Privacy policy

Version of 10 October 2026

FoosArena is an app for organising 2-vs-2 table football matches in bars. Here you can see which data we use, why and for how long, in plain words.

Who is responsible

The data controller is Claudio Dall'Ara. For any privacy question or to exercise your rights, write to privacy@foosarena.eu.

Which data we use

• Account: email, password (stored only in encrypted form), account type (player or bar), language, sign-up date, consents with date and version of the terms.
• Player profile: username, avatar, preferred role.
• Game: matches, seats, invites, results, ELO, attendance and absences (karma), disputes (fair play), reports made and received.
• Bar account: bar details (name, address, location, opening hours, tables, closures) and any contacts given for verification, seen only by the admin.
• Notifications: your notifications, push and email preferences and, if you turn on push, your phone’s code to receive them.
• Security log: important actions (who, what, when) and automatic alerts about suspicious behaviour.
• Technical data: IP address and connection data in our providers’ logs, for security and operation. If the app hits an error, it automatically sends a technical report without personal data (error message, screen, system and app version; no account and no IP address), deleted after 90 days.

Your location is used only when you ask for bars and matches near you: your phone sends it to our server for the search, and it is not stored. We do not ask for your full name, phone number, photos or address book. We use no profiling cookies or advertising trackers, in the app or on the website.

What others can see

Username, avatar, role, ELO and rankings are visible to everyone, even without an account. Matches are public too (bar, time, free seats, result), but only registered users see who plays in a match: without an account it just says “Player”. Email, karma, fair play, invites and notifications stay private. Bar accounts see the username and avatar of people playing at their bar, never email or other personal data.

Why, and on what legal basis

• Providing the service (account, matches, rankings, notifications and service emails): performance of the contract (Art. 6(1)(b) GDPR).
• Fair play and security (karma, fair play, reports, automatic alerts, log, blocking accounts): legitimate interest in a fair and secure service (Art. 6(1)(f) GDPR). Automatic alerts never block anyone: a person always decides.
• Emails about news and tournaments: only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in your profile.
• Legal obligations, if requested by the authorities (Art. 6(1)(c) GDPR).

For how long

• Account and profile: until you delete your account.
• Notifications: 30 days after being read, 90 days at most.
• Security log and automatic alerts: 12 months.
• Email address for account emails (data ready, account deleted): only until the email is sent.
• When you delete your account: email, login, consents, notifications and registered phones are deleted immediately. Matches already played remain so that other players’ results stay correct, but shown as “Deleted player” and no longer linked to you.
• Providers’ backups: for the limited period set by their systems.

Who helps us (providers)

• Supabase: database and login, with servers in the European Union (Frankfurt).
• Cloudflare: the foosarena.eu website.
• Google (sign in with Google): if you choose “Continue with Google”, Google confirms your identity and email address to us. The login system may also receive the name and photo of your Google account: we don’t use them and we don’t show them to anyone. We never see your Google password.
• Resend: sending emails.
• OpenStreetMap (Nominatim): address search when a bar account adds its venue.
• Expo, Apple and Google: sending push notifications to your phone.
• Apple App Store and Google Play: distributing the app.

They process data on our behalf. Some are based in the United States: transfers rely on GDPR safeguards (standard contractual clauses or the EU-US Data Privacy Framework). We do not sell your data or share it with anyone for advertising.

Your rights

You can ask to access your data and get a copy, correct it, delete it, restrict its use, object to use based on legitimate interest, receive it in a readable format (portability) and withdraw consents. Many things you can do yourself in the app: Profile › Download my data (the file also arrives by email) and Profile › Delete account. For anything else write to privacy@foosarena.eu: we reply within one month.

If you think your data is being misused you can complain to the Italian Data Protection Authority (garanteprivacy.it) or to the authority of your country.

Minimum age

You must be at least 14 to use FoosArena. People under 18 will never see personalised advertising.

Advertising and future changes

Today FoosArena has no advertising. If advertising or paid features arrive in the future, we will announce them first in the app and by email and update this policy. Personalised advertising will only be possible with your explicit consent.

Changes

If we change this policy in an important way, we will tell you in the app and by email before the changes apply.

Terms of service · Delete your account · Back to FoosArena