Privacy Policy

Rondo ("we", "us", "our") is the Rondo web platform and app, a social clubhouse for football fans. The data controller for the personal data described here is Martin Kronqvist, Brödåkra 249, 241 61 Löberöd, Sweden. Rondo is run by a private individual; there is no company behind it. For any privacy matter, including exercising your rights, email rondo.club@outlook.com.

• Account information you provide when signing up, such as your email address, display name and, if you use social sign-in, the basic profile details that provider shares with us.
• Profile and preferences including your selected clubs, avatar, banner, biography, chosen title and onboarding choices.
• Content you create such as forum posts, feed posts, comments, votes, reposts, match ratings, player ratings, direct messages, matchday chat and uploaded images.
• Activity records used to run the game layer: your market value ledger, streaks, tier, trophies and referrals.
• Safety records such as blocks you set, reports you file, and reports filed about you, including a text snapshot of the reported content captured at the time of the report.
• Following and notifications: the members, news sources, podcasts, subreddits and kinds of post you follow; your notifications and your notification settings; and, if you allow notifications on your phone, a push token for that device and the device's name.
• Age confirmation: when you joined, that you confirmed being at least 13 (or the minimum age in your country), and when. We don't ask for your date of birth.
• Administrative records: warnings, suspensions and their reasons, and any market value an administrator gave or removed, with the reason given.
• Usage and device data such as pages visited, approximate interactions, browser type and, where you have consented, first-party analytics cookies on the website.

What moderators can see. The people who handle reports see the reported content, including a direct message when it is reported or when the automatic word filter flags it, with a text copy taken at that moment. They can also open images you upload, including images sent in direct messages. They cannot otherwise read your direct messages.

• To provide the service you asked for — creating and securing your account, keeping you signed in, running forums, feeds, news, calendars, matchday and the market-value game. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
• To keep the community safe — screening text before publication, handling reports, applying blocks and suspensions, preventing abuse of the scoring mechanics. Legal basis: our legitimate interest in a safe platform, and compliance with our legal obligations (Art. 6(1)(f) and 6(1)(c)).
• To send push notifications to your phone: replies, follows, match moments, messages and the like. Legal basis: your consent (Art. 6(1)(a)), given when your phone asks whether Rondo may send notifications. You can turn notifications off, or any one category of them, in Settings, and withdraw consent in your phone's settings.
• To keep a record of administrative decisions, such as warnings, suspensions and market value adjustments. Legal basis: our legitimate interest in running the platform fairly and answering complaints about it (Art. 6(1)(f)).
• To measure and improve the product — first-party analytics on the website. Legal basis: your consent (Art. 6(1)(a)), given in the cookie banner and withdrawable at any time. The app contains no analytics.

Automated decisions. The only automated decisions about you are the word filter (which can refuse a post) and the automatic 7-day suspension after three reports that a person upheld. Neither has legal effects; you can contest both as described in the Terms.

We use strictly necessary cookies to run the site. With your consent we also set first-party analytics cookies — an anonymous visitor identifier and a page-view counter — to understand how the clubhouse is used. You choose your preference in the cookie banner shown on your first visit, and no analytics cookies are set before you accept. You can withdraw consent at any time by clearing cookies in your browser.

We do not use advertising cookies, cross-site tracking, or third-party analytics products. Fonts and stylesheets are served from our own servers rather than a third-party font CDN, so simply loading a page does not disclose your IP address to anyone else.

Account data and content are stored using our managed cloud backend with access controls and encryption in transit. We apply data retention routines that automatically remove certain temporary and cached data over time. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

We do not sell your personal information and we do not share it for advertising. It reaches only the following, each acting as a processor on our instructions or as an independent recipient of non-identifying requests:

