Privacy policy

The data controller is Alberto Cabas Vidani. For any request about your data, including account deletion, write to albertocabasvidani@gmail.com.

Only what the service needs to work:

• Account: email address, password (stored only in hashed form), player name and preferred language.
• Profile, if you choose to fill it in: region, city and club. They power the standings you can filter by territory.
• Gameplay: tournament registrations, match results, throw-by-throw scoring and series ranking points.
• Notifications: if you turn them on, an identifier for your device or browser, used only to tell you when it is your turn.
• Referral: the parameters of the link you first arrived from (utm_source and similar), to understand which channels bring organisers in.

The replay feature records throws during a match. Those videos are never uploaded to our servers: they stay in the storage of the phone or browser that recorded them, and you can delete them whenever you want from the video list.

All that reaches our servers is a technical row — which match the recording belongs to, when it started, how long it lasted and whether it closed properly — used to show the recording status in the referee console.

• No advertising and no advertising identifier: the app does not declare the AD_ID permission and contains no ad SDK.
• No third-party analytics that follows you across sites.
• No location collection: the region, if any, is the one you typed into your profile.
• We do not sell or share your data with anyone.

• To provide the service you asked for: without accounts and results there are no tournaments and no standings (Art. 6(1)(b) GDPR).
• For push notifications, based on your consent, which you can withdraw at any time from your device or app settings (Art. 6(1)(a)).
• To keep the service secure and to understand which channels work, based on our legitimate interest in running it and making it known (Art. 6(1)(f)).

We rely on providers that process data only to run the service, under an agreement to that effect:

• Supabase — database and authentication. Data is hosted on servers in the European Union (Ireland).
• Vercel — hosting for the website and the APIs.
• Resend — delivery of account confirmation and password reset emails, from servers in the European Union (Ireland).
• Google Firebase Cloud Messaging — delivery of push notifications on Android.
• Vercel and Google may process data outside the European Union, under the standard contractual clauses approved by the European Commission.

Account data stays for as long as the account exists. If you delete it, your email, password, profile and notifications are removed.

Results of matches already played stay in their tournaments and standings, under the player name you used at the time, with no remaining link to you: deleting them would rewrite the brackets and standings of every other participant after the fact, and they never asked for that.

You can delete it yourself at any time: in the app under Profile → Delete account, and on the website from your profile page. The "Account deletion" page explains in detail what is removed and what stays, and how to request deletion by email if you can no longer sign in.

You can ask to access your data, correct it, delete it, restrict its processing, receive it in a machine-readable format, or object to processing based on legitimate interest. Write to albertocabasvidani@gmail.com: we reply within one month.

If you believe the processing breaches the GDPR, you can lodge a complaint with your national supervisory authority — in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

You must be at least 14 to create an account. Younger players take part in tournaments registered by the organiser, without an account: for them we only handle the player name shown in the brackets.

If we change how we handle data we will update this page and the date at the top. Substantial changes will also be announced by email.