Sporthood helps groups organise their events, teams and tournaments, for every activity: the app (iPhone, Android and web) and this site. This page explains what data we process, why, with whom, for how long, and how to exercise your rights.
In short
- No data sold. Without a paid plan, the mobile app shows ads, personalised only if you agree.
- Your account data is hosted in the European Union.
- Audience measurement is anonymous, and you can turn it down in a single tap.
- You can delete your account at any time, from the app.
Who is responsible
The data controller is Pierre-Olivier TILLOY EI, 220 avenue Barthélemy Buyer, 69009 Lyon, France, publisher of Sporthood (see the legal notice). For any question about your data: [email protected].
The data we process
Your account
| Data | Where it comes from | Why |
|---|---|---|
| Email address, password (stored as a hash, never in plain text) | You, when you sign up | Create and secure your account, write to you |
| First and last name (stored together as your display name), username (@), app language | You; the language is the app’s language when you sign up | Introduce you to others, write to you in your language |
Your activity in Sporthood
| Data | Where it comes from | Why |
|---|---|---|
| Groups and roles, requests to join a group, invitations | You and group managers | Run groups |
| Event sign-ups, waitlist position, drop-outs, requests for a spot and invitations as an outside participant | You and managers | Run sign-ups and the waitlist |
| Attendance, marked absences and late arrivals, disputes | Managers (attendance sheet) and you | Keep the attendance sheet, calculate reliability |
| Tournaments: organisation, teams, captaincy, team invitations, entries, results | You, organisers and captains | Run tournaments |
| Content you write: names and descriptions of groups, events, teams and tournaments, calls for members or participants | You | Show it to the people you intend it for |
| Messages: group, team and tournament chats, private messages and message requests | You and other members | Let you talk to each other |
| Blocks, reports (person concerned, reason) | You | Protect you, moderate abuse |
| Places (name, address, location of a stadium, a hall or a city) | Chosen by users, described by Google | Locate groups, events, tournaments and searches |
| Notifications, your device’s notification token | The service; your device, if you accept notifications | Keep you informed |
| Technical logs, rate-limiting counters (per IP address and per email address, under a derived identifier) | The running of the service | Security, preventing abuse, fixing errors |
Your reliability
After an event, its managers have 72 hours to mark who was absent or late. Your reliability follows from this: over your last 20 commitments in the past 12 months, (attended + late arrivals) ÷ (attended + late arrivals + absences + ½ × late drop-outs + ¼ × late arrivals). A drop-out is late if it comes after the deadline set for the event or, if there is none, less than 24 hours before it starts.
- Below 3 commitments, you are “New”; then “Very reliable” from 90%, “Reliable” from 75%, “Unreliable” below that.
- Any signed-in user sees your tier, your percentage and its breakdown (attended, late arrivals, absences, late drop-outs, disputes), as well as your attendance statistics since you signed up.
- You can dispute an absence or a late arrival for 7 days: it then no longer counts in the calculation.
- An event’s organisers may choose to give its spots by reliability: until the list freezes, someone from a tier they put ahead of yours may take your spot, and you go back to the waitlist, notified, without it counting against you. The tier used is the one you had when you signed up. Group members always come before people from outside. Without that choice, reliability triggers no automatic decision.
Your “Show me to groups looking for players” listing
If you create one: an area (a place), your activities, how far you will travel (1 to 100 km), a message of at most 140 characters and an end date. Until that date, people who manage a group find you in their search, with your reliability, and can send you a message request; your activities are shown on your profile.
Your subscription
If you subscribe to a paid plan (see the terms of use), in the App Store or Google Play:
- Apple or Google processes the payment as a controller, under its own rules. We never receive your card or bank account details.
- RevenueCat manages the subscription for us and tells us which plan your account holds. It receives your Sporthood account identifier (a random identifier, with no name or email address) and the purchase history the store passes on to it: products, dates, store, renewal status, transaction identifiers.
- Our server keeps, for your account, the current plan, its end date, the store and whether it renews.
Your device’s location
Only in the mobile app, and only if you allow it. It is used to search for events, groups, tournaments or participants around you: it is sent with the search and is not kept by our servers. The app keeps it on your device with the results, for 24 hours at most. Once you have given permission, it is used as soon as you open search; you can withdraw permission in your device’s settings. The web app never asks for your location.
