Privacy policy

Processing is carried out by SPORTIFLOW (SF), a French simplified joint-stock company (SAS) registered with the Versailles trade register under number 941 308 561, whose registered office is at 21 rue Henri Robbe, 78100 Saint-Germain-en-Laye, France. Full details are in the legal notice.

For any question about your data : sportiflowcontact@gmail.com or the contact form.

• Account : email address, username, password (encrypted, never readable), language, country (optional), date of birth and phone number if you provide them, profile picture, and the identifier sent by Google, GitHub or Apple if you sign in with them.
• Game and community : your clubs and their game data, your private messages, your forum posts and discussions, your reactions and favourites, the reports you make.
• Premium subscription : status, plan and dates. Payment is handled by Stripe on the website, and by Apple or Google in the app (purchases managed by RevenueCat) ; we never see your bank details.
• Mobile app : device model and system, app version and notification token.
• Security and moderation : session version, IP address kept for a few minutes to limit repeated attempts, log of moderation actions, any suspensions, support team sign-ins to an account (with the IP address).
• Consents : date and version of the documents you accepted, your choice about news emails and, in your browser, your cookie choices. For each news email received : sending date, opening date, number of clicks on links to sportiflow.com and unsubscribe date.
• Browsing : with your consent, audience measurement by Google Analytics ; Google AdSense ads, personalised only with the consent given in Google's message.

• Create and manage your account, run the game, messaging and forum : performance of the terms of use.
• Manage the Premium subscription and its payments : performance of the contract and accounting obligations.
• Send you service emails (address verification, password, new message alerts, copy of your data) : performance of the contract.
• Send you SportiFlow news : your consent, which you can withdraw at any time from your profile or with the link in each email. These emails contain a pixel and tracking links that tell us, for your account, whether the email was opened and which links to sportiflow.com were followed ; this measurement helps us improve our mailings and stops when you unsubscribe.
• Protect the service and its members (attempt limits, moderation, action log, suspensions) : SportiFlow's legitimate interest.
• Measure audience with Google Analytics : your consent, given in the cookie banner. Personalise ads : your consent, given in Google's message.
• Measure site performance without cookies and show non-personalised ads : SportiFlow's legitimate interest.
• Answer your messages : SportiFlow's legitimate interest.

• Account and game data : as long as the account exists.
• Account inactive for 3 years (no sign-in) : you are warned by email at the account's verified address, then the account is anonymised as on deletion if you do not sign in within 30 days. Premium accounts and team accounts are not affected.
• When the account is deleted : email address, username, password, contact details and external identifiers are erased ; your sent messages, reactions, favourites, notifications, devices and omnisport club are deleted ; your forum posts remain visible under an anonymous username ; your clubs are taken over by bots and any current national coach term ends ; your Stripe and RevenueCat customer records are deleted.
• SportiMedia, when the account is deleted : your published articles stay online under a neutral byline, without your username ; your drafts, reporter profile and remarks are deleted and you leave your classes ; your bets, charts, saved articles and game results remain linked to an anonymous identifier.
• Private messages you received : they remain in the sender's conversation.
• Proof of consent : 5 years after the account is deleted, so that we can demonstrate your agreement.
• Payments : kept by Stripe, Apple and Google under their legal obligations ; SportiFlow keeps the history of in-app purchases.
• IP address used to limit attempts : a few minutes.
• Cookie choices : 6 months, after which the banner is shown again ; Google Analytics cookies : 13 months at most.
• Moderation logs and support sign-ins to an account : 1 year.
• Reports, suspensions and moderation applications : 1 year after the decision or the end of the suspension.
• Delivery tracking of news emails : 1 year after the campaign.
• Notifications in your account : 7 days.
• Tickets sent from the site : 1 year after the account is deleted.
• Messages received through the contact form : 1 year after the last exchange.
• Technical server logs : a few days for access logs, 10 weeks at most for the others.
• Encrypted backups : 14 days ; a deleted account may remain readable in them during that time.

Your data is never sold. Only authorised members of the SportiFlow team (administration and moderation) and our service providers can access it, each for its own task :

• Hetzner : hosting of the website, the database, encrypted backups and the counters used to limit attempts, in Germany (Falkenstein and Nuremberg).
• Google : Sign in with Google, Google Analytics, AdSense, email delivery through Gmail, Android notifications through Firebase.
• Apple : Sign in with Apple, iOS notifications, in-app purchases.
• GitHub : Sign in with GitHub.
• Stripe : payments on the website ; RevenueCat : management of in-app purchases.
• GitLab : tracking of the tickets you create (title, description and your account number).

The website, its database and its backups stay in the European Union, with Hetzner in Germany. Other providers are based in the United States (Google, Apple, GitHub, Stripe, RevenueCat, GitLab). These transfers rely on the EU-US Data Privacy Framework for providers certified under it, and otherwise on the European Commission's standard contractual clauses.

Without your consent, SportiFlow only uses necessary cookies : sign-in session, language, theme and storage of your cookie choices.

Only with your consent : Google Analytics audience measurement, asked in our cookie banner, and personalised Google AdSense ads, asked by Google in its own message (consent platform certified by Google). Without consent, the ads shown are not personalised.

You can change your choices at any time : audience measurement with Manage cookies, at the bottom of every page, and advertising with the “Privacy” link of Google's message. The mobile app uses neither Google Analytics nor ads.

Learn more : Google ad settings and how Google uses data.

You have the right to access, rectify, erase, restrict, object to and port your data, the right to withdraw your consent at any time and, in France, the right to give instructions about your data after your death.

• Rectify : from your profile, on the website or in the app.
• Get your data : “Download my data” in your website profile, or “Receive my data by email” in the app (JSON file).
• Delete your account : deletion page, also available from your profile.
• Stop receiving news : your profile or the link in each email.
• Withdraw your cookie consent : Manage cookies, at the bottom of every page.

For any other request, write to sportiflowcontact@gmail.com ; we answer within one month. You can also lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (www.cnil.fr).

SportiFlow is intended for people aged 15 and over. Under 15, signing up requires the consent of a holder of parental authority.

Connections are encrypted (HTTPS), passwords are encrypted and never readable, each account only reaches its own data in the database, sessions can be revoked and sensitive team actions are logged.

This policy may change. In case of a significant change, a window shows you the new version the next time you sign in.