Privacy Policy

Last updated: 23 October 2026

1. Data Controller

The party responsible for processing personal data in the Boule-Boy app is:

Andreas Spang
Simpert-Kramer-Str. 46
87629 Füssen
Germany

E-mail: service@bouleboy.de

2. Scope

This policy describes which personal data is processed when using the Boule-Boy Android and iOS app, for what purpose, and on which legal basis. It applies to all versions of the app distributed via the Google Play Store and the Apple App Store.

3. What data we process

3.1 Account data

When registering or creating a player account, we process:

• E-mail address (for login and password recovery)
• First and last name (shown in the player list and the pyramid)
• Optional: profile picture (uploaded by the user)

The data is stored at our processor Supabase (see section 6) in a secured database. Passwords are stored as hashes only; plain-text passwords are accessible neither to us nor to Supabase.

3.2 Game-related data

Within a tournament, the following data is created and stored:

• Participant list (linking player account and tournament)
• Game results (date, score, notes)
• Position in the pyramid (row, slot, promotion and demotion history)
• Challenges between players (appointments, status)
• In-app messages between players (e.g. demotion notices)

3.3 Technical data

When syncing with the server, the following technical data is typically processed in the server logs:

• IP address (truncated after processing)
• Request timestamp
• HTTP status code and path
• Authentication token (for session handling)

This data is retained only as long as it is necessary for error analysis and server security (typically ≤ 30 days).

3.4 Spam protection of the public forms

Protected are the places where someone can trigger something without signing in:

• on the public web view (webview.bouleboy.de), submitting a tournament registration and reporting a match result: without that protection, anyone could fill a registration list within seconds;
• creating a club, on this site and in the app. Doing so sends a confirmation e-mail to a freely entered address; without protection this could be used to send mail to other people's inboxes.

We use Cloudflare Turnstile for this. When one of those forms is opened, a script is loaded from Cloudflare; the IP address, browser details and the outcome of the check are transmitted to Cloudflare. Turnstile sets no cookies for this check and in most cases shows no puzzle at all.

In the app the check runs in a small window showing the page bouleboy.de/captcha.html, which contains nothing but the check itself.

Visitors who only look at scores, and app users who never create a club, trigger none of this: the script is loaded only when one of these forms is opened.

3.5 What we do not collect

• No location data (no GPS, no Wi-Fi or cell-tower positioning)
• No contacts from the device's address book
• No advertising IDs, no tracking via ad networks
• No analytics tools such as Firebase Analytics, Google Analytics, etc.

3.6 Online tournament registration

When someone registers for a tournament through the public web view, we store first and last name, e-mail address, optionally phone, club, team and team-mates, a note, and the time of registration. The form points to this privacy notice; whoever registers a minor confirms by submitting that the legal guardians agree. The registration reaches the organising club; its tournament directors receive a daily e-mail digest of new registrations.

3.7 Food pre-orders

If a club offers food for pre-order, we store the name, e-mail address and the chosen items per order. The order can be changed via a personal link; a reminder may be sent by e-mail before the deadline. Only the club's tournament directors see the orders.

3.8 Photos

Player portraits, team photos, snapshots and selfie-station pictures are uploaded by the club or submitted by visitors and shown only after the tournament directors approve them. Whoever uploads a photo confirms that everyone pictured agrees to its publication.

3.9 Per-player privacy levels

Each player (or the club on their behalf) decides separately for photo, full name and date of birth whether it is not collected at all, shown only to the tournament directors, shown on the scoreboard in the hall, or also shown in the public web view. Newly created players start at “scoreboard”: online, only the first name with the last-name initial appears, without a photo.

3.10 Calling a referee

If a club has switched on referee calls, a match can call a referee to its lane via the web view. We store team, lane, time and an optional short note. Only on explicit request is the phone's location sent as well; likewise, the referee can share their location so the match sees where they are. Locations are deleted as soon as the call is done or withdrawn, the remaining details after 30 days.

3.11 Error reports and feedback

If an error occurs in the app, it sends an error report to our server: error message, app version, time and the ID of the signed-in account. Access keys and e-mail addresses are masked when the reports are read. Only the operator can view them.

We occasionally ask for your opinion: in the app after a few days of use (satisfaction with stars and notes), when a club has not created a tournament after some time (“What was missing?”), and for the reason when a subscription is cancelled. Answering is always voluntary. We store the chosen reasons or stars, your note, the club, the account and the time; the operator also receives them by e-mail.

If a new club has not created a tournament after two weeks, it may receive one personal e-mail at the stored address asking what was missing, with a link to a short answer page. No further e-mails of this kind follow.

4. Purposes and legal bases

5. Recipients of the data

Data is shared exclusively with the technical service providers listed in section 6, who act on our behalf. Data is not shared with ad networks, data brokers, or other third parties.

6. Processors

We use the following services on the basis of data-processing agreements:

• Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992: hosts the Postgres database, the authentication system, and the edge functions. Data location: EU (Frankfurt, Germany). Privacy: supabase.com/privacy
• Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA: provides „Turnstile", the spam protection of the public forms (see section 3.4). Processed are the IP address, browser details and the outcome of the check. Data may be transferred to the USA; the transfer is based on the European Commission's standard contractual clauses. Privacy: cloudflare.com/privacypolicy

7. Retention

• Account data: for as long as the player account is active; after a deletion request, within 30 days.
• Game-related data: for as long as the associated tournament is active or archived. For reasons of sporting traceability, game results remain even after an individual player account is deleted, kept in a pseudonymised form (first-name initial + last-name initial).
• Online registrations, food orders and result reports: deleted automatically 12 months after the tournament; for a tournament in the recycle bin after 30 days.
• Backups: a backup is made for each club every night. It is deleted after 30 days; by then, any deletion has also reached the backups.
• Server logs: 30 days maximum.
• App error reports and the e-mail delivery log: 90 days.
• Feedback and satisfaction surveys: 24 months. If a club is deleted, the link to the account and free-text notes are removed the following day; reasons and stars remain without personal reference for evaluation.

8. Your rights

Under the GDPR, you have the right at any time to:

• Access (Art. 15): which data is stored about you
• Rectification (Art. 16): correct inaccurate data
• Erasure (Art. 17): delete account and associated data
• Restriction of processing (Art. 18)
• Data portability (Art. 20): export your data in a machine-readable format
• Object (Art. 21) to processing based on legitimate interests
• Lodge a complaint with a supervisory authority (Art. 77): in Germany, e.g. the Bavarian State Office for Data Protection Supervision (BayLDA).

You can send requests informally to the e-mail address listed in section 1. We respond within the legally prescribed period (usually within one month).

9. Deletion by the user

You can have your account and all linked data deleted at any time in two ways:

1. In the app: under "Account" → "Delete account" (if available in your version).
2. By e-mail: informal request to the address listed in section 1.
3. Through your club: the club administration can create a data export (everything stored, as a file) in the player dialog and remove your personal data; game results are then kept in pseudonymised form.

The deletion is completed within 30 days. Any legally required retention obligations (e.g. tax law, if applicable) remain unaffected.

10. Security

Transmission between the app and the server is exclusively encrypted via HTTPS/TLS. Passwords are never stored in plain text; Supabase uses industry standard methods (bcrypt/Argon2). A local copy of the game data resides on the end device in a SQLite database. This file is accessible only to the app itself.

11. Changes to this privacy policy

In the event of material changes, we will inform you on your next login. The current version is always available at the link registered with the Play Store and App Store listings.

12. Contact

For questions about the processing of your data or to exercise your rights, please contact:

service@bouleboy.de