Privacy notice

In effect: 2026-10-26

Draft – pending legal review. The highlighted parts are for the founders to fill in. The Hungarian version prevails.

In short

AGON helps you find people to play padel with. We ask for as little data as we can.
No other player ever sees your e-mail address or your date of birth.
Others see your name, how you play, your home clubs, your level and your matches – your age only if you switch it on.
If you're 18 or over, your name, level, ranking place and event results can be found without signing in on agonapp.hu. Never your age, your clubs or where you play. You can switch it off in Profile.
We don't track your location, and we never ask for health or training data; we handle a photo only if you add one to a match. No ads, and we don't sell your data.
We collect usage statistics only if you let us, and you can switch them off at any time.
You can delete your account in the app at any time.

Who is responsible for your data?

Controller: TODO: controller – the operating sole trader's name, or both sole traders as joint controllers, address: TODO: address, email: info@agonapp.hu. More in the Operator information.

We are not required to appoint a data protection officer. TODO: lawyer to confirm

What we process, why, and for how long

E-mail address

What: the e-mail address you sign in with.
Why: signing in with a code sent by e-mail. Before a code is sent, an automatic check (Cloudflare Turnstile) looks at whether a person is asking: it examines technical features of your browser or the app, and never receives your address.
Legal basis: performance of a contract (GDPR Art. 6(1)(b)); for the check, our legitimate interest in preventing abuse (Art. 6(1)(f)).
Who sees it: nobody but us. Players never see each other's addresses.
How long: until you delete your account. Throwaway e-mail addresses can't be used to sign up.
If you change it: we keep the new address you enter in Profil with your account and send a code to both addresses. Once both codes are in, the new address takes the old one's place; if not, the new one is deleted at your next change or when you delete your account. You can change it once a day and ask for codes three times a day; for that we keep, for two days, when you asked for codes and when you changed it, without the addresses.

Two-step sign-in, Apple and Google

What: if you turn on two-step sign-in, your authenticator app's secret key. If you sign in with Apple or Google, which one, and the e-mail address they give us (Apple may give a hidden relay address). If you sign in with Apple, also the token that lets us end the connection with Apple when you delete your account; we use it for nothing else, and it goes with the account.
Why: protecting your account and signing you in.
Legal basis: performance of a contract (Art. 6(1)(b)).
Who sees it: nobody; Supabase's sign-in service handles it. Apple and Google handle your account with them as controllers in their own right.
How long: until you turn it off or replace it, and at the latest until you delete your account.

Date of birth

Why: to check you're at least 16; and, if you switch it on, to show your age in years on your profile – from 18.
Legal basis: performance of a contract (the service is for people 16 and over). Showing your age is based on your consent (Art. 6(1)(a)), which you can withdraw in your profile at any time.
Who sees it: nobody sees the date. Others see your age in years only if you've switched it on.
How long: until you delete your account. If the check fails, we keep only the outcome, not the date.

Profile

What: your first and last name, your username (your @handle), playing hand, preferred side, formation, up to three home clubs, how your profile card looks (colour, layout, and what it shows first), app language, and whether you show your age.
Why: so others know who they're playing with, and so we tell you about matches that suit you.
Legal basis: performance of a contract.
Who sees it: signed-in players see your full name and your username, and can search for you by your username – except players you've blocked or who blocked you. Your username is unique; if you delete your account, it is freed. Players who share a home club with you also see you on the Social tab, among the players at their clubs. They also see your profile card, which only ever shows what your profile shows anyway. Your badges (such as Fill-in) are worked out from your matches, not stored separately; others see a badge and its tier, and only you see the number behind it. Only you see your language. Without signing in, only your public profile shows (see below).
How long: until you delete your account.

Public profile

What: whether your public profile is on (it is by default).
Why: so anyone can see who plays and competes on AGON without signing in, as on other tournament systems.
Legal basis: legitimate interest (Art. 6(1)(f)); you can object at any time by switching it off. TODO: document the balancing test
Who sees it: if you're 18 or over, have accepted this notice and haven't switched it off, anyone, without signing in, in the search on agonapp.hu and on your own page (agonapp.hu/en/players/your-username): your name, your username, your level, your verified matches, your ranking place (if you're on it), and your record in AGON events (events entered, wins and losses, your last three matches). Never: your age or date of birth, your e-mail address, your profile photo, your home clubs, your matches, or where and when you play. We ask search engines not to list this page. A block doesn't reach it: without signing in, someone you've blocked can see it too; if you don't want that, switch your public profile off (we offer to when you block someone). There is no public profile under 18.
How long: while it's on; switched off, it disappears at once.

