Privacy policy

1. Controller

• Controller: [to be completed], tax ID [to be completed]
• Address: [to be completed]
• Privacy contact: [to be completed]

The platform is the controller of account data. For the data of players that a club enters or manages, the controller is the club, and the platform acts as its processor (see the terms for organisers).

2. What data we handle

• Account: name, email, password (stored encrypted in a way that cannot be reversed), date of birth, language and notice preferences.
• Player record: name, email and phone if whoever creates it gives them, playing level (set by the club), date of birth and the guardian's details for minors.
• Participation: entries, pairs and teams, matches, results, sanctions, tables and messages from the club.
• Public profile and friends, only if you turn them on.
• Technical data: IP address, date and time of requests and the session cookie, for security and so that the service works.

3. What for and on what basis

• Creating and managing your account and providing the service (entering you, showing your matches, telling you of changes): performance of the service you ask for (art. 6.1.b GDPR).
• Security, preventing abuse and limiting attempts: legitimate interest (art. 6.1.f).
• Showing your public profile, your photos or a minor's authorised data, sending you optional WhatsApp notices, or following clubs and searches: your consent or your guardian's (art. 6.1.a), which you can withdraw at any time.
• Keeping records the law requires: legal obligation (art. 6.1.c).

We make no automated decisions with legal effects on you.

4. Minors

An account of your own requires the minimum age shown when it is created. The data of players under 18 is entered by the club and needs their guardian's authorisation to show their full name or photos; without it only initials or an alias are shown. The guardian can answer, download a copy of what is recorded and remove the data from the record through the link they receive.

5. Who it is shared with

• The club of each tournament you take part in, which sees its players' data.
• The public, only what the tournament shows: your name as configured (full, initials or alias), results, tables and calendar. Never your email or phone.
• Providers that handle data on our behalf: hosting and database, email delivery, WhatsApp messaging if the club turns it on, and a payment gateway for organisers. They do not use it for their own purposes.
• Authorities, when the law requires it.

6. International transfers

If a provider handles data outside the European Economic Area, it does so with adequate safeguards: an adequacy decision, or the European Commission's standard contractual clauses. You can ask for information about them by writing to [to be completed].

7. How long

• Account data, while the account exists. When it is deleted, its data is erased and the records it claimed are anonymised, because other players' results were played against them.
• Notices inside the platform, six months.
• Sessions (the device and network used to sign in), a week after they end.
• Requests for an invitation that nobody answers, ninety days.
• Audit records of important changes, three years at most, to settle disputes and meet legal obligations.
• Error logs, thirty days, without email addresses, phone numbers or keys. The server keeps no log of visits, and its technical logs overwrite themselves once they reach a fixed size.
• Backups, thirty days. What is deleted from the platform remains in the backups made before until they expire, thirty days at most, and they are only used to restore the service after a failure.
• A club's data, as long as the club keeps it, and until it deletes it or its relationship with the platform ends.

8. Your rights

You can exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent.

• From My account you can download your data and delete the account directly.
• For anything else, write to [to be completed]; we will reply within the legal time (one month).
• For a tournament's data you can also go to the club that runs it, which is the controller.

9. Security

Passwords are stored encrypted, communications are encrypted, sign-in attempts are limited and access to data depends on each person's role. If there were a security breach affecting you, you would be told and the supervisory authority would be notified within the legal time.

10. Complaints

If you believe your data is not handled as it should be, you can complain to the Spanish Data Protection Agency (www.aepd.es), without prejudice to writing to us first to sort it out.

11. Changes

If this policy changes in a relevant way you will be told and, where needed, asked to accept it again. The current version (2026-10-16) is always on this page.