• Supabase (processor, servers in Frankfurt, Germany): our database, sign-in and file storage. Your account, profile, content and safety records are stored there.
• Vercel (processor): hosts the website and the servers the app talks to, and processes the connection data of any web request, such as your IP address.
• Expo (processor, USA), then Apple Push Notification service or Google Firebase Cloud Messaging: deliver push notifications to your phone. They receive your device's push token and the notification's text, which can include another member's display name and the first 140 characters of a message, comment or post. Expo also delivers app updates.
• Resend (processor, EU region): sends account emails such as sign-up confirmations and password resets. Mail you send to hello@rondoclub.com is forwarded by Cloudflare to our inbox.
• Apple and Google (independent controllers), when you choose to sign in with them. We receive your email address and basic profile from them.
• Google Gemini (processor): writes article summaries and translates some headlines. It receives the text of public news articles and headlines, never anything you or other members write.
• Microsoft Azure AI Translator (processor): translates news headlines and descriptions into English. It receives public news text only.
• Peekalink (processor): builds the preview when you share a link. It receives the link you shared, not who shared it.
• API-Sports: football data (fixtures, line-ups, squads, standings and statistics). We send it club and fixture identifiers, never your identity.
• YouTube: Rondo uses YouTube API Services to show club and highlight videos. By watching YouTube videos in Rondo you agree to the YouTube Terms of Service, and the Google Privacy Policy applies to what YouTube collects when a video plays.
• Reddit, TikTok, news publishers and podcast hosts: our servers fetch their public feeds, headlines, previews and thumbnails, so your IP address is not disclosed to them. Playing an embedded video or podcast contacts its provider directly, and their own privacy policy applies.
• Authorities, where we are legally required to disclose, or where someone's life or safety is at risk.

Where a provider processes data outside the EEA (Expo and Vercel in the USA, for example), the transfer relies on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses.

• Account and content — for as long as your account exists. Deleting the account removes them as described below.
• Moderation reports — retained for twelve months after resolution, with the reporter's and the reported member's identities removed, so repeat patterns can still be recognised.
• Cached football and news data — refreshed and expired automatically; it contains no personal data about you.
• Analytics page views — stored against an anonymous session identifier, with no account or IP address, and deleted after twelve months.
• Push tokens: until you turn notifications off, sign out on that device, or delete your account.
• YouTube data (video titles, thumbnails and channels shown in the feed): refreshed or deleted within 30 days, as YouTube's terms require.
• Administrative records (warnings, suspensions, market value adjustments): for as long as your account exists.

You can delete your account yourself, at any time, from Settings inside the app. You do not need to email us and there is no deactivation step. You will be asked for your password and to type the word DELETE, and then:

• Deletion is immediate and irreversible. There is no recovery window and we cannot restore an account afterwards.
• Your profile, direct messages, votes, ratings, streaks, ledger, trophies, club memberships, saved articles, blocks and notifications are deleted outright. Your profile picture and banner are deleted too — they are pictures of you, so erasure removes them.
• Your posts and comments are anonymised by default — the content remains, meaning both the text and any images attached to it, so that conversations other people took part in stay readable and intact. Your identity is severed from it and the author is shown as "Former member"; surviving images are re-filed under a neutral location so they are no longer linked to your account. If you would rather the posts went too, choose the option to delete your content when you confirm — then the images go with them.
• Any moderation report involving you is kept for the twelve-month window described above, de-identified.
• Your phones' push tokens are deleted. If you signed in with Apple, we tell Apple to revoke Rondo's access. If you signed in with Google, we hold no Google token to revoke; you can remove Rondo from your Google Account at myaccount.google.com/permissions.

Without the app: email rondo.club@outlook.com from your account's email address and ask for your account to be deleted. We will delete it within 30 days and confirm by email.

Under the GDPR you have the right to access your data, to correct it, to erase it, to receive it in a portable form, to restrict or object to certain processing, and to withdraw consent. In practice:

• Access and portability — Settings includes a data export that produces a machine-readable JSON file of everything we hold about you. It is available once every 24 hours.
• Correction — edit your profile, display name, avatar, banner and biography from your profile at any time.
• Erasure — the account deletion described above.
• Consent — refuse or withdraw analytics consent via the cookie banner.
• Anything else — email rondo.club@outlook.com and we will respond within one month.

If you believe we have handled your data wrongly you can complain to your local supervisory authority; in Sweden this is Integritetsskydds­myndigheten (IMY).

Rondo is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect their data.

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you.

Questions about this policy or your data? Email rondo.club@outlook.com.