Privacy Policy
Last updated: April 7, 2026
1. Data Controller
The data controller is In Real Life S.r.l., located at Via del Torchio 1, 20123 Milano (MI), Italy, VAT 13965520961 (hereinafter "Controller"). For any inquiries regarding the processing of your personal data, you can contact us at: info@areny.net.
2. Data We Collect
We collect the following personal data:
- Registration data: email address and password (hashed) when you create an account.
- Tournament data: player names, team compositions, match results and standings entered by you.
- Technical data: IP address, browser type and operating system, collected automatically to ensure the service functions properly.
- Payment data: processed by third-party providers (e.g., Stripe). We do not store credit card data on our servers.
3. Purpose of Processing
Your personal data is processed for the following purposes:
- Creating and managing your account.
- Providing the tournament management service.
- Service communications (e.g., changes to terms, technical notifications).
- Compliance with legal and tax obligations.
4. Legal Basis
The processing of your data is based on:
- Contract performance (Art. 6(1)(b) GDPR): necessary to provide you with the service.
- Legal obligation (Art. 6(1)(c) GDPR): to comply with tax and regulatory requirements.
- Legitimate interest (Art. 6(1)(f) GDPR): to ensure the security and proper functioning of the platform.
5. Data Retention
Your personal data is retained for the duration of your account. If you delete your account, your data will be removed within 30 days, unless legal obligations require longer retention.
6. Data Sharing
We do not sell or share your personal data with third parties for marketing purposes. Data may be shared with:
- Service providers: hosting (Hetzner, Germany), payment processing (Stripe).
- Competent authorities: when required by law.
7. Your Rights
Under the GDPR, you have the right to:
- Access: obtain a copy of your personal data.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request the deletion of your data.
- Portability: receive your data in a structured format.
- Objection: object to processing based on legitimate interest.
- Restriction: request restriction of processing.
To exercise your rights, write to info@areny.net.
8. Security
We implement appropriate technical and organizational measures to protect your data, including password encryption, HTTPS connections, daily backups and restricted database access.
9. Cookies
The platform uses only strictly necessary technical cookies for the service to function (e.g., JWT authentication tokens). We do not use profiling cookies or third-party advertising cookies.
10. Changes
We reserve the right to update this Privacy Policy. Changes will be posted on this page with the update date. Continued use of the service after changes constitutes acceptance.