1. Who we are

Squaddia is a team-management platform for floorball and other team sports. This policy explains how we process personal data when you use the service.

You can contact us at any time with questions about this policy or your data.

2. What data we collect

• Account data: name, email address, username and password (stored securely by our authentication provider).
• Profile data: avatar, language preference and subscription details.
• Team content: teams, rosters, members, games, play-by-play data, drills, videos, files and whiteboards that you and your team add to the service.
• Billing data: if you subscribe, our payment provider collects the information needed to charge you (card details are never stored by us).
• Technical data: basic logs needed to keep the service secure and working (IP address, browser type, timestamps).

3. How we use the data

• To run the service you signed up for: log you in, let you manage your teams, games and drills.
• To process payments for subscriptions.
• To keep the service secure and to fix errors.
• To contact you about your account, e.g. invitations and password resets.

4. We do not sell or share your data

We never sell your personal data, and we never share it with third parties for advertising or marketing.

Your data is only processed by us and by the technical providers we use to operate the service:

• Supabase — database, authentication, file storage and hosting (EU-based data processing).
• Stripe — payment processing for subscriptions.
• An email provider — to deliver invitation, password-reset and notification emails.
• Render — application hosting.

All of these providers act as our data processors under a data-processing agreement, which means they only process data on our documented instructions.

5. Public games and public drills

Anything you mark as public can be seen by everyone.

Public games (including all their data such as play-by-play, lineups and statistics) and public drills are visible to anyone who visits the site, without logging in.

Before you make a game or a drill public, we ask you to confirm that you understand it will be visible to everyone. Please do not publish personal data you are not allowed to share — for example names, photos or videos of people who have not consented.

6. Legal basis

• Contract: we process your data to provide the service you have signed up for (Art. 6(1)(b) GDPR).
• Consent: we ask for consent before publishing content publicly and before sending marketing (Art. 6(1)(a) GDPR).
• Legitimate interest: we process minimal technical data to keep the service secure (Art. 6(1)(f) GDPR).

7. How long we keep data

• Your account data is kept for as long as your account is active.
• When you delete your account, your profile, memberships and linked roster slots are removed.
• If a subscription is cancelled, the team stays usable until the subscription ends and is then deleted.
• Public games and public drills remain available as long as they are not deleted by their owners.

8. Your rights

Under the GDPR you have the right to:

• Access — request a copy of your personal data (you can also download it yourself).
• Rectification — correct inaccurate data (edit your profile at any time).
• Erasure — request deletion of your data (you can also delete your account yourself).
• Portability — receive your data in a machine-readable format.
• Restriction and objection — ask us to limit or stop certain processing.
• Withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, contact us at the address below. You also have the right to lodge a complaint with your local data-protection authority.

9. Cookies and local storage

We only use essential cookies (a session cookie that keeps you logged in) and your browser's local storage (to remember your language and filter preferences). We do not use tracking cookies or advertising.

10. Minors

The service may be used to manage youth teams. Anyone adding personal data about minors must have the consent of the child's parent or guardian.

11. Security

We use encryption in transit, secure authentication and access controls. Team data is only visible to the team's members unless it is marked public.

12. Contact and changes

If you have questions about this policy or want to exercise your rights, contact: [email protected].

We may update this policy. Significant changes will be announced in the service.