Privacy

We wrote this text ourselves from the law’s official texts; a lawyer has not reviewed it yet.

In force from 28 October 2026. This explains what Lopta (the app, Lopta Admin and the sites lopta.hr and lopta.eu) does with personal data, why, for how long, who receives it, and what you can ask of us. It follows the EU General Data Protection Regulation (GDPR) and Croatian law.

Who is responsible

The controller is BitAlloc d.o.o., Ulica Križnog puta 90, 10000 Zagreb, Croatia, registered at the Commercial Court in Zagreb under MBS 081532097, OIB 51729437531, director Muriel Kamgang Mabou (see Company information). BitAlloc owns Lopta.

Write to support@lopta.hr about anything on this page; we answer in Croatian or English. We have no data protection officer, since, as we understand it, the law does not require one for what Lopta does; that address reaches the people responsible.

What we keep, why, and for how long

• Your account. Your email, name and an account id, which we receive from Google or Apple when you sign in. With Apple’s “Hide My Email” we get a private address that forwards to you. We never see or store a password. With your account we also keep your roles in groups, what you follow and which alerts you turned on. Why: to run your account (our contract with you). Kept until you delete your account.
• What you and your group create. Groups, competitions, teams, players, matches, scores, match events, team logos and player photos, and who last edited a match’s records. Why: to run the competitions you organise and follow (contract), and the group’s interest in a reliable record of its results (legitimate interest). Kept while the group keeps it.
• Images. Every upload has its hidden data removed, location included. An image that is replaced or removed is not deleted from our storage: a removed one is kept locked, visible only to Lopta’s administrators, so it can be restored. The record of who uploaded an image is kept 30 days after a newer one replaces it. Why: so a mistake or misuse can be put right (legitimate interest). At the request of the person in an image, we destroy it in every size.
• Something “deleted” in Lopta (a match, team, player, competition or group) disappears for everyone at once but is kept, disabled, so a mistake or misuse can be undone by Lopta’s administrators. Why: to protect results and groups from errors and abuse (legitimate interest). There is no end date for this. Anyone named in it can ask us to erase their personal data from it at any time.
• A record of changes. When anyone changes something, in the app or in Lopta Admin, we record who did what and when, with the network address and device. The personal data in it is encrypted. The record is kept 2 years, the network address and device 1 year. Why: to protect scores, bans and corrections from abuse and to settle disputes (legitimate interest). What you only look at in the app is never recorded. When an account is erased, its personal data is removed from these records; the action stays.
• Security events (refused requests, failed sign-ins), with the network address encrypted, for 12 months. Why: to keep Lopta safe (legitimate interest).
• Technical logs (errors, timings, the kind of request, the browser or app sending it) for 90 days at most. They can hold an account id, never your name or email. Why: to keep Lopta working (legitimate interest).
• Usage. On our own servers we record the days an account used Lopta, from which platform and app version, and which matches it opened: 90 days. From that we make daily totals with no account in them, kept 2 years. Why: to improve Lopta and know which versions are in use (legitimate interest). Nothing is shown per person. No third-party analytics, no advertising, no tracking.
• Checking typed text. Names and notes are compared with a list of offensive words. A match is only flagged: a person in the group or at Lopta looks at it and decides. Flagged text is kept until it is handled, then 13 months; the decision stays in the record of changes. Why: to protect users, players under 16 above all (legitimate interest).
• Alerts on your phone. Your phone’s notification token, for the alerts you turned on, until you sign out, delete your account, or Google or Apple mark it invalid; for a live match on the Lock Screen, 12 hours at most. An alert holds team and player names, the score and the minute (contract).
• Emails we send you (confirming an account deletion, notice that an unused account will end): the address, subject and text are kept 30 days after sending. An address that bounced is kept until it is cleared, so we stop sending to it (legitimate interest).
• Support. To answer a question, a Lopta administrator can see Lopta Admin as you see it, read-only: nothing can be changed. Every such view needs a reason, alerts the other administrators and is recorded in the record of changes (2 years); the list of views is kept 13 months. You are not told by default; the administrator can email you (legitimate interest).
• Signing in to Lopta Admin: when and how you signed in, with a fingerprint (not the address itself) of the network and the second factor, 13 months after the session ends. Why: security (legitimate interest).
• Accounts that end by themselves. An account unused for 2 years is deleted; a month before, we tell you by email and an alert, with a reminder a week before. Signing in keeps it. An account banned for 2 years is deleted.

Apart from images and “deleted” content, nothing is kept longer than 2 years.

