This privacy policy explains which personal data we process on the website players-desk.com and in the mobile app “Player's Desk”, for what purposes, and what rights you have.
A data protection officer is not legally required and has not been appointed. For all privacy requests, please contact us at the email address above.
Users of the app, visitors to the website, communication partners.
Providing the app and the website, running the fantasy game and the leagues, communication between league members, notifications, processing subscriptions, support, security, abuse prevention and compliance with legal obligations.
The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit the site, the server automatically processes the IP address, date and time, page accessed, amount of data transferred, browser type and operating system, and the referring page. This data is used to deliver the site and for security purposes (Art. 6(1)(f) GDPR) and is deleted by the host after a short period. IONOS privacy policy: www.ionos.com/terms-gtc/privacy-policy/
The website does not set cookies, does not use analytics or advertising services and does not embed third-party content. Fonts and the video on the home page are served from our own server; no connection to Google or other providers is established.
League invitations shared via players-desk.com/join contain only the league code. The page redirects to the app and does not store any data.
If you contact us by email, we process your details to answer your request (Art. 6(1)(b) and (f) GDPR). We delete requests once they have been dealt with and no retention obligations apply.
You need an account for the fantasy game. When registering with an email address and password, we store your email address and the password exclusively as a cryptographic hash. With “Sign in with Apple”, we receive a pseudonymous user identifier from Apple and, depending on your choice, your name and your (possibly Apple-relayed) email address. Authentication is handled by our backend provider Supabase (see section 14). For security reasons, the time and IP address of each login are logged.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Your profile consists of your display name, an optional profile picture, your language setting, your favourite players, your notification settings and the time of your last activity. During onboarding we also ask, on a voluntary basis, how you heard about Player's Desk; we use this information only in aggregated form to improve our product. Display name and profile picture are visible to the members of your leagues.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR); for the acquisition source, legitimate interest (Art. 6(1)(f) GDPR).
As part of the game we process the data you generate by playing: your team (roster), purchases and sales, bids, virtual balance, points and their calculation from match events, standings, league memberships, join requests, season history, fan votes and activity entries. This data is visible to the members of the respective league because it constitutes the shared competition. After selling a player we keep the history so that your points remain traceable.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Every league has a chat; you can also comment on activities and add reactions. We store the content, the time, the league and your account as the sender.
Legal basis for providing the chat feature: performance of a contract (Art. 6(1)(b) GDPR).
If you set a profile picture or a league image, the app accesses only the photos you select and only after your approval; it does not access your entire photo library. The images are stored in a storage area at our backend provider and can be retrieved by the members of your leagues via a non-guessable address. You can change or remove images at any time in the app.
Legal basis: consent (Art. 6(1)(a) GDPR) for photo access; performance of a contract (Art. 6(1)(b) GDPR) for display.
If you allow notifications, we store a push token for your device. We use it to send you updates about matches of your players and favourites, the transfer market, league activities, chat messages and reminders. Delivery is handled by the Expo push service (Expo, Inc., USA) and then by the Apple Push Notification Service. You choose which notifications you receive in the app; you can disable them entirely in your device's system settings, after which we delete the token.
Legal basis: consent (Art. 6(1)(a) GDPR).
Subscription purchases are processed entirely through the Apple App Store. We do not receive any payment details. To manage entitlements and trials we use RevenueCat (RevenueCat, Inc., USA). RevenueCat receives a pseudonymous app user ID that we link to your account, as well as the purchase history, product and transaction identifiers, subscription status, term and store country from the store. We need this data to unlock Pro features and to correctly reflect subscription states (active, cancelled, trial).
RevenueCat privacy policy: www.revenuecat.com/privacy
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Via “Report a problem” or by email you can report errors and violations to us. We process your message, your account ID and – if you provide them – technical details such as app version and device in order to handle the case. If the report concerns content of other users, we may view the reported content (see section 8).
Legal basis: performance of a contract and legitimate interests (Art. 6(1)(b) and (f) GDPR).
Information about professional players, matches, tournaments, rankings, statistics and market values derived from them is publicly available sports data that we obtain from sports data providers. It concerns the athletes as public figures in their professional capacity and is not data of our users.
We use the following service providers that process data on our behalf:
Data processing agreements pursuant to Art. 28 GDPR are in place with all processors. We do not pass on your data to third parties for advertising purposes.
Where service providers process data outside the EU/EEA (in particular Expo, RevenueCat and Apple in the USA), we base the transfer on the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission) where the provider is certified, and otherwise on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).
With regard to your personal data, you have the following rights against us:
To exercise these rights, contact info@players-desk.com. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Player's Desk is intended for persons aged 13 and over. We do not knowingly collect data from younger children. If we learn that an account has been created without the required consent, we will delete it.
All connections between the app, the website and our systems are TLS-encrypted. Passwords are stored only as hashes. Access to data is restricted by database-level access rules so that users only see the data of their own leagues. Access by us is limited to authorised persons and to the purposes described in this policy.
We update this privacy policy when our data processing or the legal situation changes. The current version is always available at players-desk.com/policy. We will inform you of significant changes in the app.