Privacy Policy
We take the protection of your data very seriously.
- Data collected: account data, club and team data, as well as usage data
- Purposes: providing Spieltag.Studio, creating social media graphics, and improving the service
- Retention period: generally until the account is deleted or for as long as the data are required for the respective processing purpose
- Rights: access, rectification, erasure
Cookies
Technically necessary authentication cookie for login status and session management.
Technically necessary cookie (NEXT_LOCALE) used to store the selected language. It is used exclusively to display the correct language.
Usage analytics within the application
To improve Spieltag.Studio, we record certain usage events for signed-in users within the application. These may include, for example, creating a club, creating and exporting graphics, viewing certain features, or progressing through onboarding steps. The user ID and club ID may be stored together with the time, type of event and technical context such as platform (web/app), graphic type or feature used. Graphic content, free-text entries, email addresses or payment data are not stored in these analytics events for analysis purposes. These data are used solely to understand how Spieltag.Studio is used, identify usability issues and improve the product. They are not used to create advertising profiles or to track users across other websites or services. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the analysis and improvement of our service. The data are deleted no later than when the associated account or club is deleted.
External services
Our website and web application are provided through Vercel Inc. (USA). When the website is accessed, Vercel processes technically necessary connection and server data required to deliver and securely operate the website.
We also use Vercel Web Analytics to anonymously analyze the use of our public website. This may include pages viewed, referrers, approximate geographic region, browser, operating system and device type, as well as anonymous custom events defined by us. Vercel Web Analytics does not use analytics cookies. Visitors are distinguished using a daily-changing hash generated from the incoming request. Analytics data are not linked to user accounts, user IDs or club IDs.
The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the secure operation of our website and the anonymous analysis and improvement of our public web offering.
Vercel Privacy Notice: https://vercel.com/legal/privacy-notice
For the creation of match announcements, club data (name, logo, player images, date, time, and if applicable, address) is transmitted to Render.com. Render processes this data solely on behalf of Spieltag.Studio.
For away matches, information of the opposing club (e.g. name, logo, address) may be transmitted to Render.com. This data is used solely for generating the match announcement image.
Data Processing Agreement (DPA) of Render.com: https://render-prod-document-center.s3.us-west-2.amazonaws.com/gdpr-dpa-2025.pdf
These entries are processed exclusively for the purpose of generating match reports and transmitted to our service provider OpenAI (USA).
Data Processing Agreement (DPA) with OpenAI: https://ironcladapp.com/public-launch/63ffefa2bed6885f4536d0fe
For AI-powered background removal from player images, we use the fal.ai service provided by Features & Labels, Inc. (USA). When users use the “Remove background” feature, the uploaded image is transmitted to fal.ai and processed there to create a cutout version of the image. The processing is carried out solely to provide this feature.
This may include the processing of player photos. The respective club or authorized user is responsible for ensuring that the persons shown have consented to the use and publication of the images.
The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and, for voluntarily uploaded player photos, Art. 6(1)(a) GDPR (consent).
Since fal.ai is based in the USA, data may be transferred to a third country. fal.ai states that it uses appropriate safeguards for international transfers.
fal.ai Privacy Policy: https://fal.ai/legal/privacy-policy
We use Supabase for authentication, database functionality and file storage. In this context, account, club, team, player and usage data required to provide Spieltag.Studio are processed. The processing is carried out for the provision and operation of the service on the basis of Art. 6(1)(b) GDPR and, insofar as the secure and reliable operation of the platform is concerned, Art. 6(1)(f) GDPR.
Supabase Privacy Notice: https://supabase.com/privacy
We use the payment service provider Stripe Payments Europe, Ltd. (Ireland) for payment processing. In this context, payment information (e.g. name, email address, billing address, and bank or credit card details) is transmitted to Stripe. Stripe may also transfer this data to the United States where applicable. The processing is based on Art. 6 (1) (b) GDPR (performance of a contract).
Processing of Player and Team Data
To create lineups, clubs or their authorized users can store players’ names, jersey numbers, positions, and optional photos within the platform. These data are processed solely on behalf of the respective club and serve the purpose of creating social media graphics (e.g., starting lineup, team roster, matchday posts). The processing is based on Art. 6(1)(b) GDPR (contract performance) between Spieltag.Studio and the respective club. For optional player photos, the club ensures that the individuals concerned have given their consent for publication. Data will not be shared with third parties except for technical service providers used for platform operation (e.g., Supabase, Render.com). The data will be deleted once they are no longer required for the stated purposes or when deletion is requested by the club.
Processing of user input (free text fields)
- Users can enter their own content in free text fields (e.g. “special notes”). Such entries may also contain personal data (e.g. names of players).
- These entries are processed exclusively for the purpose of generating match reports and transmitted to our service provider OpenAI (USA).
- The legal basis is Art. 6 (1) (b) GDPR (performance of contract) and, in the case of voluntary information, Art. 6 (1) (a) GDPR (consent).
- Please only enter information that is necessary for creating the match announcement.
If you have any questions regarding privacy, please contact us at privacy@spieltag.studio