Matches

What: matches you post or play in: club, time, length, details, how many friends you bring, who joined or left and when.
Why: to bring players together, manage places and keep everyone in the match informed.
Legal basis: performance of a contract.
Who sees it: open matches – signed-in players (except where there's a block); private matches – only the people in them. Without signing in, an open match posted for everyone shows on agonapp.hu with only its time, club, level and free places, never who is in it. "Club against club" shows only each club's monthly total, with no players in it; a total under three isn't shown. How many of those were yours, only you see.
How long: until you delete your account. After that, shared matches stay without your name, because they are the other players' matches too (see Deleting your account).

Match messages

What: what you write in a match's messages, with your name and the time.
Why: so the players in a match can plan it (who brings balls, lifts, what happens after).
Legal basis: performance of a contract.
Who sees it: only the players in the match at the time. Someone who leaves stops seeing it. You don't see messages from players you've blocked or who blocked you, and they don't see yours. There is no private, one-to-one messaging.
How long: you can write for 7 days after the match ends; messages are kept for 30 days after it ends. You can delete your own message at any time: it disappears without a trace, and the others don't see that anything was there. The one exception: if someone reported it before you deleted it, a copy stays with that report (see Blocks and reports).

Messages to organisers

What: what you write to an event's organisers and what they answer, with your name and the time; when the other side read it.
Why: so you can ask about an event (parking, start times, entries) and the organisers can answer.
Legal basis: performance of a contract.
Who sees it: only you and the event organisers' team (owner, admin, desk). No other player, and not the referees. Organisers can only write to someone who wrote to them first. Their answers are shown as from the team.
How long: you can write until 14 days after the event; the conversation is deleted 60 days after it. You can delete your own message at any time. If you delete your account, your conversations go with it.

Match photos

What: the image you add to a match, who added it and when; and the result of the automatic check.
Why: so the players in a match can share its moments with each other.
Legal basis: performance of a contract. For other people shown in a photo, the legitimate interest of the uploader and the players (Art. 6(1)(f)) – the community rules allow a photo only with the agreement of everyone recognisable in it, and any photo can be reported. TODO: lawyer – legal basis for people pictured
Automatic check: before the others see it, every photo is checked automatically (nudity, violence, hate symbols, drugs). Only the image itself goes to Sightengine (Paris) – no name, match or other data – which deletes it after the check; no face recognition is used. Before that we take the photo's hidden data off (such as where and with which camera it was taken), so the others get only the picture itself. If the check turns it down, we delete it at once and tell only you why.
Who sees it: an approved photo – the players in the match at the time, except where there's a block. You always see your own, including while it's being checked.
How long: until you delete it or your account. Deleting leaves no trace; the one exception is a photo someone reported before you deleted it, which stays until that report is closed, so the moderator can see it. A turned-down photo is deleted at once, and the notice about it after 30 days.

Profile photo

What: if you upload one: the image, when you uploaded it, and the result of the automatic check. It's optional; without one, your initials show.
Why: so others recognise you in matches and on your profile.
Legal basis: performance of a contract (Art. 6(1)(b)).
Automatic check: the same as for match photos: before anyone else sees it, the image is checked by Sightengine (Paris), with no name or other data and no face recognition, and deleted after the check. If it's turned down, we delete it at once and tell only you why.
Who sees it: an approved photo – anyone who can see your profile in the app, except where there's a block. While it's being checked, only you.
How long: until you replace or delete it, or delete your account. It's deleted without trace; the exception is if someone reported you before you deleted it: then it stays until that report is closed, so the moderator can see it.

Events

What: if you tap “Interested” on an event: that mark and when you made it.
Why: so you know what you're following, and the organisers see how many are interested.
Legal basis: performance of a contract (Art. 6(1)(b)).
Who sees it: only you see your mark. Everyone else sees how many are interested, never who.
How long: 90 days after the event, or until you take it back, and at the latest until you delete your account.

