S
Squadclaim

Legal

Privacy Policy

Last updated: April 20, 2026

1. Introduction

Squad Claim ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at squadclaim.com (the "Service"). This policy applies to all users worldwide, including those in the European Economic Area (EEA), United Kingdom, and Canada.

2. Information We Collect

2.1 Information You Provide

  • Account data: email address, password (stored as a secure hash), display name, phone number.
  • Profile data: player position, location (city), avatar image, headline, bio.
  • Team & competition data: team names, match results, player statistics, competition details.
  • Communications: messages you send through the Service, feedback, and support requests.

2.2 Information Collected Automatically

  • Usage data: pages visited, features used, scroll depth, time on page, clicks.
  • Device data: browser type, operating system, screen resolution, device type.
  • Network data: IP address (used for rate limiting and security, not stored long-term).
  • Cookies & similar technologies: see our Cookie Policy for details.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service.
  • Create and manage your account and player profile.
  • Send transactional emails (verification, password resets, match reminders, RSVP notifications).
  • Display public player profiles, team rosters, and competition standings.
  • Analyze usage patterns to improve features and performance.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations.

4. Legal Bases for Processing (GDPR)

If you are in the EEA or UK, we process your data under these legal bases:

  • Contract: processing necessary to provide you with the Service (account management, team features, statistics tracking).
  • Consent: analytics cookies and push notifications are only enabled with your explicit consent.
  • Legitimate interest: improving the Service, security monitoring, and fraud prevention.
  • Legal obligation: complying with applicable laws and regulations.

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Service providers: hosting (Vercel), database (PostgreSQL via Prisma), email delivery, file storage (UploadThing), and analytics (Google Analytics, Vercel Analytics).
  • Other users:your public profile, team membership, and match statistics are visible to other users as part of the Service's core functionality.
  • Legal authorities: when required by law, court order, or to protect our rights and safety.

6. International Data Transfers

Your data may be processed in Canada and the United States, where our hosting infrastructure is located. For EEA/UK users, transfers are protected by Standard Contractual Clauses (SCCs) or adequacy decisions as applicable.

7. Data Retention

  • Account data: retained while your account is active. Deleted within 30 days of account deletion.
  • Match & statistics data: retained while the associated team exists. Anonymized upon account deletion if part of team records.
  • Analytics data: aggregated and anonymized after 26 months.
  • Security logs: retained for up to 90 days.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Eraseyour personal data ("right to be forgotten").
  • Restrict or object to processing of your data.
  • Data portability: receive your data in a structured, machine-readable format.
  • Withdraw consent at any time for consent-based processing.

To exercise these rights, contact us at privacy@squadclaim.com. We will respond within 30 days.

9. Security

We implement industry-standard security measures including encrypted passwords (bcrypt hashing), HTTPS encryption, rate limiting, CSRF protection, and secure session management. However, no method of transmission or storage is 100% secure.

10. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If we learn we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us personal data, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification.

12. Contact Us

For privacy-related inquiries, contact our data protection team at privacy@squadclaim.com.

If you are in the EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.