Privacy

Without an account

Your clubs, squads, match details and images stay in your browser (in its local storage). They are never sent to us. Graphics are made in your browser too.

There are no analytics, no advertising and no tracking cookies. Fonts are served from teamsheet11.com, not from anyone else.

Who is responsible

teamsheet11 is run by enkelt.design (CVR 45871290), Denmark, who is responsible for your data (the data controller). Questions about your data go to [email protected].

With an account

An account is optional. If you make one, we store:

• your email address and name, and a hashed password if you use one
• if you sign in with Google, the name, email address and profile picture link Google shares with us
• your clubs, squads, match details and design settings
• the crests and photos you upload
• for each session, when it started, your IP address and your browser's name, to keep the account secure

We use this only to provide the account: signing you in, saving your clubs, and sending the emails it needs (confirming your address and resetting your password). We don't sell it, we don't use it for marketing, and there are no newsletters.

The legal basis is GDPR article 6(1)(b), providing the service you asked for, and article 6(1)(f), our legitimate interest in keeping it secure, such as limiting sign-in attempts.

Where it is kept

The website, the database and uploaded images are on Hetzner servers in Germany. Account emails are sent through Amazon Web Services in Frankfurt, Germany. Both act only on our instructions (they are our data processors). Signing in with Google is covered by Google's own privacy policy.

If you import a Danish club from DBU, our server looks up the club name you type on dbu.dk's public results pages. DBU sees a request from our server, not from you, and nothing about you is sent.

Uploaded images can be opened by anyone who has their exact link. The links are long and random, but don't upload anything private.

Cookies

There are two cookies. One remembers whether you read the site in English or Danish, for a year. The other is the sign-in cookie, which the account needs to work; it is removed when you sign out. There are no others.

How long it is kept

Until you delete your account. Deleting it on the account page removes the account, your saved clubs and your uploaded images at once. An account whose email is never confirmed is removed after a week. Copies in database backups are gone within three days. Server logs, which include IP addresses, are kept briefly to stop abuse and are overwritten automatically.

Your rights

You can see, correct, download or delete your data, and object to how it is used. Most of this you can do yourself on the account page. For anything else, email [email protected] and you'll get an answer within a month.

If you're unhappy with how we handle your data, you can complain to Datatilsynet, the Danish data protection authority.

Open source

teamsheet11 is open source, so you can check what it does. Read the source code.