Tournaments and hosting

What: if you host events on AGON: your organisation's name, the bank account you take entry fees into, your team's members and their roles, invitations to the team (who invited whom, to what role, and whether they accepted), the organisation's phone number if you give one, the logos and cover image uploaded for an event, and a log of who changed what in an event. If you're entered into an event (by yourself, or by the host and you accept): your name on the entry list, in the draw, the schedule and the results, the score used for seeding, and whether and how you paid the entry fee (due, paid, at the venue, free). If the host enters someone without an AGON account: only their name, as the host typed it. If the host names the event's officials (tournament director, head referee, referees): their name as the host typed it, their role, and for a referee the court. If you enter and invite a partner, or the host enters you: the invitation (who invited whom, and whether it was accepted); until you accept, you're not on the entry list. The host's messages to entrants (the text, whom it was for, who sent it and when). Where the host lets players enter scores: the score entered, who entered it and when, until the other side confirms it.
Why: so the host can run the event and see who has paid.
Legal basis: performance of a contract (Art. 6(1)(b)); for the name of someone entered without an account, the host's legitimate interest (Art. 6(1)(f)) TODO: the host's and AGON's roles in that case: separate controllers, joint controllers, or processor. Showing names publicly is part of taking part in an event TODO: the lawyer confirms that performance of a contract and the notice at entry are enough for this.
Who sees it: the entry list, draw, order of play and results of a published event can be seen by anyone on the event's public page (agonapp.hu/en/tournaments/…), without signing in: players' names as they set them in AGON, or as the host typed them. The officials' names are seen by the host team; they show on the public page only if the host switches that on for the event. Usernames, levels and e-mail addresses don't show there. Signed-in players who can see your profile also see your record in AGON events on it (events entered, wins and losses, your last three matches), and so does anyone on your public profile, if it's on, and on an entry list your level and your place in the ranking. Whether you paid, only you, your partner in the same entry (so one of you can pay both shares), the host team, and, when the federation collects the entry fees (see below), the federation's finance team. The organisation's phone number (if given), signed-in players; it doesn't show on the public page. The log, only the host team; the organisation's bank account, the team and anyone whose entry still has a fee to pay into it; an invitation, the invited player and the team. Uploaded logos and cover images are checked automatically like photos (Sightengine), and others see them only once approved. You pay the entry fee to the host directly, or to the federation when it collects it: AGON never handles the money or your card details.
How long: the entry list, draw and results are part of the event's shared history and stay, as "Deleted player" once you delete your account. The payment status TODO: retention period, in line with accounting rules. Team membership until you're removed, and at the latest until you delete your account; an invitation until your account or the inviter's is deleted. The host can delete logos and the cover image, and they go with the event. The host can change or remove the officials' names at any time, and they go with the event.

Verifying organisers

What: if your team asks to be verified (needed for taking entry fees by bank transfer, notifying a club's players, and the "Verified" mark): the organisation's form (company, association or foundation, sole trader, private person), its legal name, its company, register or sole trader number, its tax number, the club it's tied to and how (runs it, works there, rents courts there), its website, the contact person's name, role and phone number, whether it's a MAPASZ member, the note, who sent it and when, and our decision (approved or turned down, and why). If the team says it runs the club: who asked for a check code to the club's own e-mail address (or another address we checked), when, and whether it was entered; the code itself isn't stored, only a fingerprint made from it. If someone asks to get a club's team back through the club's e-mail address: who asked, when, and whether they got it. The team's invitation links: who made them, for which role, and who used them, when.
Why: so that only real organisers can take money by transfer and notify a club's players. We check the numbers in the public registers (the company register, the register of civil organisations, the sole traders' register, NAV's tax number lookup), compare the name with the bank account's, and call the club back on its own public number, or check with a code we send to the club's own e-mail address (through Resend; the e-mail says who asked). We take the club's address from its own website or public listing.
Legal basis: AGON's and players' legitimate interest in preventing abuse (Art. 6(1)(f)).
Who sees it: AGON's founders, and the team's owners and admins. Others only see whether the team is verified.
How long: an approved request as long as the team exists; one turned down or withdrawn, 12 months after the decision. If the sender deletes their account, the request stays with the team, without their name. Check code records are kept for up to 30 days, invitation links for up to 30 days after they expire; deleting your account deletes the ones you asked for or made at once.

