Privacy policy

Who is responsible

The controller of your personal data is Tomasz Piętowski, ul. Czyżyńska 21, Kraków, Poland. Contact: referee@squadiko.com. Write to this address for anything about your data.

What we store

• Guests (no account): the nickname you choose and the games you join. You get a random guest identity in this browser; no email.
• Accounts: your email address, your name, a password (stored only as a secure hash, never readable), your language and the date you joined. If you sign in with Google, we receive your name and email from Google.
• Games: title, day and time, place (address and town), an optional Google Maps link, team size, formations, shirt colours and the time zone.
• Taking part: your team, role and spot on the pitch, friends you add (by nickname), attendance marked by the organiser, medals (only totals are shown, never who gave them), chat messages, requests to join and invitations.
• Your player card (accounts): favourite roles and level if you fill them in, a photo if you add one (shrunk to a small square on your device, without the camera's data such as location), and statistics from the games you played.
• Notifications: if you switch on phone notifications, your device's notification address and its language.
• Your town: a cookie with the town you picked. If you don't pick one, we may guess it from your IP address when you open the page; the IP address itself is not stored.
• Backups: a copy of the database is made every week and kept for 8 weeks, encrypted.

Why, and on what legal basis

• To run the service you ask for: create and join games, show teams and the pitch, chat, medals, notifications (GDPR art. 6(1)(b), the contract with you).
• To keep it safe and working: preventing abuse, fixing errors, anonymous statistics about page views (art. 6(1)(f), our legitimate interest).
• Phone notifications and your phone's location (only when you tap "use my location") are used only after you allow them in your browser (art. 6(1)(a), consent, which you can take back at any time in the app or the browser).

Who can see what

• People with a game's link see that game: its players' nicknames, teams and the chat (the chat only for people in the game). Public games can also be found on Squadiko and on its town pages, without player names.
• Your player card is visible only to you and to people you have played a game with.
• Your photo (if you add one) is shown next to your nickname in the games you join (to people with the game's link) and on your player card. We don't show it in public game lists or on town pages. You can change or remove it at any time.
• Accounts appear in their town's Hall of fame as "First name I." with their medals, unless you switch this off on your card; hidden players also can't be found to be invited.
• When you ask a venue on Squadiko for a pitch, its staff see your first name, your game, since when you're on Squadiko, how many of your bookings there were played or cancelled by you, and how many games you've organised. Nothing else (no surname, email or phone); the calendar link a venue can make shows only times and pitches.
• We never sell your data and don't show ads.

Services that help us (processors)

These companies process data for us under data-processing agreements. Where data may leave the EU, standard contractual clauses apply.

• Supabase: the database and log-in, hosted in Frankfurt (EU).
• Vercel: hosting of the website (servers in Frankfurt) and anonymous page-view statistics without cookies.
• Resend: sending emails (account confirmation, password reset).
• Sentry: error reports, hosted in the EU; we remove cookies, IP addresses and game links from them before sending.
• Zoho Mail: our contact mailbox.
• Google: only if you sign in with Google or open a place in Google Maps.

How long we keep it

• Account data: until you delete your account (Account page → Delete account). Your games then go to another player, or are deleted if no one else joined.
• Chat messages: deleted automatically 48 hours after the game ends, when the medals are revealed.
• Games and results stay as part of the players' history until the accounts involved are deleted.
• Guest data: tied to the guest identity in your browser; you can leave a game at any time, and you can ask us to delete it.
• Backups: 8 weeks.

Cookies and storage in your browser

We use only what the site needs to work, no advertising or tracking cookies: the log-in session, your chosen language, theme (dark / light) and town, and in your browser's storage your last nickname and a few "already seen" markers (for example that you've seen a change to a game). Page-view statistics use no cookies.

Your rights

You can ask for a copy of your data, to correct it, to delete it, to limit or object to its use, and to receive it in a portable format. Most of it you can change yourself on the Account page and your player card; for anything else write to referee@squadiko.com. We answer within a month.

You can also complain to a data protection authority: in Poland the President of the Personal Data Protection Office (UODO, uodo.gov.pl), in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority where you live.

Age

Accounts are for people aged 16 or older.

Changes

If we change how we use your data, we'll update this page and its date, and tell account holders about important changes.