Privacy Policy

Depending on how you use the website and the apps, we process:

• Account data — your email address, display name, the account type you pick at signup (fan, player, coach, club staff, other), your year of birth, your language preference, an optional profile picture (website) and a record of which version of this policy you accepted and when. This is stored with our authentication and database provider (Supabase).
• Sign in with Google or Apple — if you choose one of these, we receive the email address of that account and, where you allow it, your name (Google also sends a profile-picture link). With Apple you can hide your real address: we then only get Apple’s relay address. Apple sends your name only the first time; the app keeps it on your phone and offers it as your display name. We never receive your Google or Apple password.
• Usage data — the teams, players and leagues you follow and the order of your MyTIB blocks, your reactions, the roadmap ideas you submit or vote on, your predictions in the prediction game, your votes in fan polls, and which news links you open while signed in. When you react or comment, we also log that action against the post for up to 90 days to rank the feed.
• Community content — your comments and replies, @mentions, reactions, the members you block and the reports you make (see “Comments, reactions and moderation”).
• Notification data — the push token of each device on which you allow notifications, its platform and app version, and your notification choices (see “Push notifications”).
• Sporting statistics — the names and game-by-game basketball statistics of players and coaches, including players in youth competitions. Most of this is imported from public competition sources.
• Technical data — an essential login cookie, a language-preference cookie and, if you vote in a fan poll without an account, a cookie that keeps it to one vote per device (one year); aggregated analytics about how the website is used; and, for security, the IP address and browser or device of your sign-in sessions, recorded by our authentication provider.

Both apps use the same account as the website: anything you follow, set or post in one is the same in the other. The TIB app works without an account for scores, the feed, games and Ask TIB; following, reacting and commenting need one. The apps contain no advertising, no third-party analytics or tracking tools, and they do not use your location, contacts, photos or camera. The few display settings that only matter on your phone (such as collapsed blocks) stay on your phone.

TIB Club is a tool for clubs. What a club records in it about its teams and members — squads, the club agenda, attendance, roles, call-ups — is processed by us on behalf of that club, under a data-processing agreement: for that data the club is the controller and decides who sees what and how long it is kept (attendance, for example, is deleted after 12 months unless the club chooses otherwise). Questions about your club data go to your club first; we help the club answer them.

Comments, replies and reactions are public: other people see them together with your display name. When you @mention a member, they get a notification. On the website, signed-in members can also take part in live game chats and send direct messages, which only the two members in the conversation can read. Direct messages pass the same automated check as comments; one that fails it is neither sent nor stored.

• Automated moderation — before a comment, chat message or roadmap idea is published, its text is checked automatically: first against our own list of blocked words and patterns, then by an AI model that looks for abuse, hate, harassment and similar content. Only the text is sent to the AI service, not your account details. A message that fails the check is not published; you can rephrase it or contact us if you think the check got it wrong. The check decides only whether that one message appears; it has no other consequence for you.
• Human moderation — our moderators can remove comments and, for repeated or serious abuse, suspend an account from posting.
• Reports — when you report a comment, we store the report, the reason and who made it, so a moderator can review it. The member you report is not told who reported them.
• Blocks — when you block a member, we store that choice. You no longer see their comments and they can no longer notify you; they are not told. You can unblock them at any time in your profile.

Push notifications are only sent if you allow them on your device. When you do, we store that device’s push token (a technical address for your device issued by Apple or Google), the platform and the app version, linked to your account. Your choices are stored too: which teams, leagues, players and games you want to hear about and when, which social notifications you want (reactions, replies, mentions, new followers, messages), a pause and your quiet hours together with your time zone.

To deliver a notification to the apps, we send the push token and the text of the notification to our push delivery service (Expo), which passes it to Apple Push Notification service or Google Firebase Cloud Messaging. Notifications in your web browser go through your browser’s own push service. When you sign out on a device, its token is removed; you can also switch notifications off at any time in your phone’s settings or in the app.

Ask TIB answers questions about the statistics. Your question is sent to an AI model provider, which works out what you are asking; the numbers in the answer come from our own box scores. We send only the question — no name, email or account details — and we do not store your question in our database. On the website the question is part of the page address (/search?q=…), so, like any page address, it can appear in our hosting logs, which are kept for a short time, and in website analytics if you accepted analytics cookies.

To prevent abuse, Ask TIB answers a limited number of questions per hour from the same network. To count them we store a keyed, one-way hash of your IP address — never the address itself — and delete it once the hour is over, within a day at the latest.

• Ideas and feedback — an idea or bug report you submit appears on the public roadmap with its text. When you send it from the app, we also store, visible to our team only, the app version, the device model and operating-system version and the screen you sent it from, so we can reproduce a problem and follow up with you. When we change its status or reply, you get a notification.
• Tester programme — if you sign up to test the apps before their public launch, we store your email address, your platform (iPhone or Android), the team or league you follow, your role (for example fan, player, parent, coach), your place on the waiting list and, if you invite others with your share link, who joined through it. We use this only to invite testers in waves and to send the invitation and test links. When the tester programme ends, we delete these sign-ups; you can ask us to remove yours earlier.
• Correction reports — the “Report a correction” form on player, team and game pages stores your message, an optional email address (deleted as soon as the report is closed) and a one-way hash of your IP address to limit abuse, which is cleared after two days. We never keep your IP address itself.

