Privacy Policy

Privacy Policy

This policy explains what personal data we process, for what purposes, and what rights you have when you use this sports competition management platform, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

The data controller is Roberto Carlos Delgado Alemán. You can contact us about anything related to your data at [email protected] or through the contact page.

2. Data we process

• Account data: name, email address, password (stored encrypted) and, if you set them, an avatar and a preferred language. If you sign in with Google or another provider, we receive your name and email from them.
• Content you publish: competitions, teams, players, results, comments and photos. Note that competitions marked as public are visible to anyone.
• Billing data: if you subscribe to a paid plan, payment is processed by Stripe; we receive the subscription status and invoice data, but we never store your full card number.
• Usage and technical data: pages visited, IP address, device and browser type, for security and aggregated usage statistics.
• Communications: messages you send us through the contact form or internal messaging.

3. Purposes and legal bases

• Providing the service (creating your account, managing your competitions, processing payments): performance of a contract (GDPR art. 6.1.b).
• Operational communications (email verification, security notices, relevant service changes): performance of a contract.
• Optional notifications (summaries, product updates): your consent, which you can withdraw at any time in your profile's email preferences.
• Security and fraud prevention (access logs, audit trail): legitimate interest in protecting the service (GDPR art. 6.1.f).
• Statistics and service improvement using aggregated data: legitimate interest.
• Personalized advertising and non-essential cookies: your consent (GDPR art. 6.1.a), manageable from the cookie banner.
• Legal obligations (invoicing, requests from authorities): compliance with a legal obligation (GDPR art. 6.1.c).

4. Recipients and data processors

We do not sell your personal data. We only share data with the providers necessary to run the service, who act as data processors or joint controllers depending on the case:

• Stripe (payment processing).
• Google (optional sign-in, AdSense advertising and analytics, subject to your consent).
• Hosting and infrastructure providers and transactional email providers.
• Error-monitoring tools, which may process technical data (IP, browser) when an error is logged.

We may also disclose data to authorities where required by law.

5. International transfers

Some of these providers may process data outside the European Economic Area (for example, in the United States). In those cases the transfer relies on European Commission adequacy decisions (such as the EU–US Data Privacy Framework) or standard contractual clauses.

6. Data retention

• Your account data is kept for as long as your account stays active. If you delete it, your personal data is erased or anonymized within a reasonable period, except for data we must keep to comply with legal obligations (for example, billing data for the applicable tax-retention periods).
• Public sports content from competitions (results, standings) may be retained in anonymized form as part of the competition's history.
• Technical and security logs are kept for limited periods proportionate to their purpose.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw any consent given, from your profile or by writing to us at [email protected] or through the contact page. We will respond within one month at the latest.

If you believe we have not handled your data correctly, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) or with your local data protection authority.

8. Security

We apply appropriate technical and organizational measures: password encryption, encryption of sensitive configuration fields, HTTPS connections, role-based access control, and an audit log of administrative actions.

9. Minors

The service is not directed at minors under 14 and we do not knowingly collect their data. If we become aware of an account belonging to a minor under 14 without the consent of their legal guardians, we will delete it.

10. Advertising and Google AdSense

We use Google AdSense to show ads on the service. Google, as a third-party advertising vendor, uses cookies (such as the DoubleClick cookie) to serve ads based on your prior visits to this site and other websites. The use of these advertising cookies allows Google and its partners to serve relevant ads based on your browsing activity.

You can opt out of personalized advertising at Google's Ads Settings. You can also visit www.aboutads.info for more information about interest-based advertising and how to opt out with other third-party vendors. To learn how Google uses data from sites that use its services, visit policies.google.com/technologies/partner-sites.

11. Changes to this policy

We may update this policy to reflect changes in the service or in applicable law. We will publish the current version here with its update date and, if the change is substantial, we will notify you through the service's usual channels.

Last updated: 03/08/2026