Privacy Policy

Last updated: August 9, 2026

Introduction

Provil Sportslab is a sport community platform. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over your data.

This policy is written in compliance with the General Data Protection Regulation (GDPR), which applies to users in the European Union and European Economic Area. By using Provil, you agree to the practices described here.

What Data We Collect

We collect the following categories of personal data:

When you register, we collect your name, email address, username, and a hashed version of your password. If you register via SSO (GitHub or Google), we receive your name, email, and a unique identifier from that provider. We never store your SSO password.
You may optionally upload a profile photo. If no photo is provided, an avatar is generated automatically based on your initials. Profile information you enter is visible to other users of the platform.
Fiches, courses, and other content you create on the platform are stored in our database and associated with your account. This includes your course progress and completion data, which is used to provide the platform experience. Content you publish publicly is visible to all users.
When you join or create an organisation or group, we store your membership status and role within that organisation. This data is used to determine what content and features you can access.
When you log in, we store session data on the server to keep you authenticated. This includes your roles and organisation memberships. Session cookies are strictly necessary for the platform to function and are not used for tracking or advertising purposes.
How We Use Your Data

We use your personal data for the following purposes:

  • To provide the platform: Managing your account, displaying your profile, and enabling features such as fiches, courses, and organisations.
  • Authentication: Verifying your identity when you log in, including via SSO providers.
  • Access control: Determining which pages and features you can access based on your role.
  • Content moderation: Reviewing fiche submissions and organisation requests before they are published.
  • Account management: Processing account deletion requests and deactivating associated content.
  • Security: Detecting and preventing misuse and unauthorised access.
Legal Basis (GDPR)

Under the GDPR, we rely on the following legal bases:

  • Contract: Processing your data is necessary to provide the platform services you signed up for.
  • Legitimate interests: We process some data (such as session data and security measures) to keep the platform secure and functional.
  • Consent: Where required, such as for optional profile data, we rely on your consent.
Third-Party Services

Provil Sportslab integrates with the following third-party services for SSO login:

  • GitHub OAuth 2.0 — processes data according to GitHub's own privacy policy
  • Google OAuth 2.0 — processes data according to Google's own privacy policy

We do not sell your personal data to any third party, and we do not use your data for advertising purposes.

Data Retention

We retain your personal data for as long as your account is active. If you request account deletion and it is approved, your account will be set to inactive and your associated fiches, courses, and organisation memberships will be deactivated. Some data may be retained for legal or security reasons.

How We Protect Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

While we take every reasonable precaution, no system is completely secure. If you believe your account has been compromised, please contact us at [contact@email.com] immediately.

Cookies

Provil Sportslab uses session cookies to keep you logged in during your visit. These cookies are strictly necessary for the platform to function and are deleted when you close your browser or log out. We do not currently use tracking or advertising cookies.

Your Rights Under GDPR

If you are based in the EU or EEA, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can update or correct your data via your profile settings.
  • Right to erasure: You can request deletion of your account and associated data.
  • Right to restriction: You can ask us to limit how we process your data in certain circumstances.
  • Right to data portability: You can request your data in a portable format.
  • Right to object: You can object to processing based on legitimate interests.

To exercise any of these rights, please contact us at [contact@email.com]. We will respond within 30 days.

Children's Privacy

Provil Sportslab is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data without parental consent, please contact us and we will remove that data promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the date at the top of this page will be updated. Continued use of the platform after changes are published constitutes acceptance of the updated policy.

Contact

For any questions or requests relating to this Privacy Policy or your personal data, please contact us at: [contact@email.com]