EuroLeague

Privacy Policy

Last updated: August 2026

This policy explains what data X1 EuroLeague collects, what it's used for, and what your rights are. This is a direct, specific summary of the data this platform actually collects — not generic boilerplate.

1. What data we collect

Account: name, email, and password (stored encrypted, never in plain text).

Athlete application (optional in most fields, except name, shirt size, and jersey number): country, city, birth date, phone number, preferred foot, 1v1 football experience, and motivation to compete.

Platform usage: technical logs of login and registration attempts (IP address and timestamp), used only to prevent abuse and automatically deleted after the protection window.

Broadcasts: when you broadcast a match through the site, your browser exchanges connection data (WebRTC signaling) directly with the viewer's browser to establish the live stream. This signaling data isn't permanently recorded.

2. What we use this data for

Creating and managing your account, and letting you log in.

Reviewing athlete applications and, if approved, publicly displaying your profile, stats, and ranking position to other logged-in users.

Sending transactional emails: welcome, email confirmation, application approval/rejection, and password reset when requested.

Preventing abuse (excessive login attempts, mass account creation).

3. Who we share data with

We don't sell or share your data with third parties for advertising purposes.

We use the following service providers, who process data on our behalf: Vercel (site hosting), Neon (database), and Brevo (transactional email delivery).

If a match is broadcast via YouTube or Twitch, those platforms process the broadcast data (video/audio) according to their own privacy policies.

4. Cookies

We only use one strictly necessary cookie: the login session cookie (Auth.js), which keeps you signed in. We don't use tracking, analytics, or advertising cookies.

5. Your rights

You can request access to, correction of, or deletion of your personal data at any time by contacting the administration at the email below. We don't yet have a self-service account deletion button — requests are handled manually by an administrator.

6. Retention

We keep your data while your account is active. Security logs (login attempts) are automatically deleted after the anti-abuse protection window.

7. Contact

For any question or request about your data, write to negromonteguilherme@gmail.com.

Notice

This document was drafted based on the data this platform actually collects, but it does not replace a formal legal review. We recommend the administration consult a lawyer before treating this policy as legally complete (LGPD/GDPR).