Privacy Policy

Jerome Goedert, Dresdner Straße 19/6, 1200 Wien, Österreich · Email: goeje.lu@gmail.com. No data protection officer has been appointed (not legally required).

When you access the site, technically necessary data is processed (IP address, date/time, page requested, browser/user-agent) to ensure secure and stable operation. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Hosting is provided by Vercel Inc.

We use Vercel Analytics in its cookieless mode. No tracking cookies are set and no personal profiles are created. Details: Vercel Analytics Privacy.

This website sets no advertising or tracking cookies. Only technical settings (e.g. language and mode preference) are stored in your browser's localStorage and are not transmitted to us.

Using the app requires an account. We process your email address, display name/profile details, password and date of birth (for age verification). You may optionally sign in via “Sign in with Apple” or Google, which transmits data to Apple or Google respectively. The legal basis is performance of a contract (Art. 6(1)(b) GDPR).

To find nearby players and venues we process your location — only after you grant the device permission (Art. 6(1)(a) GDPR). You can withdraw the permission at any time in your device settings.

Match results, ELO rating and game history are processed to provide the service (Art. 6(1)(b) GDPR). ELO is calculated automatically by fixed, transparent rules; no automated decision with legal effect within the meaning of Art. 22 GDPR takes place.

Direct and group messages are processed and stored to enable communication between users (Art. 6(1)(b) GDPR).

With your consent we send push notifications. A push token is processed and delivered via Apple (APNs), Google (FCM) and Expo. You can disable push at any time in your device settings.

For app stability we use Sentry, which processes technical diagnostic data (e.g. device type, OS, error messages). The legal basis is our legitimate interest in error-free operation (Art. 6(1)(f) GDPR).

• Supabase – backend, database & authentication (region: EU)
• Vercel Inc. – web hosting & cookieless analytics
• Sentry – error and crash reporting
• Apple – app delivery, push (APNs), “Sign in with Apple”, maps (Apple Maps)
• Google – sign-in (Google Sign-in), push (FCM), maps (Google Maps)
• Expo – push notification delivery

Data processing agreements under Art. 28 GDPR are in place (or being concluded) with these providers. The minimum age for independent use is 16; younger users only with the consent of a parent or guardian (Art. 8 GDPR).

Our backend (Supabase) is operated in the EU. With individual services (Vercel, Sentry, Apple, Google, Expo) processing may take place in the USA; such transfers are safeguarded by appropriate measures (EU Standard Contractual Clauses).

We store personal data only as long as necessary for the stated purposes or as required by statutory retention periods.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw consent at any time with future effect (Art. 7(3) GDPR). You can delete your account anytime in the app under “Profile”. Send requests to goeje.lu@gmail.com.

You may lodge a complaint with a supervisory authority — in Austria the Data Protection Authority (dsb.gv.at).