Privacy Policy

PelotaClub ("we", "us") provides tools for amateur sports teams and coaches to coordinate training sessions and attendance. This Privacy Policy explains how we handle personal data when you use our website and services.

Depending on how you use PelotaClub, we may process:

• Account data — email address and authentication credentials (passwords are stored using secure hashing; we do not store plain-text passwords).
• Team and session data — information you create, such as training sessions, player names, and attendance responses (Coming, Not coming, Late).
• Technical data — IP address, browser type, device information, and server logs used for security, debugging, and service reliability.
• RSVP page opens — when someone opens a public event invite link, we count page views and unique browsers for the event organizer. Uniqueness uses an anonymous id stored in your browser's local storage (not an advertising or analytics cookie).
• Cookies — see our Cookie Policy.

• To create and manage your account and authenticate you.
• To operate session scheduling, attendance collection, and team coordination features.
• To show event organizers how often their public invite page was opened and by how many unique browsers.
• To keep the service secure and prevent abuse.
• To improve reliability and fix errors.

Where applicable data protection law requires a legal basis, we rely on: (a) performance of a contract when providing the service you signed up for; (b) legitimate interests in operating, securing, and improving PelotaClub, balanced against your rights; and (c) compliance with legal obligations. Where we ask for consent, you may withdraw it at any time without affecting prior processing.

We retain account and team data while your account is active and for a reasonable period afterward to resolve disputes, enforce our terms, and meet legal requirements. Technical logs are kept for a limited period unless needed longer for security investigations.

We do not sell your personal data. We may share data with infrastructure and hosting providers that help us run PelotaClub, subject to appropriate safeguards. We may also disclose information if required by law or to protect rights, safety, and security.

We use technical and organizational measures appropriate to the nature of the data, including encrypted connections (HTTPS), httpOnly session cookies, and access controls. No method of transmission or storage is completely secure.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to data portability. You may also lodge a complaint with your local supervisory authority.

To exercise your rights, contact us using the details in your account settings or the address listed in our Terms of Service. We will respond within the timeframes required by applicable law.

If we transfer personal data outside your country, we will use appropriate safeguards where required by law (such as standard contractual clauses).

PelotaClub is intended for coaches and team organizers. If you add player information for minors, you are responsible for having an appropriate basis to do so (for example, parental consent where required).

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Continued use after changes take effect constitutes acceptance where permitted by law.