Privacy policy
This policy explains what personal data SportSphere collects when you visit our website, sign up for our newsletter or play the game, why we collect it and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The controller is Rok Gostiša, Tržaška cesta 53, 1370 Logatec, Slovenia, email support@football-sportsphere.com. See the legal notice.
2. What we collect and why
| Where | Data | Purpose | Legal basis | Kept for |
|---|---|---|---|---|
| Website visit | IP address, browser, pages visited (technical logs at our host); anonymous visit statistics | Deliver and secure the website; count visits | Legitimate interest (Art. 6(1)(f)) | Logs: 30 days; statistics are aggregated |
| Newsletter | Email address, sign-up time, confirmation time, whether emails are opened and links clicked | Send news about the game | Consent (Art. 6(1)(a)), confirmed by double opt-in | Until you unsubscribe, then deleted within 30 days |
| Game account | Username, email, password (stored only as a hash), login sessions, optional two-step authentication secret | Provide your account | Contract (Art. 6(1)(b)) | While the account exists; deleted 30 days after account deletion |
| Gameplay | Your players, clubs, matches, messages, in-game transactions, reports and moderation decisions | Run the game, fair play, safety and moderation | Contract; legitimate interest (safety, anti-cheating) | While the account exists; moderation records up to 1 year |
| Wallet (optional) | Public Solana wallet address you connect | Show balances and in-game tokens | Contract | While connected. Blockchain records are public and cannot be deleted by us. |
| Support | Your messages and email | Answer your request | Legitimate interest / contract | 2 years |
We do not sell personal data and do not use advertising trackers. AI features in the game (commentary, reports, voices) run on our own hardware; your data is not sent to third-party AI services.
3. Children
The game has no minimum age, but chat with other people is available only from age 15. Where processing is based on consent, users under 15 need the consent of a parent or guardian (Slovenian personal data protection act, ZVOP-2).
4. Who processes data for us
| Provider | Role | Location |
|---|---|---|
| Cloudflare, Inc. | Website hosting, network security, cookie-free visit statistics (Web Analytics), secure connection to our game servers | Global network; EU–US Data Privacy Framework / standard contractual clauses |
| Sendinblue SAS (Brevo) | Newsletter sending and sign-up confirmation | France (EU) |
| Google (Google Workspace) | Our email inbox | EU and USA; EU–US Data Privacy Framework / standard contractual clauses |
| Google (Google Fonts) | Web fonts in the game (your IP address is sent to Google when fonts load; we plan to host fonts ourselves) | EU and USA; EU–US Data Privacy Framework |
The game servers themselves are operated by us in Slovenia.
5. Your rights
You can ask for access to, correction or deletion of your data, restriction of processing, data portability, and you can object to processing based on legitimate interest. You can withdraw consent (e.g. unsubscribe from the newsletter) at any time with the link in every email. Write to support@football-sportsphere.com. We answer within one month.
You may also complain to the Slovenian supervisory authority, the Information Commissioner (Informacijski pooblaščenec), www.ip-rs.si, or to the authority in your country.
6. Security
Passwords are stored only as hashes, connections use HTTPS, and you can turn on two-step authentication in your account settings.
7. Changes
We will announce material changes on this page and in the game at least 14 days before they apply.