1.Overview
SportZero processes your personal data in compliance with the European General Data Protection Regulation (GDPR) and the French Data Protection Act. We take your privacy seriously and do not sell, rent or transfer your data to third parties for commercial purposes.
2.Data controller
The data controller is [COMPANY_NAME], [COMPANY_FORM] registered under SIRET [SIRET], with its registered office at [COMPANY_ADDRESS]. Contact for privacy matters: [DPO_EMAIL].
3.Data we collect
- Account information: email, username, hashed password, date of birth;
- Optional profile data: avatar, bio, location, favorite club;
- Service usage: predictions, group memberships, ranking, stage progression;
- Technical data: IP address (anonymized after 12 months), device, browser, navigation;
- Subscription status (payments handled by Stripe — we do not store card data).
4.Purposes
Your data is processed to:
- Provide and maintain the service (contractual basis);
- Process subscription payments (contractual + legal obligation);
- Send transactional emails (legitimate interest);
- Send marketing communications (only with your explicit consent);
- Improve the service through anonymous analytics (consent + legitimate interest);
- Protect the service against fraud and abuse (legitimate interest);
- Comply with legal obligations.
6.Retention
- Active account: data kept while the account exists;
- Inactive account (3 years without login): anonymized then deleted after email notice;
- After account deletion: personal data removed within 30 days;
- Billing data: 10 years (French accounting obligations);
- Technical logs: max 12 months;
- Marketing data: until consent is withdrawn.
7.Your rights
Under the GDPR, you have the right to:
- Access your data;
- Rectify inaccurate data;
- Erase your data ("right to be forgotten");
- Restrict or object to processing;
- Port your data (machine-readable format);
- Withdraw your consent at any time;
- Lodge a complaint with the French data protection authority (CNIL).
Most rights can be exercised directly from your account settings. For other requests, contact [DPO_EMAIL]. We answer within 30 days.
9.Binding version
This English page is a courtesy summary. The legally binding version is the French Privacy Policy. In case of discrepancy, the French version prevails.
For any complaint regarding your personal data, you may contact the French CNIL at www.cnil.fr.