Privacy Policy

This policy explains what personal data Fifeiros ("we", "us") collects when you use fifeiros.com, why we collect it, and the rights you have over it. We process personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Who is responsible

Fifeiros is the controller for the data described here. For anything privacy related, write to [email protected].

2. What we collect

• Account data. Your email address and the name you give us, used to create and secure your account (legal basis, performance of a contract).
• Championship data. The team names, player names and results you enter. This is content you control, and it is visible to spectators you invite.
• Payment data. Payments are processed by Stripe. We receive a confirmation of your purchase and the last digits and brand of your card. We never see or store full card numbers (legal basis, performance of a contract).
• Technical data. A session cookie to keep you signed in and a browser setting for your light or dark theme. We do not use advertising or tracking cookies.

3. What we do not do

We do not sell your data, we do not show ads, and we do not profile you. We only use your email to sign you in, confirm purchases and send the occasional service notice.

4. Who we share data with

• Stripe processes payments. Their privacy policy is at stripe.com/privacy.
• Neon hosts our database, where your account and championship data are stored.
• Public authorities, only when the law requires it.

5. How long we keep data

We keep your account and championship data for as long as your account exists. If you delete your account we remove your personal data within 30 days, except records we must keep for tax and accounting purposes, which are kept for the legally required period.

6. Your rights

Under the GDPR you can ask us for access to your data, a copy of it in a portable format, correction, deletion, restriction of processing, and you can object to processing based on our legitimate interests. Write to [email protected] and we will answer within one month. You can also complain to your national data protection authority.

7. Security

Sessions are protected with signed cookies, data is encrypted in transit, and access to production data is limited to the people who operate the service.

8. Children

The service is not directed at children under 16 and we do not knowingly collect their data.

9. Changes to this policy

If we change this policy in a meaningful way we will notify you by email or inside the service before the change takes effect. The date at the top always shows the latest revision.