Privacy Notice

Last updated: 15 May 2026

1. Who we are

Pitch is operated by Lars Lindeberg, a sole proprietor based in Norway ("we", "us"). For the personal data described here, Lars Lindeberg is the data controller. You can reach us at hello@fotballblogg.no.

2. What we collect and why

Account data — email address, display name, and (if you sign in with Google) basic Google profile info. Used to create and secure your account. Legal basis: performance of contract.
League content — leagues, questions, and predictions you submit. Used to operate the service. Legal basis: performance of contract.
Technical data — IP address, device info, and basic usage logs collected by our hosting providers. Used for security, fraud prevention, and debugging. Legal basis: legitimate interests.

3. Who we share data with

Hosting and infrastructure — Lovable Cloud (running on Supabase) and our edge platform host the application and database.
Authentication providers — Google, when you choose to sign in with Google.
Authorities — when required by law.

4. International transfers

Some of the providers above process data outside the EEA. Where this happens, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision to safeguard your data.

5. How long we keep data

Account and league data is kept for as long as your account is active. If you delete your account, we delete your account data within 30 days.

6. Your rights

Under the GDPR you have the right to access, correct, delete, restrict, port, or object to processing of your personal data, to withdraw consent (where processing is based on consent), and to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet). Email us using the address above and we'll respond within one month.

7. Security

We use HTTPS in transit, encryption at rest in our managed database, role-based access controls, and row-level security policies on user data.

8. Cookies

Pitch uses only essential cookies and similar local storage to keep you signed in and remember your language preference. We do not use advertising or analytics cookies.