Players who don’t use Lopta

Organisers list players: first and last name, shirt number and, if they choose, a photo, often for players who have no account. We receive them from the organiser, to show a competition’s teams and matches and to record results, goals and stats. Why: the group’s and the players’ legitimate interest in running the competition. No player’s age or birth date is collected. A player, or a parent, can ask us to correct or erase their name or photo at support@lopta.hr; the player then becomes “Erased player”, and the results stay correct.

Players under 16

Lopta is for amateur sport at any age. Where a group has players under 16, these rules protect them:

• The question “Under 16?” A group admin answers yes or no for each player. We keep only that answer, never an age or a birth date. Until it is answered, the player counts as under 16. The answer is confirmed again after 12 months.
• A parent’s consent. For a player under 16, the group admin confirms they have the consent of a parent or guardian. We record who confirmed it and when; we keep no details of the parents.
• A short name. An under-16 player’s full name is seen only by referees and the roles above them in their group. Everyone else, in the group or not, sees the first name and the initial of the last name, or the shirt number, as the admin chooses. The short name is also what alerts, the Lock Screen and live updates show. A competition with a player under 16 becomes a youth competition automatically.
• Photos are off for players under 16: Lopta refuses them. Lopta can allow them for a group or a player on request, with a recorded reason; even then only the group’s members see them, from locked storage.
• Links to a competition with players under 16 name no player and are closed to search engines.
• Accounts are for people 16 and older (see Terms).

Who sees it

• Other people in Lopta: what a group publishes (competitions, matches, scores, teams, players) is seen by people who follow it and through the links it shares, with the rules for players under 16 above. Members see the names of a group’s members.
• Providers who process it for us, only on our instructions and under a data processing agreement (the list below).
• Authorities, only when the law requires it.

We never sell personal data or use it for advertising.

Our providers

• Microsoft (Azure): our servers, database, image storage, keys, live updates, monitoring and email sending. Receives everything Lopta keeps. Where: data centres in the EU.
• Google (Firebase): sign-in (email, name, account id) and sending alerts (your phone’s token and the alert’s content). Where: Google’s servers, also outside the EU.
• Apple: Sign in with Apple (email or private address, name) and delivering alerts and live matches to iPhone (token and the alert’s content). Where: Apple’s servers, also outside the EU.
• Cloudflare: protection and speed. Traffic to our sites, the app’s servers and Lopta Admin passes through it, with your network address. Where: a worldwide network, also outside the EU.
• Hostinger: hosting for lopta.hr, lopta.eu and Lopta Admin’s files, and our email, including messages you send us. Where: a company in the EU.

Outside the EU: Google, Apple, Microsoft and Cloudflare are US companies. Transfers to them rely on the EU-US Data Privacy Framework (Commission Decision (EU) 2023/1795), for the companies certified under it, and on the EU’s standard contractual clauses.

Your rights

You can ask for a copy of your data (also as a file for another service), have it corrected or erased, have its use restricted, and object to any use based on our legitimate interest. Write to support@lopta.hr; it is free, and we answer within one month. To protect you, we may ask you to write from the email your account uses, and we will ask a parent asking for a child how they can show it. You can delete your account yourself in the app (see Delete your account).

You have the right to complain to the Croatian data protection authority, AZOP (Agencija za zaštitu osobnih podataka, Selska cesta 136, 10000 Zagreb, azop.hr), or to the authority in the country where you live.

An account needs the email and name Google or Apple provide: without them we can’t create one. Lopta makes no decision about you by automated means alone.

Security

Everything travels encrypted, and data on our servers is encrypted at rest too. Network addresses, devices and personal data in the record of changes are also encrypted with our own keys, and the record is sealed so any change to it can be detected. Access is limited to the people who need it, and Lopta Admin always asks Lopta’s administrators for a second factor.

Backups of the database are kept 35 days at most. If we ever restore one, erasures made since are applied again.

Your devices

• The app keeps your sign-in and your settings on your phone, and score changes not yet sent until the connection is back. You pick a player photo or team logo yourself; otherwise the app doesn’t read your photos, location or contacts. On Android it reads once, from Google Play, the Lopta link an install came from, so an invite opens after installing.
• Lopta Admin sets one cookie, needed to keep you signed in. It ends when you sign out, after 30 minutes unused, and after 12 hours at most. It remembers your theme, language, layout, group and sign-in method in your own browser only.
• These sites set no cookies of their own and have no analytics. They remember your theme and motion choice in your own browser only. Our hosting and Cloudflare see your network address to deliver and protect the site, and keep it only as long as that needs; Cloudflare may set a short-lived security cookie to tell people from automated traffic.

Changes

When this page changes in a way that matters to you, we tell you in the app before it applies. The date at the top is the version in force.

Back to Lopta