The federation

What: if a sports federation (MAPASZ, for padel) uses AGON: its member clubs, the organisers it recognises, and whether an event counts for the federation's ranking (asked, approved, turned down, and why). When the federation collects a ranking event's entry fees itself: the entrants' names, the amount due, the payment code, whether and when it arrived, and the monthly settlement with organisers (per organiser, what was collected, the federation's share and what the organiser is owed, with the organiser's bank account). If you work on the federation's team: your decisions, in a log (who decided what, when and why).
Why: so the federation can approve the events that count for its ranking, keep its list of member clubs, and, when it collects the entry fees, match payments against its own bank statement and pay the organisers. The money goes to the federation's own bank account; AGON never handles it.
Legal basis: the federation's and AGON's legitimate interest in running the competition system reliably (Art. 6(1)(f)).
Who sees it: the owners, admins and competitions staff of the federation's team, the team hosting the event (its own request), and AGON's founders. The federation sees only numbers about entrants, except at events whose fees it collects: there its owners, admins and finance staff see the payments (name, amount, code, whether it arrived).
How long: as long as the federation uses AGON; payments and settlements as long as accounting rules require. If someone on the federation's team deletes their account, their decisions stay, without their name.

The federation's earlier records

What: if a sports federation moves to AGON and hands over the records of its earlier systems (for padel, Rankedin and Playtomic): players' names, e-mail addresses, birth years, clubs, ranking points and categories, licence validity and past results. The same player in both systems becomes one profile (by e-mail address, or by name, birth year and club); the federation decides the doubtful cases. We don't take over anyone who may be under 16. We open no account for anyone: if you sign in to AGON with the same e-mail address, we ask whether it's you. If it is, your past results show on your profile, to you only, and never move your level; if not, the federation looks at it.
Source: the federation, which requested the records from its earlier systems.
Why: so the federation's ranking and event history don't start from zero, and you see your own past results in AGON too.
Legal basis: the federation's legitimate interest in the continuity of its competition system (Art. 6(1)(f)). Every player taken over is told by e-mail, in the federation's name, within a month of the import, and can ask for their data to be deleted with one click.
Who sees it: you, once the profile is yours, the owners and admins of the federation's team (to decide doubtful cases), and AGON's founders. No other player.
How long: until you claim the profile, or as long as the federation needs it for its ranking history; then the name and contact details are deleted. If you delete your account, the federation's record stays, no longer linked to you.

Training groups

What: if you belong to a club's or academy's training group: the invitation (who invited you, and whether you accepted), your membership, whether you're coming to each session (only yes or no; we never ask why), your answer to a weekly series, the coach's attendance register (whether you were there), and what you write on the group's board, with your name and the time. Your place on a full session's waiting list; your booking when you take a free place in another of the club's groups. If the club records a pass for you: how many sessions, from when until when, the club's note, and how many you've used (counted from the register). If you coach: your groups, each session's time, court and note, and the passes you record.
Why: so the coach can organise the sessions and knows who to expect; so you see the coming sessions and can sort things out with the group.
Legal basis: performance of a contract (Art. 6(1)(b)).
Who sees it: the group, its members, the sessions and who's coming (the waiting list and players booked from other groups too), the group's members and its coach. When you book a place in another group, that group's members and coach see your booking and your name. Your attendance (whether you were there), only the coach and you, not the other members. Your pass, only you and the club's coaches. The club runs passes and you pay the club: AGON only shows them and never handles money. TODO: lawyer – the club's and AGON's roles for the pass records, as for entry fees If you subscribed to the AGON calendar, your sessions appear in it too. The board, whoever is in the group now; someone who leaves no longer sees it. You join a group only by invitation, when you accept it. We don't ask for or store health data: if you can't come, "Can't make it" is enough.
How long: board messages for 180 days; sessions, your answers, your bookings and the attendance register for 13 months after the session; a pass for 13 months after it ends. Membership until you leave or are removed. You can delete your own message at any time. If you delete your account, your memberships, answers, bookings, attendance, passes and messages go too.

