Privacy policy

Data controller

The data controller is [à compléter : nom ou raison sociale de l’éditeur] (see Legal notice). For any question: [à compléter : e-mail de contact].

Data we process

Account

Email address (required to create and use an account). Where applicable, a password (securely stored by our authentication provider).

Profile (optional)

Display name, favourite league and team, preferred language.

Age (optional / depending on the form)

Date of birth or age attestation, to verify the minimum required age.

Your scenarios

The simulations you save, tied to your account.

Technical data

IP address (used to infer an approximate country), device and browser type, connection logs, via our hosting providers.

We do not collect precise (GPS) geolocation and we do not sell your personal data.

Purposes and legal bases

Provide the account and service

Legal basis: performance of the contract.

Security, abuse prevention, proper operation

Legal basis: legitimate interest.

Aggregated audience statistics

Legal basis: legitimate interest (or consent if non-essential cookies are used).

Marketing emails (where applicable)

Legal basis: consent, collected separately and withdrawable at any time.

Recipients

Your data is accessible to the publisher and to the strictly necessary technical processors: Cloudflare (hosting) and Supabase (database and authentication). No personal data is sold or shared with third parties for commercial purposes.

Transfers outside the EU

Some providers may process data outside the EU. Supabase region: [à compléter : région d’hébergement Supabase — UE ou US]. Where transfers outside the EU occur, they are covered by appropriate safeguards (standard contractual clauses).

Retention

Account data is kept while the account is active, then deleted or anonymised within a reasonable time after closure. Technical logs are kept for a limited period.

Your rights

You have the rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent at any time.

To exercise them: [à compléter : e-mail de contact]. You may also lodge a complaint with your data protection authority (in France, the CNIL — www.cnil.fr).

Minors

The service is not intended for people under 15 without the consent of the holders of parental authority, in accordance with French regulations.