Privacy policy
Last updated: 13 September 2026
SuperStat is an app for keeping a handball team's statistics: roster, matches, shots and events. This page explains what data it stores, where it stores it and how to delete it. It applies equally to the web version and to the Android app.
The short version: SuperStat stores your email address and the statistics you enter yourself. There are no ads, no analytics, no tracking, and no data is sold or handed to anyone. You can delete it all whenever you want.
Who is the data controller
SuperStat is a personal project with no company behind it. The app is free to use and also has an optional paid plan (SuperStat Pro) that is taken out on the web. The data controller is its author, and the way to get in touch about anything to do with your data is opt1a.david.martinez@gmail.com.
What data is collected
From your account, so you can be identified and your data can follow you from one device to another:
- Your email address.
- If you sign in with Google: also the name and profile picture Google associates with that account. SuperStat never receives your Google password.
- If you sign in with email and password: the password is stored encrypted and the app's author cannot see it.
What you type into the app, which is the reason it exists:
- Teams, and each one's roster: every player's name, squad number and position.
- Matches: opponent, date and result.
- What is recorded during the match: shots (goal zone, shooting point, minute and half), saves, turnovers, steals, two-minute suspensions, cards and who was on court.
If you take out SuperStat Pro, and only in that case:
- Your subscription status: whether it is active or in a trial period and until what date. That is the only thing about the payment stored in SuperStat's database.
- The payment details are collected and stored by Stripe, which handles the charge. SuperStat never sees, receives or stores your card number.
What is NOT collected: location, contacts, photos, microphone, camera, advertising identifiers or browsing history. The app contains no advertising or analytics SDK of any kind, and does no profiling or automated decision-making.
Players' names: an important warning
The names, squad numbers and statistics you enter are data about other people, often minors. SuperStat is the tool; you are the one who decides what to write in it. That means it is you —as coach, team manager or club— who must have the legal basis for processing that data: the consent of the players or their guardians, or the basis the club already has for running its teams.
If you would rather not enter real names, the app works just the same with initials, nicknames or squad numbers alone.
What it is used for
Only to provide the service: to identify you, store what you record, sync it across your devices and work out the statistics the app shows you. It is not used for anything else.
The legal basis is the performance of the service you ask for when you create an account (Article 6(1)(b) GDPR). No marketing emails are sent.
Where it is stored
- On your device. The app keeps a local copy of your data (in the browser's or the app's storage) so that it works without a connection, which is exactly the case in a sports hall. That copy is what is used while there is no network, and anything pending is uploaded on its own when the network comes back.
- In the cloud. The original lives in a Postgres database hosted by Supabase Inc., acting as data processor. The connection is always encrypted (HTTPS) and access is restricted row by row: the database's security policies mean each account can only read and write its own rows.
- International transfers. If the Supabase project's region is outside the European Economic Area, that transfer relies on the standard contractual clauses approved by the European Commission, which form part of Supabase's contract with its customers.
Who it is shared with
With no one beyond the providers needed for the app to work:
- Supabase Inc. — hosting for the database and the account system. Their policy.
- Google LLC — only if you choose to sign in with Google, and only to check that the account is yours. Their policy.
- Stripe, Inc. — only if you take out SuperStat Pro. It receives your email address and the payment details, and it is the one that charges you and stores the card. Their policy.
- Resend (Plus Five Five, Inc.) — only to send you the email notices described below. It receives your address and the text of the notice. Their policy.
Data is not sold, not passed on for advertising purposes and not shared with third parties for their own ends. Data would only be handed over if a legal obligation required it.
Email notices
SuperStat writes to you very rarely, and only for two reasons: when you reach the free plan's team limit, and when your SuperStat Pro trial is about to end (so the first charge does not take you by surprise). The first is sent at most once every 30 days.
There are no newsletters, no third-party promotions and no open or click tracking: the emails carry no images or tracking pixels, so there is no way to know whether you opened them.
You can turn them off whenever you want, in two ways: with the Email notifications switch on the Account screen, or with the unsubscribe link at the foot of every email, which works without signing in. Emails essential to running the account (confirming your address or resetting your password) are not affected, because without them you cannot get in.
How long it is kept
For as long as your account is open. When you delete a team or a match from the app, it stops being visible straight away and is marked as deleted so that it does not come back when another device syncs; that record is permanently erased after 90 days at the latest. If you delete the whole account, everything associated with it is erased.
How to delete your account and your data
Piece by piece, from the app: every match and every team can be deleted from its own screen, and deleting a team takes its roster and everything recorded in its matches with it.
The whole account, from the app: under Account → Delete account. You are asked to confirm twice because there is no way back: when it finishes, the account and all its data —teams, players, matches, shots and events— have been deleted, both on the device and in the cloud, and you are signed out. It is immediate and you do not have to ask anyone for anything.
If you had SuperStat Pro, deleting cancels the subscription first and also deletes your customer record at Stripe, so that no charge is left pending and no data of yours stays there. Stripe keeps its own record of invoices already issued for as long as accounting law requires, which is a legal obligation and not a SuperStat decision.
Or by email, if you prefer: write to opt1a.david.martinez@gmail.com from the same address you sign in with, with the subject "Delete my SuperStat account". The same data is deleted within 30 days at the latest, and you will get a confirmation. No copy is kept other than what the law requires.
If you only want to remove the local copy from the device, uninstalling the app is enough (or clearing the site data, in a browser). That does not delete what is already in the cloud.
Your rights
You can exercise your rights of access, rectification, erasure, restriction, objection and portability at any time by writing to the contact address. In particular:
- Access and rectification: everything the app stores about you can be seen and edited from the app itself: each player's name, squad number and position, every match's details and every individual record.
- Portability: every match can be exported to CSV from its own screen, without asking anyone.
- Erasure: as explained in the previous section.
If you believe your data is not being handled properly, you can complain to the Spanish Data Protection Agency (aepd.es), which is the lead supervisory authority because the controller is in Spain, or to the supervisory authority of the country where you live.
Security
All traffic is encrypted with HTTPS. Isolation between accounts does not depend on the app but on the database's own row-level security policies: even if someone tampered with the application, the database would still return only the rows of the account that signed in. Even so, no system is infallible, and this app is provided without warranties.
Minors
The app is meant for coaches, team managers and coaching staff, and is not aimed at minors, who should not create an account on their own. Any data about minors that may appear in the rosters is the responsibility of whoever enters it, as explained above.
Changes to this policy
If anything relevant changes, this page will be updated and so will the date at the top. Important changes will also be announced inside the app.