Privacy policy

For your account, purchases and the security of the service, Basket Recorder Pro is the controller.

For the data a club enters (players, opponents, referees, games) the club is the controller and decides what to record; Basket Recorder Pro processes it on the club’s behalf as a processor, under the agreement in the Terms of use. Anyone who wants to exercise their rights over this data should contact the club; Basket Recorder Pro helps the club respond.

• Account: name, email and profile picture received from the sign-in provider (Google or Apple; with Apple the email can be the anonymous address Apple forwards to you), creation date, your account identifier at that provider and the tokens it issues, used only for signing in.
• Sign-in sessions: IP address and device or browser type (user agent), to keep you signed in and protect the account.
• Device: a random identifier of the app installation, sent when you start or edit a game to know which device is recording it. On the device, in a protected system area, the app also keeps the sign-in session, the club you opened last, your recorder preferences and purchases waiting to be credited.
• Clubs and roles: the clubs you belong to, your role (Owner, Staff, Viewer), and invitations sent and received with their email address.
• Credits and purchases: the club’s credit ledger, App Store or Google Play transaction identifiers, the user identifier and aliases RevenueCat links to your purchases, and the content of the purchase notifications RevenueCat sends us. We never receive or store your card or payment details.
• Technical logs: the error events Basket Recorder Pro writes in structured form contain date, error type and technical codes, with no emails, entered content or purchase identifiers. The website framework, the sign-in library and the hosting provider may record technical request data on their own, such as IP address, page address and time.
• Messages you send to our support contact and, if you choose to send it from the app, your Basket Recorder Pro archive with all the data it holds (clubs, seasons, games and players), including data Basket Recorder Pro does not import and the players’ photos.

• Providing the service: accounts, clubs, roles, game sync, statistics and invitations. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
• Handling credits and purchases: crediting the right club and reconstructing its balance. Legal basis: performance of the contract.
• Security and abuse prevention: sessions, server logs, role-based access control. Legal basis: legitimate interest in protecting the service and its users (Art. 6(1)(f)).
• Answering support requests. Legal basis: performance of the contract or, before sign-up, legitimate interest.

We do not use data for advertising, profiling or sale to third parties, and we do not include analytics or tracking tools.

A club’s staff may record, at their choice and under their responsibility:

• players: first and last name, position, height, date of birth, email, phone, federation card code, notes and photo;
• seasons: names of the coach and assistant coach;
• games: schedule, venue, referees, opponents (name and jersey number), game events and statistics.

Many players are minors. The club must have a legal basis for this data and inform players or their parents; photos of minors require the consent of whoever holds parental responsibility. A club’s Viewers see statistics and the roster, not players’ contacts, date of birth, federation card or notes.

Owners and Staff can create a public link to a game’s box score. Anyone with the link sees the score, names and statistics of the players in that game, without signing in. The page is not indexed by search engines and the link can be turned off at any time, after which it shows nothing.

You must be at least 18 to create an account. Minors appear in Basket Recorder Pro only as data entered by a club; an underage player can follow statistics through a parent’s account.

We rely on providers that process data on our behalf, bound by confidentiality and security agreements:

• Neon: the service database, hosted in the European Union (Frankfurt).
• Cloudflare R2: photo storage, in the European Union.
• Resend: service emails, such as invitations.
• RevenueCat: verification of store purchases.
• Google (Gmail): the support mailbox, where the messages and archives you send us arrive.
• DigitalOcean: hosting of the website and its APIs, on servers in the European Union (Frankfurt).

Google and Apple (for Sign in with Google and Sign in with Apple, and for App Store and Google Play purchases) act as independent controllers under their own policies.

Some providers (for example DigitalOcean, Resend, RevenueCat and Google) are based in the United States. Those transfers rely on the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses.

• Account: as long as it exists. After a deletion request we erase it within 30 days.
• Club data: as long as the club exists. The Owner can ask support to close it: we then erase the club’s data within 30 days.
• Credit ledger and purchases: for the life of the club, as they reconstruct its balance.
• Technical logs: at most 30 days.
• Backups: at most 30 days, then overwritten.
• Pro archive sent to support: used only to look into your request, and erased within 30 days after it is closed.

The app stores club and game data on the device so it works offline. A local club stays only on your device until you move it to the cloud. The app asks for photo or camera access only when you choose to add a player’s photo.

The website uses only technical cookies: the sign-in session, the last club you opened, and for 30 days which provider (Google or Apple) you last signed in with, to point it out on the sign-in page. Your light or dark theme choice stays in your browser. There are no profiling or third-party cookies, so no consent is requested.

You can ask at any time to access, correct or delete your data, restrict its processing, receive it in a machine-readable format and object to processing based on legitimate interest.

You can delete your account yourself, from the Account page of the website or from the app. To exercise the other rights, or for help, write to [email protected] from your account’s address. We reply within 30 days. If you believe the processing breaches the GDPR you can lodge a complaint with the Italian data protection authority (www.garanteprivacy.it).

Data travels encrypted, access to a club’s data is limited to its members by role, and Basket Recorder Pro application logs exclude content. No system is perfect: if a breach affects you, we will notify you as the law requires.

If this policy changes we update the date at the top. For significant changes we let you know in the app or by email before they take effect.