Audience measurement
To understand how Sporthood is used and improve it, we measure its audience: pages and screens viewed, length of visits, referring site or campaign, outbound links, app launches, actions taken in the app without their content (for example an event created, with its activity and number of spots; a message sent, with the type of chat; a search, with its number of results; an error code shown; the plans screen shown, with what opened it, for example a limit reached, removing ads or the settings; a purchase completed, with its plan and period; a purchase restored), device type, operating system, browser, country and city (derived from the IP address, which is never kept), app version.
This measurement is anonymous: it contains neither your name, nor your email address, nor what you write, nor the name of a group, a person or a place; it is never linked to your account, never combined with other data, never passed on to third parties and never used for advertising. It relies on a random identifier stored on your device (in the browser’s local storage on the web), renewed 13 months after it was created. Without a network connection, up to 500 measurements wait on the device before being sent.
It does not require consent (under the audience measurement exemption of the CNIL, the French data protection authority), but you can object to it at any time:
- in the app: Profile → Settings → Privacy, “Audience measurement” switch;
- on the web: the “Anonymous audience measurement” switch at the bottom of this page.
Objecting erases the identifier: nothing more is measured on that device or in that browser.
Advertising
The mobile app (iPhone and Android) shows ads: full screen when you open an event, a group, a tournament or a profile (none in the first half hour of use, then at most one every 3 minutes), and between the items of the home screen and of search results. This site and the web app show none, nor does the mobile app with an Essentials or Premium plan.
They are provided by Google AdMob (Google Ireland Ltd). To choose, show and count an ad, Google receives from your device its advertising identifier (if you allow it), its IP address, its model, its operating system, its language, and what you do with the ad (view, click). Google receives from us neither your name, nor your email address, nor your groups, nor your messages, nor your location.
- Your consent first: in the European Economic Area, the United Kingdom and Switzerland, a Google form asks you, after you sign in, whether cookies and identifiers may be used for advertising and whether it may be personalised. Without your agreement, ads are not personalised, or are limited (no identifier).
- On iPhone, the app also asks you once whether it may track your activity (App Tracking Transparency): without your agreement, the advertising identifier is not used.
- Change your mind at any time: in the app, Profile → Settings → Privacy → “Ad choices”; on iPhone, Settings → Privacy & Security → Tracking; on Android, Settings → Google → All services → Ads.
Your choice is stored on your device. Google processes this data as a controller, under its own rules: policies.google.com/technologies/partner-sites.
Error reports
When the app, the server or this site hits an error, a technical report is sent to us: the message, the place in the code, the device, the operating system, the version and the app’s latest technical steps (including the address of its requests, which may contain search criteria). It contains neither your user identifier, nor your email address, nor your IP address.
On what legal bases
- Performance of the contract (the terms of use): account, groups, events, tournaments, messages, notifications, “Show me to groups looking for players” listing, subscription.
- Our legitimate interest: security of the service, preventing abuse, rate limiting, moderation, reliability (which only measures whether you keep your commitments in Sporthood, and which you can dispute), error reports, anonymous audience measurement (which you can object to).
- Your consent: device location, notifications and advertising (cookies and identifiers, personalisation), which you can withdraw at any time in your device’s or the app’s settings.
- Our legal obligations: responding to requests from the authorities.
Who sees what
- Any signed-in user sees your display name, your username, your reliability and its breakdown, your attendance statistics, and the groups you have in common with them.
- Members of a group see your sign-ups and your messages in that group. The managers of a public group are visible to anyone who finds the group.
- In a public tournament, teams and their members are visible to everyone; the members of a team see its chat.
- A group’s managers see the reliability of outside participants who ask for a spot, and your listing if you show yourself to groups that are looking.
- The people you write to see your private messages.
