Privacy Policy
Last updated: 2026-08-14
This privacy policy explains what personal data Bruins Software processes when you use Booked, why, and what rights you have. Bruins Software is the data controller under the GDPR.
Who is responsible
Bruins Software (eenmanszaak) De Schraa 4 8061 AP Hasselt Nederland KvK: 42102635 E-mail: rutgerw.bruins@gmail.com
What data we process
Admin account data: email address and (encrypted) password, managed through our authentication provider.
Team data: team name, team URL, configured currency, an optional payment link, and a player access code (stored hashed only).
Player data: name, optional email address, and the fines, amounts and payment status linked to the player.
Billing data: for a paid subscription, a customer and subscription ID from our payment provider. We never receive or store card details.
Communications: data you enter in the sign-up or feedback form (name, email, phone number, team name, message).
Technical storage: strictly necessary data in your browser (session token and language preference) to make the app work.
Purposes and legal basis
Providing the service and performing the contract (Art. 6(1)(b) GDPR): accounts, teams, fines and subscriptions.
Legitimate interest (Art. 6(1)(f) GDPR): security, abuse prevention and improving the service.
Legal obligation (Art. 6(1)(c) GDPR): e.g. limited financial records around payments.
Consent (Art. 6(1)(a) GDPR): only where we explicitly ask; you can withdraw consent at any time.
Processors and third parties
We use external providers that process data on our behalf under data processing agreements:
Supabase — database and authentication.
Stripe — payment and subscription processing.
Hostinger — web hosting and email delivery.
Our own server environment (VPS) for the application API.
We do not sell your data or share it with third parties for marketing.
Retention
We keep data for as long as your account or team is active. After you delete your account, or on request, we delete your personal data, except where we are legally required to retain it (such as financial records).
Cookies and storage
We only use strictly necessary browser storage (localStorage) for your session and language preference. We currently use no tracking or marketing cookies. If that changes, we will ask for your consent first.
Your rights
You have the right to access, rectification, erasure, restriction, portability and objection. Contact us at rutgerw.bruins@gmail.com.
You may also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
Security
We take appropriate technical and organisational measures to protect your data, including encrypted connections, hashed passwords and player codes, and database-level access restrictions.
Changes
We may update this policy. The date at the top reflects the latest change.