This Privacy Policy explains how My Sports Collections (the "App") collects, uses, and protects your personal data. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for your personal data is:
- Léo Harold, sole trader (micro-entrepreneur)
- SIRET: 98193520800018
- Address: 81 rue du Temple, 75003, Paris, France
- Contact: contact@mysportscollections.com
2. What Data We Collect
We collect only the data necessary to operate the App:
Account data - Email address - Username - Password (stored encrypted by our authentication provider; we never have access to it in clear text) - Date of birth (used only to verify you meet the minimum age requirement and to comply with advertising rules for minors; it is never shown to other users)
Profile data - Full name (optional) - Biography (optional) - Profile picture / avatar (optional) - Favorite sports (optional)
Content you create - Photos of your collectible items - Item descriptions and attributes (brand, club, player, season, year, etc.) - Teams you create
Interaction data - Likes you give to items and teams - Users you follow and who follow you - Feedback you send us (bug reports, suggestions)
Technical data - Server logs generated by our hosting provider (including IP address) for security and reliability - Advertising identifiers processed by our advertising provider (see Section 5)
We do not collect geolocation data, and we do not use analytics or crash-reporting tools.
3. Why We Use Your Data and Legal Basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and managing your account | Performance of a contract |
| Displaying your profile, items, and teams to other users | Performance of a contract |
| Enabling social features (likes, follows) | Performance of a contract |
| Responding to your feedback and support requests | Legitimate interest |
| Ensuring security and preventing abuse | Legitimate interest |
| Displaying advertising | Consent (where required) / legitimate interest |
4. Who Can See Your Data
Your username, avatar, biography, favorite sports, items, and teams are public within the App and visible to other users. Your email address is never shared with other users.
5. Third Parties and International Transfers
We share data only with service providers necessary to run the App:
Supabase (hosting, database, authentication, storage) Your account, profile, and content data are stored in the European Union (Ireland). Data therefore remains within the EU.
Google AdMob (advertising) When advertising is enabled, AdMob may process your device's advertising identifier and technical data to serve ads. Google may transfer this data to the United States. These transfers are governed by appropriate safeguards, including the EU-U.S. Data Privacy Framework and Standard Contractual Clauses. Where required, we will ask for your consent before serving personalized ads, through a consent management platform.
Anthropic (item authentication feature) When you use the shirt authentication feature, only the brand and product code of the item are sent to Anthropic's API for analysis. No personal data (no name, email, or account information) is sent.
We never sell your personal data.
6. How Long We Keep Your Data
We keep your personal data for as long as your account is active. When you delete your account, your data is permanently and immediately deleted from our systems, including your profile, items, teams, likes, and follows. This action is irreversible.
Server logs are retained by our hosting provider for a limited period for security purposes.
7. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data (you can edit most data directly in the App)
- Erase your data (you can delete your account at any time from the App menu)
- Object to or restrict certain processing
- Data portability
- Withdraw consent at any time, where processing is based on consent
To exercise these rights, contact us at contact@mysportscollections.com. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
8. Children
The App is not intended for children under 15 years of age. By creating an account, you confirm that you are at least 15 years old. If we become aware that we have collected data from a child under 15 without appropriate consent, we will delete it.
9. Data Security
We take reasonable technical and organizational measures to protect your data, including encryption in transit, access controls, and row-level security on our database. However, no method of transmission over the internet is completely secure.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated within the App. The "last updated" date at the top reflects the latest version.
11. Contact
For any question about this Privacy Policy or your personal data, contact us at: contact@mysportscollections.com