Privacy Policy

FlexiLiiga is run by a private individual in Finland, who is the controller of your personal data. FlexiLiiga isn't a company yet. When it becomes one, this policy will be updated with the company's details.

For anything about your personal data, email [email protected] or use the contact page.

Your name, email address and birthdate. If you sign up with an email address, also a password, which we store only in hashed form, so nobody can read it. If you sign in with Google, we receive your name, email address and profile picture from Google, and nothing else. We keep only your name and email address: your profile picture is one you upload yourself.

What you choose to add or change: nickname, profile picture, city, languages you speak, your sport and self-assessed skill level, and your settings, such as language, theme and email preferences.

The leagues you join, your division, matches, results and Elo rating, and every change made to a result. Also the times you propose for matches and your answers to your opponents' proposals, your availability, and anything you report about a match.

Your trust factor (0 to 10) and what it is calculated from: the referees' decisions on your unplayed matches, the star ratings and the answers about your punctuality that your opponents give after a match, the reports other players make about you and the referees' decisions on them, and any adjustment the referees make. We also keep the ratings and reports you give about others.

Chat messages and reactions you send to other players, the notifications we send you, and the messages and attachments you send us through the contact page.

To keep you signed in, we store a session on our servers and in a cookie in your browser. Our servers and hosting providers also log technical data, such as your IP address, browser type and the time of each request, for security and to fix errors.

If you sign up through one of our links, for example by scanning the QR code on a poster, we record which link it was, so we know which links work.

We only use your data for the following purposes. Each purpose has a legal basis under the GDPR:

• Running the leagues (contract): creating your account, placing you in a division, creating your matches, scheduling, results, standings, Elo ratings, chat and notifications.
• Emails about your matches and account (contract): new proposals, accepted times, results and password resets. You can turn off notification emails in Settings. We still send emails that are essential to your account.
• Newsletter (consent): only if you subscribe in Settings, and you can unsubscribe at any time.
• Fair play and safety (legitimate interest): keeping a history of results and proposed times so referees can settle disputes and unplayed matches, calculating the trust factor so players can see how reliable an opponent is, handling reports, and protecting the service against misuse.
• Improving FlexiLiiga (legitimate interest): understanding, for example, which posters bring new players, using data that doesn't identify you where possible.
• Legal obligations (legal obligation): for example keeping records that the law requires.

We don't sell your data, we don't show ads, and we don't use your data for automated decisions that significantly affect you. The trust factor is calculated automatically, but a person always decides whether anything follows from it, such as a warning or a pause.

Most league pages are public. They show players' names, divisions, match results, standings and Elo ratings.

Signed-in players can also see your profile: your name, nickname, profile picture, city, the languages you speak, your age (not your birthdate), when you joined, your leagues and ratings, and your trust factor. Your opponents see the times you propose to them. Chat messages are only visible to the people in the conversation. The ratings and reports you give are seen only by the referees; the player you rated sees their average rating, and in their trust history whether an opponent said they were late for a match.

Your email address, birthdate and password are never shown to other players.

The people who run FlexiLiiga can access your data when needed to run the leagues, settle disputes, answer your messages and keep the service secure.

We use a few trusted providers to run FlexiLiiga. They process data only on our behalf and under data processing agreements:

• Neon: database hosting.
• Resend: sending emails.
• Google: sign-in with Google, if you choose to use it.
• Our server hosting provider: runs the app and the chat service.

We keep data in the EU wherever we can. Some of our providers are US companies. If your data is processed outside the EU or the European Economic Area, the transfer is protected by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

We keep your data for as long as you have an account. Pausing your participation in a league doesn't delete anything. What affects your trust factor counts less and less over time, and after three years no longer counts at all.

To delete your account, open Settings → Account → Delete account. Your account is deactivated at once and you are signed out everywhere. We keep its data for 30 days, so that we can restore the account if you email [email protected] and change your mind. After 30 days your profile, email address, password, messages, notifications, connections and settings are permanently deleted. You can also ask us to delete your account by email or through the contact page. Copies in our backups are removed as the backups are replaced.

Matches you have played remain part of the league's history, so that other players' results and standings stay correct, but your name is replaced with “Inactive player” and nothing else about you is kept in them.

We keep messages sent to us through the contact page for up to two years after the matter is closed, and technical logs normally for no longer than 30 days. We keep data longer only when the law requires it, or when it's needed to settle a legal claim.

Under the GDPR you have the right to:

• get a copy of your personal data (access),
• have incorrect data corrected; you can edit most of it yourself in Settings,
• have your data deleted,
• restrict how we use your data, or object to uses based on our legitimate interest,
• receive the data you've given us in a machine-readable format (portability),
• withdraw your consent at any time, for example to the newsletter.

You can delete your account yourself in Settings → Account. For anything else, including a copy of your data, email [email protected]. We answer within one month, and it's free. We may ask you to confirm your identity first, for example by replying from the email address of your account.

If you think we're handling your data unlawfully, you can complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi). We'd appreciate the chance to sort it out with you first.

We use only the cookies and browser storage that FlexiLiiga needs to work:

• Sign-in cookies that keep you signed in and protect forms against forgery.
• A language cookie that remembers the language you chose.
• Browser storage that remembers your theme (light or dark), and briefly holds your sign-up choices while you sign up with Google.

We don't use analytics, advertising or other third-party tracking cookies. Because we only use what's strictly necessary, we don't ask for cookie consent. When you sign in with Google, Google may set its own cookies on its own site under its own privacy policy.

Traffic between your browser and FlexiLiiga is encrypted (HTTPS), passwords are stored only as hashes, and access to the databases is limited to the people who run the service. No system is perfectly secure, though. If a data breach puts your rights at risk, we'll tell you and the Data Protection Ombudsman as the law requires.

You must be at least 15 years old to use FlexiLiiga. We ask for your birthdate when you sign up to check this. If we find out that a younger child has created an account, we'll delete it.

We'll update this policy when the service or the law changes. The date at the top shows the latest version. We'll tell you about significant changes by email or in the app before they take effect.