Back to Miss Deportes
Privacy policy
Draft pending legal review.
Who is responsible
The data controllers are Iván Bazar Herrera y Jorge Meca Miñarro, owners of Miss Deportes, who decide jointly on the use of data (joint controllers, art. 26 GDPR). You can contact either of them at the privacy contact: soporte@missdeportes.com.
What data we keep
Account data: name, username (@user), email, password (only its encrypted hash, never plain text), gender (optional), birth year (year only, to check the minimum age), phone (optional, to verify the account) and profile photo (optional). Location: the usual area you choose (and an optional second one); we do not track your position. Activity: matches, results, level (ELO), ratings, per-match chat messages, match photos, workouts and routines, friends and groups, favourite sports and venues, competitions, notifications and browser push subscription if you enable it. Security: sessions (cookie), IP and date of emails sent (30 days at most, to curb abuse), moderation action logs and aggregate usage events (sign-up, join, play, repeat) to measure whether the app works.
Why and legal basis
To provide the service you ask for (matching you, computing your level, notifying you about your matches): contract. Security, abuse prevention and moderation: legitimate interest. Aggregate usage measurement: legitimate interest. Phone, photo and area location: your consent, which you can withdraw at any time. No advertising, no commercial profiling, no automated decisions with legal effects: the level is only an indicative estimate.
Approximate location
When you sign up you drop a pin on a map. We only store that point rounded (about 1 km precision) and, if you wish, the name of the town or area; never your street or house number. "Use my location" reads your position once, only when you press the button, and the exact position is not stored. To search places we use an external place-search provider through our server (it does not see your account). You can change your area at any time in Settings.
GPS routes and activities
If you record or import an activity (GPS, GPX, TCX or FIT) we store the route, time, distance and derived stats, only after your explicit consent and to show your history and goals. Activities are private by default; if you share one, others see the trimmed route (start and end hidden, 300 m by default). You can delete any activity (route and photos are deleted) and, if you delete your account, all your routes are erased. They are included in Settings > Export my data. Web recording only works with the app open and the screen on.
Match chats
A match chat is visible only to the people taking part in it. If you leave, are removed or are not accepted, you lose access. Blocked users cannot see you or be seen in your messages.
Who it is shared with
Other users see what you mark as public on your profile (name, username, photo, level and public stats) and what happens in matches you take part in. We use a hosting provider and an email provider (and SMS if enabled) as processors, under contracts that require them to protect the data: Hetzner Online GmbH (hosting, servers in the EU), Cloudflare, Inc. (DNS, security and email forwarding; transfers covered by the EU-US Data Privacy Framework) and the email-sending provider configured (Resend or Brevo). If SMS verification is enabled, the SMS provider too. We do not sell your data or share it for advertising.
How long we keep it
While you have the account. If you delete it, your personal data is erased or anonymised immediately; only results of matches already played are kept, without your name, so other people's history is not altered. Moderation records may be kept up to 12 months.
Your rights
You can access and download your data (Settings > Export my data), correct it, delete your account (Settings > Delete my account), object, restrict processing and ask for portability by writing to soporte@missdeportes.com. If you think we did not answer properly you can complain to the Spanish Data Protection Agency (aepd.es).
Minors
Miss Deportes is for people aged 14 or over (the minimum age in Spain to consent to data processing). If you are between 14 and 17, use the app with your guardians' knowledge, do not share contact details in chat and always meet at public facilities. If we find an account of someone under 14, we will delete it.
Security
Salted password hashes, HttpOnly session cookies, rate limits on attempts and sends, and backups encrypted in transit. If a breach affects you, we will tell you.