Privacy Policy

1. Who we are

HandballCore (“we”, “us”) is a sports platform for the handball community — player profiles, club management, live match scoring, and tournament organization — available at handballcore.com. For anything in this policy, you can reach us at support@handballcore.com.

2. What we collect

Information you give us:

• Account details — your name, email address, username, and password (stored in encrypted form; we never see the actual password). If you sign in with Google, we receive your name, email, and profile picture from Google instead.
• Profile information — anything you add to your player profile, such as your playing position, photo, or club affiliations.
• Handball content — clubs you create or join, rosters, match scores and events, and tournament configurations.
• Consent records — the date and time you accepted our Terms and this policy.

Information collected automatically:

• Usage analytics — which pages and features are used, via PostHog, so we can understand what to improve.
• Error reports — if the app crashes or misbehaves, technical details of the failure are sent to Sentry so we can fix it.
• Cookies — we use cookies to keep you signed in (authentication). We do not use advertising cookies.

3. How we use your data

• To run the platform: accounts, profiles, clubs, matches, tournaments, standings, and statistics.
• To send you emails the service requires — such as signup confirmation and password reset.
• To understand usage and improve the product (aggregated analytics).
• To find and fix errors and keep the platform secure.
• To comply with legal obligations, if any apply.

4. What we never do

• We never sell your personal data.
• We never use your data for third-party advertising.
• We never share your personal data with anyone except the service providers listed in Section 5, who process it only on our instructions.

5. Where your data lives

HandballCore runs on established infrastructure providers. Your data is processed by:

• Supabase — database and authentication (where your account and handball data are stored).
• Vercel — website hosting.
• Resend — delivery of service emails (e.g. password resets).
• Google — only if you choose Google sign-in.
• PostHog — usage analytics.
• Sentry — error monitoring.

These providers' servers may be located outside your country (including outside India). By using the platform you consent to this processing, which is protected by our agreements with these providers.

6. Children and players under 18

• HandballCore accounts are for adults: you must be 18 or older to register. We do not knowingly create accounts for, or collect personal data directly from, anyone under 18.
• Players under 18 may appear on the platform only as roster entries — for example a name and jersey number — added by an adult club manager or tournament organizer, who is responsible for having permission to add them.
• If you believe an under-18 person has created an account, or a minor's details appear without permission, email us at support@handballcore.com and we will remove it promptly.

7. Your rights

For any of these, email support@handballcore.com from your account's email address. We respond within 30 days:

• Access — get a copy of the personal data we hold about you, in a commonly used format.
• Correction — fix inaccurate data (most profile data you can edit yourself in the app).
• Deletion — have your account and personal data deleted. Match records that are part of tournament history may be kept in anonymizedform (your name removed) so other people's tournament results stay intact. A self-service delete button is on our roadmap; until then, email works.
• Withdraw consent — stop using the platform and request deletion at any time.

8. How long we keep data

• Account and profile data: for as long as your account exists.
• After deletion: personal data is removed; anonymized match history may be retained (see Section 7).
• Error and analytics data: retained by our providers for limited periods, then deleted or aggregated.

9. Security

All traffic is encrypted (HTTPS). Passwords are stored in hashed form — we cannot read them. Database access is restricted by row-level security rules, and administrative accounts are protected with multi-factor authentication. No system is perfectly secure; if we ever discover a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

10. Changes to this policy

If we make material changes — collecting new kinds of data, using it in new ways, or adding processors — we will update the date at the top and notify you by email or an in-app notice before the changes take effect.

11. Contact

Questions, requests, or complaints about your data: support@handballcore.com. This policy works together with our Terms of Service.