1. Data controller

Tobias Krenn
Email: tobiaskrenn06@gmail.com

2. What data we collect

2.1 Account data

When you register, we store your email address and, if you use Apple Sign-In, a unique identifier generated by Apple. We do not store your password — authentication is handled by Firebase Authentication.

2.2 Club data

You create clubs, players, and fines within the app. This data includes club names, player names, jersey numbers, fine descriptions, amounts, and payment status. All data is stored in Google Cloud Firestore.

2.3 Payment data

Subscriptions are handled through Apple In-App Purchases and RevenueCat. We do not have access to your credit card or payment details. Apple and RevenueCat process this data according to their own privacy policies.

2.4 Usage data

We do not collect any analytics data, tracking data, or location data. We do not use advertising SDKs or third-party tracking tools.

3. Why we process data

We process your data solely to provide you with the app's features — specifically the management of club fines, players, and payments. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

4. Data sharing

We do not share your data with third parties, except for the following services that are necessary for operating the app:

  • Firebase (Google) — authentication and database storage
  • RevenueCat — in-app subscription management
  • Apple — payment processing and Apple Sign-In

These services process data according to their own privacy policies and applicable European data protection regulations.

5. Data retention and deletion

Your data is stored as long as you have an active account. You can permanently delete your account and all associated data at any time within the app under More → Delete Account. After deletion, all your data will be removed from our systems within 30 days.

6. Your rights

Under GDPR, you have the following rights:

  • Access to your stored data
  • Rectification of inaccurate data
  • Erasure of your data
  • Restriction of processing
  • Data portability
  • Objection to processing

Contact us at tobiaskrenn06@gmail.com to exercise your rights.

7. Security

All data is transmitted encrypted (TLS/SSL) and stored in Google's cloud infrastructure located in the EU. Access to your club data is restricted to your authenticated account.

8. Children

ClubFines is not directed at children under 16. We do not knowingly collect data from children under 16.

9. Changes

We may update this privacy policy from time to time. We will notify you of material changes through the app or by email.

10. Contact

For questions about privacy, contact us at:
tobiaskrenn06@gmail.com

11. Privacy on this website

The statements about usage data in section 2.4 apply to the app. On this website, we use Google Analytics 4 only with your explicit consent. Tobias Krenn is the controller; contact details and your rights are set out above. You may also complain to a competent data protection supervisory authority.

12. Website hosting

Cloudflare delivers this website. Technically necessary connection information, including IP address, time, requested address and browser information, is processed to deliver and secure the site. The legal basis is our legitimate interest in a secure, available website (Art. 6(1)(f) GDPR). See the Cloudflare privacy policy for information about the hosting provider’s processing.

13. Google Analytics and analytics cookies

If you choose “Allow analytics”, we load Google Analytics 4 from Google. For EEA users, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We measure page views, interactions, App Store clicks, PDF and spreadsheet template downloads and generated catalog PDFs (sport and number of rules) and language changes. Processing includes a random cookie identifier, device and browser information, approximate region and referring page. Google states that GA4 does not log or store IP addresses. We do not send names, email addresses or app account data. Page and referrer addresses sent by our integration exclude URL query parameters and fragments.

The legal basis for this optional analytics processing and access to analytics cookies is your consent (Art. 6(1)(a) GDPR and section 165(3) of the Austrian Telecommunications Act 2021). Google Signals, advertising personalisation and advertising consent remain disabled. Without consent, neither the Google tag nor analytics requests to Google are loaded.

Google may process data outside the EEA, including in the United States. See Google’s privacy policy and Analytics privacy information for international transfers, safeguards and deletion. Event data retention depends on our Analytics property settings and is separate from cookie expiry.

14. Remembering your choice and withdrawing consent

Your choice, timestamp and version are saved in your browser’s Local Storage for up to 180 days to implement your privacy preference. Analytics cookies (_ga and _ga_…) are configured with a maximum lifetime of 180 days without renewal on each page view.

You can change or withdraw consent at any time using “Cookie settings” in the footer and selecting “Necessary only”. Withdrawal deletes accessible Analytics cookies and reloads the page without the Google tag. It does not affect the lawfulness of earlier processing. The fines list generator processes team names and rules only in your browser. Choosing “Save draft on this device” stores the draft for that language version until you delete it using “Delete saved draft” or your browser settings. PDFs are created locally; team names, rule text and amounts are not sent to us or Analytics.

You can also remove cookies and local storage through your browser or contact us to exercise your privacy rights.