Privacy policy
Termin is a private web application that a recreational football group uses to plan weekly sessions, collect answers, build teams, keep score and keep statistics. This policy explains what personal data Termin processes about players and members, why, and what your rights are.
1. Who is responsible
The controller is Miroslav Mrković, who runs this Termin workspace for the group. Contact: termin@mrkovic.com. There is no data protection officer, because the group is not required to appoint one.
2. What we process
| Data | Where it comes from | Why |
|---|---|---|
| Email address and account (sign-in times, role) | An organizer invites you | Signing in and sending session emails |
| Player name, optional full name or nickname, playing position | Organizers | Identifying you in the group, teams and results |
| Your answers (playing, tentative, not playing), when and how you gave them | You, or an organizer for you | Planning the session and building teams |
| Match records: teams, games played, goals, assists, results | The scorekeeper and organizers | Scores, standings and statistics |
| Skill estimates calculated from results | Calculated by Termin | Building balanced teams (see section 4) |
| Messages and comments you post on a session | You | Coordinating the session; everyone in the group sees them. Only organizers can email a message. |
| Organizer notes about a player | Organizers | Organizing the group; never shown to players |
| Email delivery records (type, status, time) | Termin | Avoiding duplicate emails and fixing delivery problems |
| Technical logs (request ID, error codes, time) | Termin servers | Security and fixing errors; logs contain no PINs, links, notes or email content |
We do not process special categories of data (such as health data). If a player leaves a game injured, Termin records only that they left the game, not why.
3. Legal basis
We rely on the group's legitimate interest in organizing its sessions fairly and keeping its results (GDPR Article 6(1)(f)). We have weighed this against your interests: the data is limited to what the group needs, it stays inside the group, nothing is used for advertising or sold, and you can object or opt out of emails at any time (section 8).
4. Skill estimates
Termin estimates each player's skill from game results so the organizers can suggest balanced teams. The estimate is visible only to organizers, organizers always decide the teams, and it has no legal or similarly significant effect on you, so it is not an automated decision under Article 22. You can ask the organizers for your own estimate at any time.
5. Who can see your data
- Organizers see everything listed in section 2.
- Members of the group see player names, answers, teams, results, statistics, and the messages and comments posted on sessions. They do not see skill estimates, organizer notes or email addresses.
- The scorekeeper of a session sees that session's teams and scores through a PIN-protected link.
- Session recap images (results and top scorers) can be emailed to players and shared by members.
6. Services we use
These providers process data only on the group's instructions, under their data processing agreements:
- Supabase (database and sign-in), hosted in London, United Kingdom. The UK has an EU adequacy decision.
- Resend (email delivery), sending from its EU region (Ireland).
- Vercel (web hosting). Requests may be processed outside the EU, including in the United States, under the EU–US Data Privacy Framework and standard contractual clauses.
The Directions link opens Google Maps only when you tap it. Organizers look up venue addresses with OpenStreetMap; no player data is sent there.
7. How long we keep it
- Email delivery records: 90 days.
- Answer links in emails: they stop working when the session ends. Unsubscribe links work for 180 days.
- Your account and email address: until you leave the group or ask for removal.
- Match history and statistics: for as long as the group keeps its records. If you ask for erasure, your account and email address are deleted, and your name in past results is replaced by a neutral label, so that other players' results stay correct.
8. Your rights
You have the right to access your data, to get a copy in a portable format, to have it corrected or erased, to restrict its use, and to object to processing based on legitimate interest. Signed-in members can download their own data (Download my data) and manage emails under Email preferences, both in Settings. For anything else, contact the controller (section 1); we answer within one month. You can also complain to a data protection authority, in Slovenia the Information Commissioner (ip-rs.si), or the authority where you live.
9. Emails
If you have an account, you may receive session invitations, lineups, organizer messages and session recaps. Each email has an unsubscribe link for its type, and you can change every type under Email preferences in Settings. Emails contain no tracking pixels, and links are not tracked. An invitation button opens a confirmation page; your answer is saved only when you tap Confirm, so that email security scanners cannot answer for you.
10. Cookies and storage on your device
Termin uses only what it needs to work: sign-in cookies, a cookie that remembers your selected group, and, on the scorekeeping device, local storage that keeps unsent goals while offline. There are no analytics, advertising or third-party tracking cookies, so no cookie banner is needed.
11. Security
All traffic is encrypted (HTTPS). Every group's data is isolated in the database, scorekeeper PINs are stored only as hashes, and email answer links are signed, limited to one player and one session, and never sign anyone in.
12. Changes
If this policy changes, the date at the top changes. Significant changes are announced to members.