• Your account, usage and community data, notifications and Ask TIB: to provide the service you asked for (performance of a contract) and, for the consent you give at signup, your consent.
• Year of birth: to check that you are old enough to have an account (our legal obligation under Article 8 of the GDPR and our legitimate interest in protecting minors).
• Moderation, reports, blocks, rate limits and security logs: our legitimate interest in keeping the platform safe and free of abuse, and our legal obligations as a platform that hosts content.
• Feed ranking, app context sent with feedback and the tester programme’s waves: our legitimate interest in improving the service and following up with you; signing up as a tester is voluntary and you can withdraw at any time.
• Sporting statistics: our legitimate interest (and the public interest) in recording and presenting basketball competition results, balanced against the rights of the individuals concerned.
• Push notifications and analytics cookies: your consent, which you can withdraw at any time.

Minors: some players in youth competitions are children. We publish only sporting-performance data already made public by the competitions themselves, and we do not knowingly collect any other data about children. A parent, guardian or the player can ask us to remove or correct a player’s data at any time (see “Your rights”).

We do not sell your data and we do not share it for advertising. We rely on a small number of processors, each bound by a data-processing agreement:

• Supabase — authentication and database (EU region).
• Vercel — hosting of the website and the apps’ server (EU region) and aggregated website analytics.
• Expo — delivering push notifications to the apps, through Apple Push Notification service and Google Firebase Cloud Messaging.
• Resend — sending account and digest emails.
• Sanity — storing editorial and player/team content.
• Google — optional “Sign in with Google”, and Google Analytics on the website, only if you accept analytics cookies.
• Apple — optional “Sign in with Apple” in the iPhone app.
• Anthropic and Groq — AI models that answer Ask TIB questions (question text only) and check comments, messages and roadmap ideas before they are published (text only).
• Cloudinary — image delivery.

• Account data, follows, notification settings and blocks: as long as your account exists.
• Comments, replies and reactions: until you or a moderator delete them, or until you delete your account.
• Push tokens: until you sign out on that device, the token stops working, or you delete your account.
• Interaction events used to rank the feed: 90 days.
• Ask TIB questions: not stored by us. The hashed rate-limit counter: deleted once the hour is over, within a day at the latest.
• Roadmap ideas and their app context: as long as the idea is on the roadmap; when you delete your account, they are unlinked from you.
• Tester sign-ups: until the tester programme ends.
• Correction reports: the report is kept; your optional email address is deleted when the report is closed and the IP hash after two days.
• Hosting logs: a short time, for security and troubleshooting.
• Sporting statistics: kept as a historical record of the competitions. Aggregated news-link data is pruned regularly.

When you delete your account, your account data is erased immediately and rows that record your actions are deleted or unlinked from you (see “Delete your account”).

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent at any time. Specifically:

• Export — download a copy of the data tied to your account from your account settings on the website. If you are missing something, email us and we send you the rest.
• Erasure — delete your account in the app or on the website (see “Delete your account” below).
• Players who are not account holders — a player, parent or guardian can request removal or correction of a player’s statistics by emailing us.

To exercise any right, or if you have a complaint, email privacy@thisisbasketball.be. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données, www.gegevensbeschermingsautoriteit.be).

You can delete your account yourself at any time, in the app or on the website. It is the same account, so deleting it in one place deletes it everywhere.

1. In the TIB app: open Profile, tap “Delete account” at the bottom and confirm.
2. On the website: sign in, go to your account settings (www.thisisbasketball.eu/dashboard/settings), open “Privacy & your data” and choose “Delete my account”.
3. No longer able to sign in? Email privacy@thisisbasketball.be from the email address of your account and we delete it for you.

What is deleted: your account and profile (email address, display name, year of birth, account type, consent record), your follows, reactions, comments and replies, blocks, notification settings, push tokens, inbox notifications and feed interaction events. What stays, without your name: roadmap ideas you submitted and correction reports are unlinked from you. Sporting statistics stay as a public record; a player who wants their statistics removed or corrected can email us. For data a club holds about you in TIB Club, contact your club.

Deletion is immediate and cannot be undone. Deleted data can remain in our database provider’s encrypted backups for a limited period, until those backups are overwritten.

We host data in the EU where possible. Where a processor transfers data outside the EU/EEA (for example the AI model providers and the push delivery service), that transfer is covered by an adequacy decision or the EU Standard Contractual Clauses.

You must be at least 13 years old to create an account or post content, including comments and chat messages. This reflects the Belgian age of digital consent under Article 8 of the GDPR. That is why we ask for your year of birth (only the year) when you create an account: if it shows you are under 13, the signup is cancelled and deleted. We do not knowingly collect personal data from children under 13; if we become aware that we have, we delete it.

If you are between 13 and 18, you may only use an account with the involvement and agreement of a parent or legal guardian, who accepts these terms on your behalf.

Anyone can browse public pages and use the TIB app without an account. Community features such as comments and live chat are available only to signed-in users and are actively moderated using both automated systems and human review. A parent, guardian, or any user can request removal of content or an account by contacting us at the address above.

We may update this policy. Significant changes will be reflected in the “last updated” date above, and where the change affects data you consented to, we will ask for your consent again.