Privacy Policy

Last updated: March 22, 2026

1. Introduction

VolleySoul ("we", "us", "our") operates a beach volleyball training management platform. This Privacy Policy explains how we collect, use, and protect your personal data when you use our service.

2. Data We Collect

We collect the following personal information:

  • Account information: First name, last name, email address
  • Authentication data: Hashed password (for email login), Google account ID (for Google login), Facebook account ID (for Facebook login)
  • Training data: Training group assignment, practice sign-ups
  • Technical data: Session cookies, consent preferences

3. How We Use Your Data

We use your personal data to:

  • Create and manage your account
  • Assign you to training groups and manage practice schedules
  • Allow coaches to see who signed up for training sessions
  • Authenticate your identity when you log in
  • Send administrative notifications related to your account

4. Legal Basis for Processing

We process your personal data based on:

  • Consent: You provide consent when you register and accept these terms
  • Legitimate interest: Managing training sessions and group coordination
  • Contractual necessity: Providing the service you registered for

5. Third-Party Services

We use the following third-party services for authentication:

  • Google OAuth: If you choose to log in with Google, we receive your name and email address from Google. See Google's Privacy Policy.
  • Facebook Login: If you choose to log in with Facebook, we receive your name and email address from Facebook. See Facebook's Privacy Policy.

6. Cookies

We use the following cookies:

  • Session cookie: Essential for the application to function. Expires when you close your browser.
  • Remember-me cookie: Keeps you logged in for up to 90 days. Optional — you can opt out at login.
  • Cookie consent cookie: Remembers your cookie preference. Expires after 1 year.

7. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days.

8. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Port your data to another service
  • Object to processing of your data
  • Withdraw consent at any time

To exercise any of these rights, please contact us at the address below.

9. Data Security

We take appropriate technical and organizational measures to protect your data, including password hashing, CSRF protection, and encrypted connections.

10. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at: [your-email@example.com]

We use essential cookies for authentication and session management. See our Privacy Policy.