Information we collect
- Account information — your name and email address, a securely hashed password, and any optional details you add (phone, short bio, profile photo).
- Google sign-in — if you choose to sign in with Google, we receive your name, email address and profile picture from Google. We never receive your Google password.
- Content you create — organizations, tournaments, clubs, players, fixtures, results, match events, news posts and media you upload. Organizers may enter information about teams and players.
- Follows & notifications — the tournaments and clubs you follow, and — only if you opt in — a browser push subscription so we can send match alerts.
- Technical data — an authentication session cookie, and standard server logs (such as IP address and timestamps) used for security and to rate-limit abuse.
- Aggregate usage data — anonymous, cookieless page-view measurement (pages visited, referrer, country, device type) so we can see which parts of the platform get used. It is not tied to your account and never used to profile or track you across other sites.
How we use your information
- To provide and operate the platform and keep you signed in.
- To send essential transactional email, such as password resets.
- To deliver match notifications you have opted into.
- To maintain security, prevent abuse, and troubleshoot problems.
What is public
Tournaments are websites by design. Fixtures, results, standings, squads, brackets, honours and news for a public tournament are visible to anyone. Organizers control each tournament's visibility (public, unlisted or private). Your account email and password are never shown publicly.
Service providers
We do not sell your personal information. We share it only with trusted providers who help us run the service:
- Neon — database hosting.
- Vercel — application hosting and delivery, plus cookieless aggregate analytics.
- Google — optional sign-in.
- Resend — transactional email delivery.
- Cloudinary — image storage and delivery.
- Your browser's push service (e.g. Google, Mozilla or Apple) — only for notifications you enable.
Cookies
We use only essential cookies needed to keep you signed in. We do not use third-party advertising or tracking cookies. Our usage analytics are cookieless — they set no identifier on your device.
Data retention
We keep your account and the data you create while your account or organization remains active. You can ask us to delete your account and associated personal data at any time.
Your choices and rights
- Access, correct or delete your personal information.
- Turn match notifications off at any time from your device.
- Request account deletion by contacting us at support@statotec.com.
Children and youth tournaments
StatoSports is not directed at children under 13, and children should not create accounts. Because youth sport is common, organizers who enter information about minors (for example, squad lists) are responsible for obtaining the appropriate consent from parents or guardians.
Security
Passwords are stored hashed, connections are encrypted in transit, and access to tenant data is controlled by role-based permissions. No system is perfectly secure, but we work to protect your information.
International processing
Your information may be stored and processed in countries where we or our providers operate, which may differ from your own.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.
Contact us
Questions about this policy? Email support@statotec.com.