Our processors
Each one receives only what it needs:
| Processor | Role | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting the servers of the app and of this site; transferring backups and logs | Germany, Finland (EU) |
| Cloudflare, Inc. | Network and routing, protection against attacks | Global network; transfers safeguarded by the EU–US Data Privacy Framework and standard contractual clauses |
| Migadu (Migadu-Mail GmbH) | Receiving the emails sent to our addresses (help, personal data, moderation) | Switzerland; servers in the EU (France, Germany); Switzerland is covered by a European Commission adequacy decision |
| Brevo (Sendinblue SAS) | Sending emails: account activation, password, email notifications you turned on (Profile › Notifications), reports to moderation | France (EU) |
| Google (Google Ireland Ltd) | Describing places (receives the text typed into the place search and the language); delivering Android notifications (Firebase Cloud Messaging) | EU, safeguarded transfers |
| Apple (Apple Distribution International Ltd) | Delivering iOS notifications | EU, safeguarded transfers |
| Expo (650 Industries, Inc.) | Delivering notifications to Apple and Google | United States, safeguarded transfers |
| RevenueCat, Inc. | Managing subscriptions and each account’s plan (receives the account identifier and the purchase history passed on by the store) | United States, transfers safeguarded by the European Commission’s standard contractual clauses |
A notification contains the name of the person concerned and, for a message, its first words: that is what goes through Expo, Apple or Google, and through Brevo when it is sent by email. A notification is sent by email only for the categories you turned on; each of these emails carries a link to stop receiving them. Our emails contain no pixel that reports their opening.
Where your data is
Your account data is hosted on our servers at Hetzner, in the European Union. Audience measurement, error reports, technical logs and (encrypted) backups are hosted on our own servers, in France, as is the test version of Sporthood. Traffic goes through Cloudflare’s network, which does not keep the data.
How long we keep it
| Data | Period |
|---|---|
| Account, profile, groups, sign-ups, attendance, messages, current plan | As long as the account exists |
| “Show me to groups looking for players” listing | No longer shown after its end date; erased when you remove or replace it, or with your account |
| Sign-in sessions | 30 days without use, then erased 7 days later |
| Links sent by email | Activation: 48 hours; new password: 1 hour; erased as soon as they are used or expire |
| Notifications | Read: 90 days after they are sent; unread: 365 days |
| Devices | 180 days without activity, or as soon as the notification service rejects them |
| Server responses kept to guard against duplicate submissions | 24 hours |
| Rate-limiting counters | Erased as soon as the limit resets |
| Reports | 1 year after they are handled |
| Technical logs | 30 days |
| Error reports | 90 days |
| Audience measurement | 25 months |
| Backups (encrypted) | 12 months at most: one a day for 14 days, one a week for 8 weeks, one a month for 12 months |
When you delete your account
You can delete your account in the app, mobile or web: Profile (top left of the home screen) → Settings → Delete my account. Deletion is immediate and permanent. Without access to the app: sporthood.app/en/delete-account.
Erased: your credentials, sessions, devices, listing, blocks, messages (including in groups), private conversations (along with the other person’s messages), invitations, requests to join a group, message requests, notifications and current plan. We also ask RevenueCat to erase your customer record.
Your subscription is not cancelled: deleting the account does not stop App Store or Google Play renewals. Cancel it in your store account settings; the app reminds you to.
- Upcoming events: you are removed from them, without it counting as a late drop-out; the waitlist moves up.
- Groups: you leave them. A group you owned passes to its longest-standing admin; if it has none, it is deleted, its upcoming events are cancelled and its chat is erased.
- Tournaments: you leave your team (the captaincy passes to its longest-standing member; before the start, an empty team is dissolved, after that it stays in the draw); an individual entry is withdrawn before the start. The organisation of a tournament you were the organiser of is offered in turn to its admins, the captains of its teams, then its individual entrants, each having 48 hours to accept; if nobody accepts, the tournament is closed and its upcoming events are cancelled.
Kept, without your name or username (“deleted account”), so that the history and other people’s reliability do not change: your sign-ups, attendance and absences at past events, your participation in tournaments that have started or ended and your last reliability calculation; reports you made (without their author) or that concern you; the internal identifier, with no name, of the creator of the places, events and tournaments you created.
Your display name may still remain, however, in the automatic lines of chats (for example “Léa joined the team”) and in notifications already received by other members, which are erased at the latest 365 days after they were sent. Backups that still contain your account disappear after 12 months at most.
Your rights
You can ask for access to your data, its rectification, its erasure, its portability or the restriction of processing, and you can object to processing based on our legitimate interest: write to [email protected]. We reply within one month. Anonymous audience measurement does not allow us to identify you: for it, the objection described above is enough. You can also lodge a complaint with the CNIL (cnil.fr).
Minors
Sporthood is for people aged 15 or over (see the terms of use), the age from which the French Data Protection Act (loi Informatique et Libertés, article 45) lets you consent on your own to device location, notifications and personalised advertising. If you learn that a child under 15 uses Sporthood, write to [email protected].
Changes
If this policy changes significantly, we will tell you by email before the change applies. The date of the last update is shown at the top of this page.