Privacy Policy

1. General Information & Operator Identity

This Privacy Policy explains how personal data is collected, processed, and secured for the Friends Arenaweb and mobile applications (collectively, the "Service").

In accordance with the EU General Data Protection Regulation (GDPR) 2016/679 and Romanian Law no. 365/2002 on electronic commerce, we provide the following operator details:

• Operator / Controller: Mark Gozner (Individual / Natural Person)
• Location: Cluj-Napoca, Romania
• Primary Contact Email: admin@goznair.app
• Alternative Contact Email: gozner.mark@yahoo.com
• Hosting Provider: Vercel Inc. (650 2nd St, San Francisco, CA 94107, USA)

Non-Commercial Notice: Friends Arena is a completely independent, individual hobby project created purely for educational, personal, and friendly competition purposes. No monetization, in-app purchases, commercial transactions, or advertising are featured in the Service.

2. Data We Collect

We only collect personal data that is strictly necessary for the core functionality of the prediction game. This includes:

• Account Credentials: Email address, username, and encrypted passwords (managed securely via Supabase Auth).
• Game Data: Tournament and match predictions, daily quiz scores, and user-generated text shared on the smack-talk wall.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) device tokens and platform types (iOS/Android) registered when enabling push notifications, used solely for match kickoff reminders, scores, and fantasy points alerts.

3. Purpose & Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent (Art. 6(1)(a) GDPR): When you register an account, customize your username, and authorize push notification permissions on your device.
• Legitimate Interest (Art. 6(1)(f) GDPR): To coordinate fair scoring, compute leaderboards, verify security, and keep the smack-talk wall safe and operational.

4. Data Retention & Third-Party Transfers

Your data is stored securely on cloud database services provided by Supabase (EU Central region) and Firebase (Google Cloud platform). We do not sell, rent, or share your data with any commercial third parties.

Data is retained as long as your account remains active. You can request account deletion at any time via the in-app profile settings, which immediately wipes all profile records, predictions, and auth data.

5. Your GDPR Rights

As an EU data subject, you hold the following rights under the GDPR:

• Right of Access (Art. 15): Request a copy of your stored personal data.
• Right to Rectification (Art. 16): Update your username or password at any time.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Completely delete your account via the settings panel, which triggers database cascade deletes.
• Right to Restrict or Object to Processing (Art. 18 & 21): Terminate your push notifications or delete your data.

To exercise any of these rights, contact us at admin@goznair.app.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing: