Privacy Policy

Who we are

Sunday Super League is the controller of the data described on this page. For any privacy question, or to exercise your rights, the contact is support@sundaysuperleague.com.

What we hold

Only what running an amateur league needs.

• Your account: your email, the name you chose, a profile picture if you uploaded one, and your preferred language.
• Players added by an admin: when an admin adds someone who has no account yet, we store only the name they typed. There is no email and nothing else until that person claims the profile.
• Payment requests: the names of players without an account on a payment request are shown to whoever opens its link while signed in, so that each person can pick their own.
• Game data: matches, scores, teams, tournaments, standings, and manual adjustments made by your league admins.
• Comments and images: the comments and reactions you write on matches, seen by the members of that league, the images you choose for your profile or for a league, and the reports of comments and the blocks of people that you make. Whoever runs a league sees that a comment was reported, but not who reported it; a block is yours alone and the blocked person is not told.
• Payment records: a league's payment requests (title, date and amount), who has paid and who still owes, the method used (for example cash or MB WAY) and the notes the organiser adds. It is a record for the group to settle up: the app does not charge or move any money and does not store card or bank account details. If the organiser enters an MB WAY number, that number, which is their phone number, is stored and shown to the members of the league and to whoever has a line on one of that league's payment requests.
• Player ratings: to suggest balanced teams, we store, for each player in each league, a rating from 0 to 100 with its level (Rookie, Medium, Good, Very Good or Playmaker) and the history of its changes. The rating is worked out from the results of the matches and nights the player took part in and, to a small degree, from the goals and assists recorded, or it is set by the people who administer the league; the same person has a separate rating in each league. The league's organiser and sub admins see the rating and level of every player, and each team's average on suggested teams. Each player sees only the number of their own rating. All members see the league's average, as a whole number, when at least 6 other players in the league have a rating of their own. No one else sees these numbers. The rating and its history are kept while the league exists, even if the player leaves the league; when an account is deleted, the rating stays as part of the league's record, under the name Conta apagada.
• Technical logs: the server records requests, including the IP address, to keep the service running and secure.

On what basis

• Providing the service you asked for: your account and your game data exist so your league works.
• Legitimate interest: keeping the service up, fixing faults and preventing abuse.
• Consent: personalised advertising (cookies, device identifiers and similar technologies), requested through Google's consent tool in the European Union, the United Kingdom and Switzerland, which you can withdraw whenever you like.

Where the data lives

Account and game data live on a server rented from Hetzner Online GmbH in Nuremberg, Germany, and do not leave the European Union, with two exceptions. Profile pictures and league images are on the same server. First exception: the data that Google's advertising collects (see Advertising) is sent by the app directly to Google, handled under Google's rules, and does not pass through our server. Second exception: the account emails (for example password recovery and invitations) are sent through Resend, which keeps your email address and the metadata of those emails in the United States, under the EU-U.S. Data Privacy Framework.

Who else touches it

The most important one first: other members of your league can see your name, your picture and your results. That is what the app is for. We do not show them your email.

Beyond that, data is shared only with:

• Resend, which sends the service emails such as password resets and invitations.
• Google, when advertising is shown. See the next section.

Advertising

Sunday Super League is funded by advertising, supplied by Google. In the iPhone app, the advertising is a Google AdMob banner at the bottom of the browsing screens (for example the list of leagues, a league's page and its settings, a finished match and the profile), always under the label “Advertisement”. On the website, Google's ads may use cookies to be shown and to measure whether they worked, and as of this update the website's advertising is not yet live.

In the app, Google's software development kit (SDK) may collect and send to Google a device identifier, information about the ads shown and how they were used, app performance data and an approximate location derived from the IP address. The app does not ask for Apple's tracking permission, so Apple's advertising identifier is not available to Google, and we do not link this data with other companies' data or share it with data brokers. We ask Google for ads suitable for people aged 13 and over.

In the European Union, the United Kingdom and Switzerland, Google first shows a consent request, before any ad is requested with device identifiers. You can change your mind at any time in Profile > Account > Ad Privacy, for as long as that option is shown.

We never show full screen ads or video ads, and there is no advertising on the screens where you are recording a result.

What is kept on your phone

The app keeps the following in your browser or, in the iPhone app, in the app's own storage. None of it lets us follow you across other sites or apps.

In the iPhone app, Google's consent tool keeps your advertising choice on the device, so as not to ask you again.

Your rights

You can ask us, by writing to support@sundaysuperleague.com:

• For a copy of the data we hold about you.
• To correct anything that is wrong.
• To delete your account and your personal data: you can delete the account in the app, in Profile > Account > Delete Account, or ask for it in writing.
• For your data in a format you can take elsewhere.
• To restrict or object to certain processing.
• To withdraw consent for advertising, without affecting what was done before.

Complaints

If you think we have handled your data badly, tell us first and we will try to put it right. You also have the right to complain to the Comissão Nacional de Proteção de Dados, the Portuguese data protection authority.

How long we keep it

We keep your account data for as long as the account exists. If you delete it in the app, the deletion is immediate; if you ask in writing, we handle the request within the time the law sets. In both cases we delete your personal data.

There is one nuance worth stating plainly: match results belong to the other people who played too. Deleting your account removes your name, but the matches themselves stay in the league history, because they are part of other people's record.

Children

The service is not aimed at children. If an admin has added a minor to a league and that concerns you, write to support@sundaysuperleague.com and we will sort it out.

Changes

If this policy changes in any way that matters, the date at the top changes and we say so inside the app.

Deleting your account and its data

You can delete your account in the app, under Profile > Account, at any time. The deletion is immediate, confirmed on screen, and cannot be undone.

When you delete, we remove your name, email, password, your sessions on every device, your place on the league lists and in the current season's table, your comments and reactions and the sign in log lines that identify you. Your profile photo stops being available at once and its file is deleted from the server within 7 days. Your language goes back to Portuguese and your pending claim requests are withdrawn. The server's backups can keep this data for 14 more days, until they are replaced.

The games, goals, tournaments, titles and payment records you took part in stay, under the name Conta apagada, because they are also the record of the other people and of whoever runs the league. That name is always written in Portuguese. In the tables of finished seasons your name becomes Conta apagada and your photo is removed. In the current season's table your line no longer appears.

Whoever runs a league must pass it to someone else or delete it before deleting the account. A deleted account cannot be recovered, and a new account starts from zero.

The reports you made stay, tied to the name Conta apagada, without your name. The blocks you made or received are deleted.