1. Data controller
František Jánoš ID No.: 02721864 Husovická 902/18, Brno - Husovice, 614 00, Czech Republic
Contact: frantisek@trefa.app
2. What personal data we process
While you use Trefa.app, we process the following data:
- Identification data from your Google account: name, e-mail address, profile photo
- Activity data: match predictions, points, tournament participation
- Technical data: IP address, browser type (for security purposes)
3. Purpose of processing
We process your personal data for these purposes:
- Providing the prediction league service
- Identifying users within tournaments
- Displaying standings and statistics
- Communication in the tournament chat
- Ensuring security and preventing abuse
4. Legal basis for processing
We process personal data on the grounds of contract performance (Art. 6 (1) (b) GDPR) – providing the prediction league service, and legitimate interest (Art. 6 (1) (f) GDPR) – ensuring the security and operation of the service.
5. Retention period
We keep your data for as long as your account exists. After you delete your account, the data is removed within 30 days, except for anonymised tournament statistics.
6. Data sharing
We do not share your personal data with third parties for marketing purposes. Data may be shared:
- With other tournament participants: name, profile photo, predictions and points (within the tournament)
- With infrastructure providers: hosting (Vercel, Hetzner) used to operate the service
- Google: for Google OAuth sign-in
7. Your rights
Under the GDPR you have the following rights:
- Right of access – obtain information about the data we process
- Right to rectification – correct inaccurate data
- Right to erasure – request deletion of your account and data
- Right to data portability – obtain your data in a machine-readable format
- Right to lodge a complaint – with the Czech Office for Personal Data Protection (uoou.cz)
To exercise your rights, contact us at frantisek@trefa.app.
8. Cookies
We only use technically necessary cookies for sign-in and for the service to work. We do not use advertising or third-party analytics cookies.
9. Data security
We protect your data with encrypted communication (HTTPS), secure sign-in via Google OAuth, and regular security updates. Data is stored on servers within the EU.
10. Policy changes
This policy may be updated. We will inform you about significant changes through the app.
Last update: January 28, 2026