is done.

Parents and guardians who have questions, want to see what is stored about their child, or want something corrected or removed can turn to the club or contact us (section 7). The club is the controller for the squad's player data.

6. Your rights

Under GDPR, you have the right to:

• Access: Request a copy of the information we hold about you.
• Rectification: Ask us to correct inaccurate data.
• Erasure: Ask us to delete your data (the "right to be forgotten").
• Data portability: Take your data to another service.
• Withdraw consent: You may withdraw your consent at any time, which will result in your account being closed.

You can download a copy of your data yourself in the app, with the button next to Delete my account. Send any other request to the address in section 7.

If you believe we are handling your data incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.

7. Responsibility and contact

The platform and the accounts: Daniel Barke, who runs PLUSMINUS, is the controller for the service and the user accounts — your account (email and name), login, the activity, admin and security logs, feedback and access applications.

The team's data: each club is the controller for the data about its teams and players — player profiles, dates of birth, photos, match statistics, line-ups, video clips and anything else the club's teams enter. PLUSMINUS processes that data on the club's behalf as a processor. The terms of service are the data processing agreement (Article 28 GDPR).

Questions about your personal data, requests to exercise your rights and reports of a suspected data breach go to daniel.barke@gmail.com. This also applies if you are a parent or guardian, or do not have an account in the app. If your question is about a player in a team, you can also contact the club directly — we help the club answer.

If you are logged in, you can also write through the app's feedback function.