Privacy Policy

Tornia (tornia.eu) is a competition management platform operated by De Clercq, Jorg, Albrecht Rodenbachstraat 47 A, 9040 Gent, België, enterprise number BE 1037.710.057 ("we", "us"). This policy explains what personal data we process, why, and what your rights are. Questions or requests: support@tornia.eu.

1. Our role: controller and processor

For account, billing, and communication data of people who register on Tornia, we are the data controller.

Competition data — team rosters, player names, lineups, game events — is entered and managed by competition managers and team admins (for example a club or league organizer). For that data the organizer decides who is registered and why; we process it on their behalf to run the competition. If you appear in a competition on Tornia and did not create an account yourself, the organizer who entered your details is your first point of contact. You can always contact us as well and we will help or forward your request.

2. Data we process

• Account data — first and last name, email address, password (stored hashed), optional two-factor authentication secrets, and — if you sign in with Google — the account identifier Google returns for you.
• Billing data — subscription status and history, and Mollie customer and mandate references. Payments run entirely through Mollie; we never see or store card or bank details.
• Competition data — teams, rosters (player names, optional email addresses, jersey numbers), lineups, game events and scores, and referee names and email addresses, as entered by organizers and team admins.
• Invitations — email addresses that organizers or team admins invite to join a team or competition.
• Technical data — IP address and browser information in session records and server logs, and technical error reports (see section 5).

3. Minors

Rosters in amateur sport often include minors. Organizers who enter players into Tornia are responsible for having a lawful basis to do so and for informing the players (and, for children, their parents or guardians) that their name appears in the competition — including on public tournament pages if the organizer makes a tournament public. We do not knowingly collect more data about minors than the roster details an organizer enters. Parents or guardians can ask the organizer or us at any time to review or remove a child's details.

4. Purposes and legal bases

• Providing the service (accounts, competitions, invitations, notifications) — performance of a contract (art. 6(1)(b) GDPR).
• Billing and subscriptions — performance of a contract and legal obligations such as bookkeeping (art. 6(1)(b) and (c)).
• Security and error monitoring — our legitimate interest in keeping the service secure and working (art. 6(1)(f)).
• Service emails — invitations, email verification, password resets, and trial or payment notices are sent as part of providing the service. We do not send marketing email.

5. Processors we use

We share personal data only with the service providers below, and only to run Tornia:

• Mollie B.V. (Netherlands) — payment processing for subscriptions.
• Functional Software, Inc. (Sentry) (United States) — technical error monitoring. Error reports contain technical context (URL, browser, an internal user ID) but no session recordings; the transfer is covered by the EU Standard Contractual Clauses. We do not send your email address or name to Sentry.
• PostHog EU Cloud (hosted in Frankfurt, European Union) — anonymous usage statistics, so we can see which parts of the app are used and improve them. It works without cookies, stores nothing on your device, and we never send it your name, email address, or account ID.
• Hetzner — hosting of the application and database (EU).
• Combell — delivery of service emails.

We do not sell personal data and we do not use advertising trackers; our usage statistics are anonymous and cookieless.

6. Retention

• Account data — kept while your account exists. You can delete your account yourself in Settings → Security; this removes your profile and detaches or removes your personal records. If you still manage competitions or are the last admin of a team, you first transfer or remove those.
• Billing records — kept for 7 years after the transaction, as Belgian accounting and tax law requires.
• Competition data — kept while the organizer's competition exists; organizers can edit or remove roster entries at any time.
• Invitations — expire automatically and are cleaned up after expiry.
• Error reports — automatically deleted after at most 90 days. Server logs are kept short-term for security and troubleshooting.

7. Your rights

Under the GDPR you can ask for access to, correction, deletion, or a copy (portability) of your personal data, and you can object to or ask us to restrict certain processing. Email support@tornia.eu — we respond within 30 days. You can also complain to the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).

8. Cookies

Tornia only uses cookies that are strictly necessary to sign you in and protect the service — no advertising or analytics cookies (our usage statistics work without cookies). Details are in the cookie policy.

9. Changes

We will update this policy when the service or our providers change, and adjust the date at the top. For significant changes we will notify account holders by email or in the app.