Licences and passes

What: if you ask the federation for a licence or a club for a pass in AGON: what you asked for and when, its price, the code that goes in the transfer's message, whether the issuer (the federation or the club) says the price arrived, when and how you paid (by transfer or at the venue), from when until when it holds, the issuer's own number for it (a licence number, for example), and, for a pass that is for a number of uses, the days on which one was used. We don't ask for or store health data for this either: AGON handles no sports-medical certificate.
Why: so you see in one place what you hold and until when, and can renew it; and so the issuer knows whom it gave a licence or a pass.
Legal basis: carrying out your request, a contract (Article 6(1)(b)). The federation issues the licence and the club the pass, and you pay them: AGON only keeps the record and never handles the money. TODO: lawyer – the issuer's and AGON's roles for the licence and pass records, as for entry fees
Who sees it: you, and whoever you asked: the federation team's owners, admins and finance staff, or the club team's owners and admins. They see your name and username beside your request. No other player sees it, and it isn't on your public profile.
How long: a request nobody answered, 60 days; a licence or a pass, 13 months after its last day, a cancelled one 13 months after it was cancelled. If you delete your account, your waiting requests are deleted at once; what you paid for stays in the issuer's record, without your name.

Level and results

What: your answers to the level questionnaire (how long and how often you play, lessons, competition, other racket sports, the walls, overheads) and the starting level worked out from them; match results (who played with whom, sets and games, who entered and who confirmed them, and, while one waits for confirmation, who said it went differently); your level, number of verified matches, weekly streak and fill-ins. If someone logs a match with you after the fact, you're notified, and it joins your matches only once you confirm it. A logged match is kept as history: it doesn't count for your level, your wins, your streak or your badges. Your matches played to the end at tournaments, Americanos, Mexicanos and leagues of organisers AGON has verified count towards your level when the event closes, a match played to points by less than one played in sets; other events' don't.
Why: evenly matched games, and so you can see where you stand. The number of verified matches shows that someone turns up.
Legal basis: legitimate interest (Art. 6(1)(f)) – working out a level is profiling, and a result entered by someone else is data about you; that's why only confirmed results count, and your level never decides anything for you. TODO: document the balancing test
Who sees it: signed-in players see your level, verified matches, streak and fill-ins (except where there's a block); your level and verified matches also show without signing in, on your public profile (if it's on); only you see your questionnaire answers. You appear in the ranking (players in order of level, overall and by club) once at least five of your results have counted towards your level; signed-in players see it; without signing in only your place shows, on your public profile (if it's on); you can take yourself off it on your profile at any time; a match's result is seen by those who can see the match – a logged match only by the players tagged in it.
How long: until you delete your account. Confirmed results stay with the shared matches, without your name.

Invitations and club alerts

What: who invited whom to which match; which clubs, days and times, and which kinds of match (line-up, indoor or outdoor, vibe, level) you asked to be alerted about.
Why: so players can invite each other to a match by name, and so we only tell you about times that suit you.
Legal basis: performance of a contract.
Who sees it: an invitation – the inviter and the invitee; your club alerts – only you. Players can search each other by name or username – on the Social tab, and to invite someone to a match – never players where there's a block. A search doesn't open a conversation: messages only exist in the chat of a match you share.
How long: invitations until you delete your account; alerts until you switch them off.

Friends

What: whom you asked to be friends, who asked you, and who accepted (and when).
Why: so your friends come first when you invite someone to a match, and so you can see each other's recent results.
Legal basis: performance of a contract; a friendship exists only once you both say yes.
Who sees it: a request and a friendship – only the two of you. Your friend sees, of your confirmed matches, the date, the club, the score and whether you won; not the other players' names. Nobody sees how many friends you have. If you turn someone down, they aren't told, and they can't ring your phone again by asking. A block ends a friendship.
How long: until one of you ends it, or you delete your account.

Groups

What: the names of your groups, who is in them, who invited whom (and when), and which matches were posted to a group.
Why: so you can post a match just for your group, and only its members see it and hear of it.
Legal basis: performance of a contract; you join a group only by accepting an invitation.
Who sees it: a group's name and its members – its members; its invitations – also its leader. Someone invited sees the group's name, how many are in it and who invited them, not who the members are. Someone you blocked, or who blocked you, doesn't see your name on the list.
How long: until you leave, the leader removes you, or the group closes; deleting your account takes you out of every group.

