Privacy Policy

1. Introduction

Welcome to Sport Calculator. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we handle your data when you use our website, create an account, or purchase a subscription.

2. Information We Collect

We collect and process the following types of information:

• Usage Data (through Vercel Analytics)
• Technical Data (browser type, device information)
• Cookies and Similar Technologies
• Email Address (when you subscribe to our newsletter or create an account)
• Account Registration Data (email address, full name, and password when you create an account)
• Payment and Subscription Information (processed by Stripe; we do not store your payment card details)
• Authentication Session Data (secure tokens and cookies to maintain your logged-in session)

3. How We Use Your Information

We use your information for:

• Website optimization and performance monitoring
• Analytics and statistics
• Providing personalized advertising
• Improving our calculators and services
• Managing your user account and providing account-related services
• Processing payments and managing subscriptions
• Providing customer support related to your account or subscription

4. Analytics, Advertising, and Service Providers

We use the following services:

• Vercel Analytics - for website performance and usage statistics
• Third-party advertising partners - for displaying relevant advertisements
• Brevo (Sendinblue SAS) - for email newsletter management and distribution
• Supabase Inc. - for user authentication and database services
• Stripe, Inc. - for payment processing and subscription management

5. Newsletter and Email Communication

If you subscribe to our newsletter, we collect and process your email address for the purpose of sending you updates about fitness tips, calculator features, and related content.

Legal Basis

We process your email address based on your explicit consent (GDPR Art. 6(1)(a)). You provide this consent when you voluntarily enter your email address and subscribe to our newsletter.

Service Provider

We use Brevo (formerly Sendinblue), operated by Sendinblue SAS, a French company, to manage our newsletter subscriptions. Your email address is stored on Brevo's servers located in Germany, ensuring full GDPR compliance.

Data Retention

We retain your email address for as long as you remain subscribed to our newsletter. You can unsubscribe at any time using the unsubscribe link provided in every email, or by contacting us directly.

Your Rights Regarding Newsletter Data

• Withdraw your consent and unsubscribe at any time
• Request access to your stored email data
• Request deletion of your email from our newsletter list
• Request information about how your data is processed

6. User Account and Authentication

When you create an account on Sport Calculator, we collect and process certain personal data to provide you with account-related services and features.

Data Collected During Registration

• Email Address: Required to create your account and for account verification
• Full Name: Optional, used to personalize your experience
• Password: Required for account security; stored only in securely hashed form (we cannot see your password)

Authentication Service Provider

We use Supabase Inc. to manage user authentication. Supabase is a US-based company that provides secure authentication infrastructure. Supabase is GDPR compliant and implements appropriate safeguards for international data transfers, including Standard Contractual Clauses (SCCs).

Session Cookies

When you sign in, we use secure authentication cookies to maintain your session. These cookies are essential for keeping you logged in and providing a seamless experience across pages. They are automatically deleted when you sign out or after a period of inactivity.

Legal Basis

We process your account data based on contract performance (GDPR Art. 6(1)(b)). Creating an account constitutes entering into a service agreement, and processing your data is necessary to provide the account services you requested.

7. Payment Processing and Subscriptions

If you purchase a Supporter subscription or Day Pass, your payment is processed by Stripe, Inc. We do not have access to or store your full payment card details.

Payment Processor

We use Stripe, Inc., a PCI DSS Level 1 certified payment processor, to handle all payment transactions. Stripe is the highest level of certification in the payments industry and ensures your payment data is handled with the strictest security standards. For more information, please see Stripe's Privacy Policy.

Data Processed by Stripe

• Payment card details (card number, expiration date, CVV)
• Billing address and email
• Transaction history

Important: Your payment card details are transmitted directly to Stripe and are never stored on our servers. We only receive a confirmation of payment and a unique customer identifier from Stripe.

Subscription Data We Store

To manage your subscription, we store the following information in our database:

• Stripe customer ID (a unique identifier, not your card details)
• Subscription status (e.g., active, canceled, expired)
• Subscription type (Day Pass, Monthly, or Yearly)
• Billing period start and end dates

Legal Basis

We process payment and subscription data based on contract performance (GDPR Art. 6(1)(b)). Processing this data is necessary to fulfill your subscription purchase and provide the associated services.

8. Account Data and Management

Profile Data Stored

Your account profile includes:

• User ID (unique identifier)
• Email address
• Full name (if provided)
• Stripe customer ID (if you have purchased a subscription)
• Account creation and last update timestamps

Updating Your Information

You can update your profile information at any time through your account dashboard. This includes changing your name and email address. Email changes require verification for security purposes.

Account Deletion

You have the right to delete your account at any time. When you delete your account:

• Your profile data is permanently deleted from our database
• Any active subscriptions are automatically canceled
• Your authentication data is removed from Supabase
• This action cannot be undone

To delete your account, go to your account dashboard and use the "Delete Account" option in the settings section.

Data Retention

We retain your account data for as long as your account is active. If you delete your account, your data is permanently removed. We may retain certain anonymized data for analytics purposes, which cannot be traced back to you.

9. Your Rights

You have the right to:

• Access your personal data
• Request correction of your personal data
• Request deletion of your personal data
• Object to processing of your personal data
• Request restriction of processing your personal data
• Request transfer of your personal data (data portability)
• Withdraw consent at any time
• Delete your account and all associated data

10. Data Security

We implement appropriate security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Our website is hosted on Vercel's secure infrastructure with SSL/TLS encryption
• User passwords are hashed using industry-standard algorithms and cannot be viewed by us
• Payment processing is handled by PCI DSS Level 1 certified Stripe
• Authentication sessions use secure, encrypted cookies
• Database access is protected by Row Level Security (RLS) policies

11. International Data Transfers

Your personal data may be processed and stored in different locations depending on the service:

Newsletter Data (Brevo)

Newsletter data is stored by Brevo on servers located in Germany within the EU/EEA.

Authentication Data (Supabase)

User authentication and database services are provided by Supabase Inc., headquartered in the United States. Supabase maintains GDPR compliance through the use of Standard Contractual Clauses (SCCs) for data transfers and implements appropriate technical and organizational measures to protect your data.

Payment Data (Stripe)

Payment processing is handled by Stripe, Inc., headquartered in the United States. Stripe is certified under the EU-US Data Privacy Framework and maintains GDPR compliance through Standard Contractual Clauses and Binding Corporate Rules. Stripe is also PCI DSS Level 1 certified.

Website Hosting (Vercel)

Website hosting is provided by Vercel with data centers in various global locations. Vercel implements appropriate safeguards for international data transfers.

All our service providers are contractually bound to protect your data and comply with applicable data protection regulations.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the personal data we collect, use, and disclose about you
• Right to Delete: You can request deletion of your personal data, subject to certain exceptions
• Right to Opt-Out: You have the right to opt-out of the sale of your personal information. Please note that we do not sell your personal information to third parties
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise these rights, please contact us at jonas@sport-calculator.com

13. Contact Information

If you have any questions about this Privacy Policy, please contact us at: jonas@sport-calculator.com

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.