Privacy Policy
1. Who is responsible
The controller of your personal data is [Operator full name], NIF [NIF], [Address], Portugal. Contact for any privacy question: [email protected].
2. What we collect and why
- Account: your email address and login records (date, IP address and browser, kept by our login provider for security). Why: to give you access to your account (contract) and keep it secure (legitimate interest).
- Plan and payments: your plan, its end date and your Stripe customer and subscription IDs. Card details are handled by Stripe, not by us. Why: to provide Pro (contract) and keep invoices and tax records (legal obligation).
- Emails: we send login links and essential messages about your account or payments. We will only send marketing if you opt in.
- On your device: your login session and simple preferences (such as the last stat you chose) are stored in your browser's local storage. These are strictly necessary for the site to work, so no consent banner is needed. We use no advertising or tracking cookies.
- Server logs: our hosting provider processes technical data (such as IP address) to deliver the site and protect it from abuse.
3. Who processes data for us
- Supabase — accounts and database (servers in Ireland, EU).
- Stripe — payments and invoices.
- Resend — sending login emails (EU region).
- Cloudflare — hosting, domain and security for the website.
Some of these companies are based in the United States. Where data leaves the EU, transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
4. How long we keep it
Account data is kept while your account exists. If you ask us to delete your account we do so within 30 days, except billing records, which Portuguese tax law requires us to keep (up to 10 years). Security logs are kept for a short period.
5. Your rights
You can ask to access, correct, delete or receive a copy of your data, and to restrict or object to its use, by writing to [email protected]. You can also complain to the Portuguese data protection authority, CNPD, or the authority in your country.
6. US residents
We do not sell or share personal information for cross-context advertising. You may request access to or deletion of your information at [email protected].
7. Age
Courtside is only for people aged 18 or older. We do not knowingly collect data from minors.
8. Changes
We will post any changes on this page and update the date above.