Court booking

What: when you book a club's court in AGON: which court at which club, for when and how long, when you booked, and when you cancelled, if you did. If the club cancels, we tell you.
Why: so the court is yours for that time, the club knows who's coming, and nobody books the same court twice. You pay the court fee at the club: AGON never handles the money.
Legal basis: performance of a contract; only you book, by your own choice.
Who sees it: your booking and your name, the club's verified team, in its court calendar. Other players see only that the court is taken, never by whom. TODO: lawyer – the club's and AGON's roles for court bookings, as for entry fees
How long: 13 months after the booked time, then it's deleted. If you delete your account, your bookings still to come are cancelled and your name is taken off the earlier ones.

Calendar

What: a secret address, yours alone, from which your calendar app fetches your matches (club, time, how many players are still needed), and the scheduled matches of events you've entered (the event and category, the court, the time).
Why: so your matches appear in your phone's calendar and stay up to date.
Legal basis: performance of a contract – only if you subscribe.
Who sees it: anyone who knows the address. Your calendar app (Apple, Google) stores the events under its own terms. You can revoke the address in the Profile tab at any time.
How long: until you delete your account or revoke the address.

Notifications

What: your phone's notification token and platform; your notification settings; a log of which notification we sent, when and why.
Why: to tell you about your matches, open places that suit you and your events (partner invitations, your partner's answer, the draw, a changed match time, the payment deadline, a called-off event). If AGON isn't signed in on any of your phones, we send the notices about your events by e-mail to your account's address; nothing else goes by e-mail. The log lets us keep to at most three invitations a day, and one per match.
Legal basis: performance of a contract. You can turn notifications off in your phone's settings and by category in the app or on the web (dash.agonapp.hu) – except cancelled matches and called-off events, which matter to everyone.
How long: the token until you sign out or delete your account; the log for 30 days.

Blocks and reports

What: who you've blocked; your reports (who or what, the reason, your note); reports about you. A report about a message (a match message, a message to organisers or a training group's message) includes a copy of it, so the moderator can read it even if the message has since been deleted.
Why: player safety, and handling reports of illegal content.
Legal basis: legitimate interest – the community's safety (Art. 6(1)(f)); legal obligation – Articles 16–17 of Regulation (EU) 2022/2065, the Digital Services Act (Art. 6(1)(c)).
Who sees it: only you see your blocks. Reports are seen by you and our moderator. A reported player is never told who reported them. We write about the decision and its reasons to your account's e-mail address: to you if you reported, and to the player the report was about.
How long: blocks until you lift them or delete your account. Reports for TODO: 1 year after they're closed, or until any legal dispute ends. If we remove someone for a serious breach of the rules, we keep a fingerprint of their e-mail addresses (a SHA-256 hash, not the address itself) for TODO: 2 years so they can't sign up again; after that it is deleted automatically.

Bug reports and ideas

What: what you write to us (a bug, an idea, a missing club) and, so we can chase layout problems, your phone's model, its system and the app version. We show you all of it before it is sent. We never ask for or send your location.
Why: fixing bugs and improving the app.
Legal basis: legitimate interest – an app that works (Art. 6(1)(f)).
Who sees it: only us. Never another player.
How long: until it's fixed, at most TODO: 2 years. If you delete your account the message stays, but it is no longer linked to you.

A message from our website

What: if you write to us through the contact form on agonapp.hu: the topic, your name (if you give it), your e-mail address and your message. So nobody can flood us with messages, we keep a keyed hash of your IP address, not the address itself.
Why: to answer you, and to stop mass sending.
Legal basis: legitimate interest – answering your enquiry (Art. 6(1)(f)).
Who sees it: only us. We also receive the message by e-mail at info@agonapp.hu.
How long: 12 months, then it is deleted automatically.

Our website (agonapp.hu)

What: the technical details of your visit (IP address, time, browser) in our host's (Vercel) logs. Our own server fetches the map pictures on the Clubs page from the OpenStreetMap Foundation (United Kingdom), so it never sees your IP address. The website uses no analytics or trackers; its one cookie keeps your light or dark choice, if you change it.
Why: to show the website and keep it secure.
Legal basis: legitimate interest (Art. 6(1)(f)).
How long: TODO: per Vercel's log retention.

