Privacy notice
What happens to the data you leave on dropseet.com and in the dropseet app: what it is, what it is for, how long we keep it and how to ask us to see or delete it.
Who the controller is
The data controller is Fabio Varrenti, Rue Antoine Meyer 37, L-2153 Luxembourg. For any question about your data, write to info@dropseet.com.
What we collect and why
| Where | Data | Why | Legal basis |
|---|---|---|---|
| “Request information” form | name, email, club, role, phone (optional), message | to answer and follow up on your request | pre-contractual steps at your request (Art. 6.1.b) |
| “Try the demo” form | email, club, role, name (optional) | to create your trial team, send your login details and contact you about the trial | pre-contractual steps at your request (Art. 6.1.b) |
| Site statistics | pages visited, source, device, in aggregate form (Google Analytics 4) | to understand which pages are useful and improve them | consent (Art. 6.1.a), only if you accept in the banner |
| Cookie choice | your answer to the banner, stored in your browser | so we don’t ask on every page | technical necessity |
We do not sell data or use it for targeted advertising. The site is not aimed at children under 14.
How long we keep it
- Information requests and demo contacts: up to 24 months from the last contact, then we delete them.
- Trial team (demo): access lasts 14 days; after a further 30 days the instance and all sample data are deleted, unless you decide to continue with dropseet.
- Statistics: up to 14 months, according to Google Analytics settings.
Who processes it
Your data is processed by us and by providers acting on our behalf as processors (Art. 28):
- Supabase (database, servers in the European Union);
- DigitalOcean (application servers and file storage);
- Vercel (website hosting);
- email services for sending emails (demo login details, replies);
- Google (Google Analytics 4, only with your consent).
Some of these providers are based in the United States: transfers take place with the safeguards set out in the GDPR (EU-US Data Privacy Framework or standard contractual clauses).
Cookies
Without your consent the site only uses what it needs to work, including remembering your choice in the banner. Google Analytics is switched on only if you press “Accept”. You can change your mind by clearing the site data in your browser: the banner will appear again on your next visit.
Your rights
You can ask us at any time to access, correct or delete your data, restrict or object to its processing, or receive it in a readable format (Arts. 15–22 GDPR), and withdraw consent to statistics. Write to info@dropseet.com: we reply within one month.
If you believe the processing is not lawful you can lodge a complaint with the Luxembourg authority, where the controller is based (CNPD, Commission nationale pour la protection des données), or with the authority of the country where you live.
The dropseet app
The dropseet app (iPhone and Android) is used by players and parents invited by their club, and by people keeping their own diary in personal mode. For the data below the controller is Fabio Varrenti; team data is covered in the next section.
| What | Data | Why | Legal basis |
|---|---|---|---|
| Account | name, email, password (stored encrypted), profile photo, link to the player (self, parent, relative) | signing you in and showing you only the data that concerns you | contract (Art. 6.1.b) |
| Notifications | the phone’s notification identifier, history of alerts in the bell | reminders to reply to call-ups, alerts when the staff shares something | contract (Art. 6.1.b); turn them off in your phone settings |
| Location | precise location, also with the app in the background, only while you record a match | drawing the map of the areas where you played | consent (Art. 6.1.a), through the phone permission |
| Apple Health | workouts, heart rate, sleep, distance, only if you turn on the connection; the app can save recorded workouts to Health | adding performance data to your matches and profile | explicit consent (Art. 9.2.a), revocable in Settings → Health |
| Personal mode | goals, boots, matches with friends | keeping your personal diary | contract (Art. 6.1.b) |
| Goal card | the photo you choose | removing the background on our server: the photo is not kept | contract (Art. 6.1.b) |
Face ID unlock stays on the phone: the app only receives the result, never your face. Health data is never used for advertising or shared with third parties. The app does no advertising tracking and contains no third-party analytics.
Processors: in addition to those listed above (Supabase, DigitalOcean, email services), notifications go through Google Firebase Cloud Messaging and Apple’s notification service.
Retention: account and personal-mode data are kept as long as the account exists. You can delete it at any time from the app (Profile → Delete account): the account and the linked data are erased, except team data that the club keeps as controller.
Team data and minors
Attendance, replies to call-ups, wellness (TQR, RPE, pain), injuries, ratings, notes and videos are entered by the club, or by you for the club: the club is the controller, and dropseet stores them on its behalf as a processor (Art. 28), showing them only to you, your linked family members and the staff. In the app you only see what the staff decides to share, never your teammates’ data.
Minors: player accounts are activated only by invitation from the club. If the player is below the age of digital consent in their country (14 in Italy, 16 in Luxembourg), the inviting club guarantees that it has collected the consent of the holder of parental responsibility, usually at registration. Parents can link to their child with their own account and ask at any time to see or delete the child’s data, either the club or info@dropseet.com.