Privacy policy

The data controller is the association KING 1X1 STREETBALL LEAGUE (KSL), 21 rue Nationale, 54135 Mexy, France (SIREN 938 096 757).

For any question about your data: contact@king1x1.com (subject: "Personal data").

• Account: e-mail address (to send you your one-time login code; there is no password).
• Player profile: first name, last name, nickname, date of birth, sex (only to place you in the right category: King, Queen, Junior or College), country, city, category.
• Optional profile: height, dominant hand, playing style, club, university, social networks, photo.
• Tournament registration: category, official kit size, date you accepted the rules and image rights, payment status.
• Minor players: name and e-mail of a parent or legal guardian, and their consent.
• Tickets: name and e-mail of the ticket holder, tickets issued, entry (date and time of the scan), anonymous identifier of your device (to limit the number of seats per person).
• Payments: online payment is handled by Stripe. We receive the confirmation and the amount, never your card number.
• Public votes: your vote (one per poll), linked to your account or your device.
• Open Court and Crowns: the sessions you organise or join (court, day, time, format), confirmed scores and your Crowns. Your GPS position is only used if you allow it, to show the courts around you.
• Technical data: IP address and connection logs from the host (security), device type, language.
• Your messages, if you write to us.

• Creating and managing your account, registering you for tournaments, issuing your tickets, calculating the World Ranking and Crowns: performance of a contract (terms of use and terms of sale).
• Filming and photographing tournaments and using your image: your consent (checkbox at registration; you can withdraw it, see "Your rights").
• Showing the courts around you: your consent (location permission on your phone or browser).
• Security, fighting fraud and abuse (multiple accounts, phantom bookings, fake scores): legitimate interest of the association.
• Accounting and invoicing: legal obligation.
• Replying to your messages: legitimate interest and pre-contractual measures.

We do not sell your data and we do not run targeted advertising. The World Ranking is calculated automatically from the public points scale; it has no legal effect on you.

Your player profile is public on the website and in the app: nickname, first name, last name, country, city, category, photo, ranking and track record. For a minor player, the last name is reduced to an initial and the city is not displayed.

Your date of birth, e-mail, sex, kit size and payment data are never public. If you would like your profile not to be visible, write to us.

Only the people who need it have access: the organising team (volunteers, referees, front desk) for a tournament’s lists of registrants and tickets, and the following providers, who act on our behalf:

• Supabase: database, accounts and sending of login codes. Servers in Europe (Paris region).
• Cloudflare: website hosting and DNS. A US company; transfers are covered by appropriate safeguards provided for by the GDPR (in particular the European Commission’s standard contractual clauses).
• Sentry (Functional Software, Inc.): app crash reports (phone model, system version, technical cause of the error), with no name, email or IP address. Data hosted in the European Union (Germany), kept for 90 days.
• Stripe: online payment of tickets and registrations, once payment opens.
• Resend: e-mail sending (login codes, confirmations and tickets). A US company; transfers are covered by the European Commission’s standard contractual clauses.
• API Adresse (French State) and Photon (place search service, komoot company, Germany): to find the name of a city or an address, the position or city you search for is sent to them, without your name or e-mail.
• OpenFreeMap / OpenStreetMap: map backgrounds. Your IP address is visible to them when a map is displayed.
• YouTube (Google): video player in "no cookie" mode, loaded only when you press play.
• Apple and Google: if you download the app from the App Store or Google Play, under their own policies.

We may also disclose data to the authorities when the law requires it. Media partners who film the tournaments receive images, not your account data.

• Account and profile: as long as your account is active; deleted or anonymised after 3 years without login, or as soon as you request deletion.
• Sports results and track record: kept for the World Ranking history; after you delete your account, your name is removed and the results remain in anonymous form.
• Tickets, payments and invoices: 10 years (accounting obligation).
• Parental consent: as long as the minor player’s profile exists.
• Photos and videos: for the duration of the permission given (the current season and the following 5 years). You can ask for a specific image to be removed; it is removed from our materials within 30 days.
• Technical security logs: 12 months at most.
• Messages: 3 years after the last exchange.

You can at any time request access to your data, its rectification, erasure, restriction or objection to its processing, its portability, and withdraw a consent you gave (image rights, location) without affecting what was done before the withdrawal. You can also give instructions on what happens to your data after your death.

To exercise a right: write to contact@king1x1.com from your account’s e-mail address. We may ask for proof of identity if in doubt. We reply within one month.

You can also lodge a complaint with the CNIL (cnil.fr), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

A minor player must provide the name and e-mail of a parent or legal guardian, whose consent is kept on file. This representative can withdraw it at any time by writing to us. Minors’ profiles are restricted: last name reduced to an initial and city hidden on public pages.

Communications are encrypted (HTTPS). Login uses a one-time code sent by e-mail. Access to the database is limited by roles and by security rules that prevent one player from seeing another’s data. Sensitive actions (results, points, payments, roles) are recorded in an audit log.

We may update this policy. The date of the last update appears at the top of the page; in case of a significant change, we will let you know in the app or by e-mail.