Accepting the terms

What: which version of the Terms and this notice you accepted, and when.
Why: to show that our agreement exists.
Legal basis: legitimate interest (Art. 6(1)(f)).
How long: until you delete your account.

Technical logs

What: IP address, time, type of request, error messages – in our hosting provider's logs; for sign-in and address-change requests, the e-mail address too. Also how many times you searched for players in the current hour and day, so that one account can't overload search; that count is deleted after two days.
Why: security, and investigating faults and abuse.
Legal basis: legitimate interest (Art. 6(1)(f)).
How long: TODO: per the Supabase plan's log retention, at most 7 days.

Crash and error reports

What: when the app crashes or runs into an error: what went wrong and where in the app's code, your phone's model, its operating system, the app version, and a random ID that belongs to this installation only. We never send your name, e-mail address, IP address or anything you type into the app.
On the web (agonapp.hu and dash.agonapp.hu): when a page runs into an error: what went wrong and where in the code, your browser and operating system, and the page's address without anything after the question mark. We give your browser no ID, and here too we never send your name, e-mail address, IP address, cookies or anything you type into the page.
Why: to find and fix faults.
Legal basis: legitimate interest – an app that works (Art. 6(1)(f)).
Who sees it: only us. Never another player.
How long: TODO: per the Sentry plan's retention, at most 90 days.

Usage statistics (only if you let us)

What: if you say yes: when you open the app and which of its screens you use (the kind of screen, such as "match", never which one), the app version, your phone's model and operating system, and a random ID that belongs to this installation only and is never linked to your account. We never send your name, e-mail address, IP address, location or anything you type into the app, and there is no screen recording.
Why: to see what players use and where they get stuck, and improve the app accordingly.
Legal basis: your consent (Art. 6(1)(a)); the ID stored on your phone needs it too. We ask when you accept the terms, as a separate, optional box that starts unticked; if you never saw it, the app asks once on a later launch. You can withdraw at any time under Profile → Usage statistics, which doesn't affect what happened before.
Who sees it: only us, in aggregate. Never another player.
How long: TODO: per the PostHog plan's retention, at most 12 months. If you switch it off, sign out or delete your account, the app forgets the ID and your answer and sends nothing more.

On your phone

The app keeps your sign-in (encrypted, in the phone's secure storage: the Keychain on iPhone, protected by the Keystore on Android), your language, your light or dark setting, which home sections you've collapsed and a list of your upcoming matches on your phone, so you can see them without signal. If you add an AGON widget to your iPhone's home or lock screen, the app puts a copy of what it already shows (your next match and its places, your event day, your card, your level, your results, your week, open matches at your clubs), with approved profile photos, into the widgets' shared storage; the widget reads that copy and sends nothing anywhere. Signing out removes them. Your answers to the intro questions (date of birth, name, how you play, your card) stay only on your phone until you sign in; then they go into your account and are deleted from the phone. If the date shows you aren't 16 yet, your answers are deleted and the phone only remembers that the intro stopped there. We use no cookies or advertising IDs; the usage statistics ID goes on your phone only if you let us.

In your browser (dash.agonapp.hu)

On the web, cookies in your browser keep your sign-in, your language, your light or dark choice and the simple view; they're needed for it to work. Your browser's local storage keeps the layout of your Overview cards, whether you've seen the guide and your notifications, and whether you hid the stats column. Signing out removes the sign-in and the layout. None of it is used for tracking or advertising.

What we don't process

Location, contacts, health and training data, gender, payment details. We share nothing with advertisers, and we collect usage statistics only with your consent. If that changes, we update this notice first and ask for your consent where needed.

Who helps us (processors)

