Privacy Policy
Last updated: April 4, 2026
Introduction
MySportsTeam (“we”, “us”, or “our”) operates the MySportsTeam platform at mysportsteam.app. We are based in Quebec, Canada.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform. We are committed to protecting your privacy in accordance with Quebec’s Act respecting the protection of personal information in the private sector (Law 25), the Personal Information Protection and Electronic Documents Act (PIPEDA), and the General Data Protection Regulation (GDPR) for users in the European Economic Area.
By using MySportsTeam, you consent to the practices described in this policy.
Information We Collect
Information you provide
- Account information: When you sign in using Google or Microsoft, we receive your name and email address from your OAuth provider.
- Email verification: Additional email addresses you choose to verify and link to your account.
- Team data: Team names, member roles, positions, and team configuration you create or manage.
- Event data: Events you create, attendance responses, waitlist entries, and spare requests.
- Messages: Chat messages you send to other users or groups through the platform.
Information collected automatically
- Authentication data: We store a session cookie (HTTP-only JWT) on your device to keep you signed in. This cookie expires after 12 hours.
- Push notification tokens: If you enable push notifications, we store a device token to deliver notifications.
- Analytics: We use Cloudflare Web Analytics, which collects anonymous, aggregated usage data without using cookies or tracking individual users.
How We Use Your Information
We use your personal information to:
- Provide the service: Authenticate your identity, manage your teams, track event attendance, and deliver messages.
- Send notifications: Deliver email notifications (such as team invitations, event updates, and spare requests) and push notifications you have opted into.
- Improve the platform: Analyze aggregated, anonymous usage patterns to improve features and performance.
We do not use your personal information for advertising, profiling, or automated decision-making.
Cookies and Authentication
MySportsTeam uses a single HTTP-only session cookie containing a JSON Web Token (JWT) to authenticate your session. This cookie:
- Is encrypted and cannot be read by client-side scripts
- Expires after 12 hours
- Is essential for the service to function
We do not use tracking cookies, advertising cookies, or any third-party cookies.
Data Sharing
We share your personal information only with the following service providers, strictly for operating the platform:
| Provider | Purpose | Data shared |
|---|---|---|
| Google / Microsoft | Authentication (OAuth) | Name, email (received from provider) |
| SendGrid (Twilio) | Transactional email delivery | Email address, notification content |
| Cloudflare | Hosting, CDN, anonymous analytics | Anonymous usage data (no personal data) |
| Microsoft Azure | Cloud infrastructure | All platform data (encrypted at rest) |
We do not sell, rent, or trade your personal information to any third party.
Data Retention
- Account data: Retained as long as your account is active. You may request deletion at any time.
- Messages: Retained as long as the associated team exists or until you delete your account.
- Event data: Retained as long as the associated team exists.
- Authentication cookies: Automatically expire after 12 hours.
- Push notification tokens: Retained until you disable notifications or delete your account.
When you delete your account, we remove your personal information within 30 days, except where retention is required by law.
Your Rights
Depending on your location, you have the following rights regarding your personal information:
All users (Quebec Law 25 / PIPEDA)
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate personal information.
- Deletion: Request deletion of your personal information.
- Withdrawal of consent: Withdraw your consent to the processing of your personal information at any time.
- Complaint: File a complaint with the Commission d’accès à l’information du Québec (CAI).
European Economic Area users (GDPR)
In addition to the rights above, you also have the right to:
- Data portability: Receive your personal information in a structured, commonly used, machine-readable format.
- Restriction: Request restriction of processing in certain circumstances.
- Objection: Object to processing based on legitimate interests.
- Complaint: Lodge a complaint with your local data protection authority.
Our lawful basis for processing under the GDPR is your consent (Article 6(1)(a)) and the performance of our contract with you (Article 6(1)(b)).
To exercise any of these rights, contact us at [email protected].
International Data Transfers
MySportsTeam is based in Quebec, Canada. Your personal information may be processed in countries other than your own, including Canada and the United States, through our service providers (Azure, Cloudflare, SendGrid).
Canada has been recognized by the European Commission as providing an adequate level of data protection. For transfers to other jurisdictions, we rely on appropriate safeguards such as standard contractual clauses.
Children’s Privacy
MySportsTeam is not directed at children under the age of 16. Children under 16 may not create accounts on the platform.
However, parents and legal guardians may add their children as dependents on their own account. In this case, we collect the dependent’s name and attendance information, managed entirely by the parent or guardian. Parents may request access to, correction of, or deletion of their dependent’s information at any time by contacting us at [email protected].
If you believe we have collected personal information from a child under 16 without parental consent, please contact us at [email protected] and we will promptly delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the “Last updated” date. For significant changes, we may also notify you by email.
Your continued use of MySportsTeam after changes are posted constitutes your acceptance of the revised policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:
Email: [email protected]
For complaints regarding the handling of your personal information, you may also contact the Commission d’accès à l’information du Québec (CAI) at www.cai.gouv.qc.ca.