Privacy

Who is responsible

Cantera+ is operated by Howard Nedd, registered with the Dutch Chamber of Commerce (KvK) under number 83804145, trading as Cantera+. You can reach us at hello@canteraplus.com.

We play two different roles, and the difference matters for your rights. For the accounts people create with us - an admin, a coach or a parent signing up - we are the controller, because we decide what an account needs in order to work. For the squad information an academy records inside Cantera+, the academy is the controller and we are its processor: the academy decides who is on its roster and what it writes down, and we store and serve it on their instructions.

In practice, if you want something about your account changed, ask us. If you want something about a child's record changed, ask the academy, and we will help them do it.

What we hold about account holders

When you create an account we store:

• Your name, as you enter it, so coaches and parents can see who posted something
• Your email address, which is how you sign in and how we send you confirmation and password emails
• Your password, which is stored only as a cryptographic hash - we cannot read it, and neither can anyone else
• A push notification token if you allow notifications, so your device can be sent an alert
• Which academies you belong to and your role in each one

What an academy holds about a player

An academy records the minimum needed to run a squad:

• The player's name
• Their squad, shirt number and position
• Whether they attended each training session or match, and if excused the reason the coach was given
• After a match, the final score, a short note the coach may add, and a coach's performance rating for each player who played
• Optionally, a parent's email address, used only to link that parent's account to their child

What we deliberately do not collect

We do not ask for a child's date of birth. A squad called U13 already tells a coach everything they need about age, so the date adds nothing and would make every record more sensitive than it has to be.

We do not collect photographs, video, location data, health or medical information, or anything about a child's background.

Children do not have accounts. A child cannot sign in to Cantera+. Only adults - admins, coaches and parents - hold accounts.

This website sets no cookies, runs no analytics, and carries no trackers or advertising. Nobody is profiled, and nothing about you is sold or shared for marketing by us or anyone else.

Why we are allowed to hold it

For account data, our basis is the performance of a contract: you asked us to provide the service, and an account is how we do that. We also rely on our legitimate interest in keeping the service secure and working.

For squad data, the academy decides its own basis and is responsible for having one. We only act on their instructions.

Who else touches the data

We keep the list of companies involved as short as we can, and everything sits inside the European Union:

• Supabase - the database and sign-in system that holds everything described above, hosted in the EU
• Resend - sends the confirmation and password emails, in its EU (Ireland) region
• Cloudflare - runs our domain and forwards mail sent to hello@canteraplus.com
• Netlify - hosts this website, which holds no personal data at all
• Expo - delivers push notifications to your device, which requires Apple or Google to pass the message on

How long we keep it

Account data is kept while the account exists. Squad data is kept while the academy's account exists.

Announcements are deleted automatically twelve months after they are posted - once a notice has aged out, nobody can see it again.

When an account is deleted, we remove it and its data within 30 days. Attendance records, match ratings and lineup slots attached to a removed player are deleted with them.

Your rights, and how to use them

Under the GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop using it, and object to how we use it. You can also ask for it in a portable form.

You can delete your own account from inside the app at any time: Me, then Delete account. That removes your account and the personal data attached to it.

For anything else, email hello@canteraplus.com and we will respond within 30 days. If a request concerns a child's record, we will work with the academy that controls it.

If you think we have handled your data badly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl. You can complain to them without asking us first.

Changes to this page

If we change what we collect or why, we will change this page and update the date at the top. If a change materially affects you, we will tell you in the app rather than hoping you re-read this.