1. Data controller
Duarte Branco Mole, trading as SportSpot, Lisboa, Portugal, is the controller of the personal data processed on this platform. Contact for any privacy question or request: DJ@sportspot.live.
2. Data we collect, and only what we need
• Account: name, email and sign-in method (passwords are stored only as a secure hash by our authentication provider); phone only if you add it. • Online bookings: venue, court, date, time, amount, status and a payment reference. • Court requests: name, email, optional phone, date, time, group size and your message. • Messages and suggestions: what you type into the contact, venue suggestion, venue listing or venue claim forms. • Runs waitlist: name, email and, if you choose, WhatsApp number, area, level and preferred days. • Pickup games: your first name and the games you host or join (shown publicly on the game). • Statistics: anonymous counts of page views and actions (event, page and venue only — no IP address, no cookies, no identifiers). • Location: only when you tap “Near me”; it is used in your browser to sort courts and is never sent to us or stored.
3. Purposes and legal bases
Providing your account, bookings, payments and refunds (contract, Art. 6(1)(b) GDPR); forwarding court requests, organising Runs and pickup games, and answering messages (steps you asked for, Art. 6(1)(b), and legitimate interest, Art. 6(1)(f)); keeping invoicing and accounting records (legal obligation, Art. 6(1)(c)); keeping the service secure and measuring anonymous demand per venue (legitimate interest). We do not use your data for advertising and we do not sell it.
4. Who receives data
• The venue you book or request: your name, contact details and booking or request details. • Stripe Payments Europe: payment processing and fraud prevention. • Resend: sending the emails about your requests and bookings. • Our technical providers acting as processors: hosting (Lovable), database and authentication (Supabase). • Content providers your browser contacts directly when you view maps and photos: OpenStreetMap and Esri (map tiles), Google (venue photos from Google Maps) and Wikimedia Commons. They receive your IP address to deliver the content. Some providers may process data outside the EEA under the European Commission's Standard Contractual Clauses or an adequacy decision.
5. How long we keep data
Account data: while your account is active; deleted on request. Booking and payment records: 10 years, as required by Portuguese tax law. Court requests, messages, venue leads and claims: up to 2 years. Runs waitlist: until you ask to be removed or Runs end. Pickup games: removed 90 days after the game. Anonymous statistics contain no personal data.
6. Your rights
You can ask to access, correct, delete, restrict or object to the processing of your data, and to receive it in a portable format. Email DJ@sportspot.live or use the contact page; we reply within one month. You can also delete pickup games you created and leave games yourself.
7. Complaints
You can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt).
8. Cookies
We only use storage that is strictly necessary for the site to work. See the Cookie Policy for the full list.
9. Changes
We will update this page if our processing changes, and show the date of the latest version at the top.