Supabase Pte. Ltd. (Singapore) – database, sign-in, servers. Your data is stored in the European Union, in Frankfurt. TODO: data processing agreement; standard contractual clauses, as the processor is in Singapore, part of a US group
Resend (Plus Five Five, Inc., USA) – sends your sign-in code and the e-mails about your events; receives your e-mail address, the code and the notice's text. Messages from our website's contact form reach us through it too. TODO: data processing agreement; transfer mechanism – EU–US Data Privacy Framework or standard contractual clauses
Cloudflare, Inc. – the check before signing in (Turnstile); receives technical features of your browser or the app, never your e-mail address. TODO: data processing agreement; transfer mechanism
Expo (650 Industries, Inc., USA) – relays push notifications and delivers app updates (EAS Update); receives your push token and the notification text, and when updating, the app version and your phone's IP address. TODO: transfer mechanism – EU–US Data Privacy Framework or standard contractual clauses
Apple and Google – deliver notifications to your phone (APNs, Firebase Cloud Messaging).
Kozelo SAS (Sightengine, Paris, France) – checks match photos, profile photos and events' logos and cover images automatically; receives only the image itself and deletes it after the check. As sub-processors it may use cloud providers outside the EU (in the USA). The data processing agreement (DPA) is part of its terms of service, which we accepted when signing up. TODO: transfer mechanism for any processing outside the EU (standard contractual clauses) – lawyer to confirm
Sentry (Functional Software, Inc., USA) – receives crash and error reports; the data is stored in the European Union, in Frankfurt. TODO: data processing agreement; transfer mechanism – EU–US Data Privacy Framework or standard contractual clauses
PostHog, Inc. (USA) – receives usage statistics, only if you allowed them; the data is stored in the European Union, in Frankfurt, and your IP address is not kept. TODO: data processing agreement (PostHog DPA); transfer mechanism
Vercel Inc. (USA) – hosts our website (agonapp.hu) and AGON's web app (dash.agonapp.hu: matches, events, entering, profiles, hosting); its server functions run in Frankfurt. With each request it receives the sign-in session and the IP address. TODO: data processing agreement (Vercel DPA); transfer mechanism

The App Store and Google Play process download data as controllers in their own right. We disclose data to authorities only where the law requires it.

Deleting your account

In the app at the bottom of the Profile tab, on the web (dash.agonapp.hu) at the bottom of Settings: Delete account. It's immediate and final:

matches you host that haven't started are cancelled, and the players are told;
you leave your other upcoming matches, and your place is offered again;
your e-mail address, date of birth, profile, settings, blocks, notification data, match messages, messages to organisers, match photos and profile photo are deleted;
you leave every host team and training group, and your answers to sessions, your attendance and your group messages are deleted;
your waiting requests for a licence or a pass are deleted; what you paid for stays in the issuer's record without your name;
matches already played, and events' entry lists and results, stay with the other players as "Deleted player", with nothing that points to you.

Your reports stay for the period above, because they protect others. Deleted data disappears from backups within TODO: 7 days.

Your rights

Access: ask what we hold about you, and get a copy.
Rectification: edit your profile in the app at any time.
Erasure: in the app, as above.
Restriction and objection: you can object to processing based on legitimate interest.
Portability: on request, we give you your data in a machine-readable format.
Withdrawing consent: switch off showing your age in your profile.

Write to info@agonapp.hu; we reply within one month (in justified cases this can be extended by two months, and we'll tell you).

You can complain to the Hungarian data protection authority (NAIH): 1055 Budapest, Falk Miksa utca 9–11., postal address: 1363 Budapest, Pf. 9., ugyfelszolgalat@naih.hu, naih.hu – or to the authority where you live. You can also go to court, including the court where you live.

Automated decisions

We make no solely automated decisions about you that have legal or similarly significant effects. Match photos are checked automatically; if you think a photo was turned down by mistake, tell us under Profile → “A bug or an idea” and a person will look at it. Your level is calculated automatically (profiling), but it never excludes you from anything or decides for you. A new account can do less until its first match is played (one posted match at a time, fewer invitations, no links in messages): this protects against abuse, and it lifts by itself after the first match. Who gets invited to an open place is decided by simple rules: home club, saved club alerts, the distance between clubs (not where you are), and whether you've played together before.

Security

Your data is stored in the EU (Frankfurt) and travels over encrypted connections. Where a processor outside the EU receives some of it, the safeguards above apply. Database-level rules make sure each player sees only what they're allowed to. Your sign-in is encrypted on your phone, a sign-in code works once and for ten minutes, and before a code is sent an automatic check (Cloudflare Turnstile) keeps robots out. Access is limited to TODO: the two founders. In a data breach we notify NAIH within 72 hours, and you too if the risk is high.

Under 16

AGON is for people aged 16 and over. If we learn an account belongs to someone younger, we delete it. If you notice one, please report it on the player's profile.

Changes

If this notice changes materially, we'll tell you in the app and ask you to accept it again next time you open it.