Privacy policy

Data controller

Raso Store, sole proprietorship of Pierre Rasoanaivo, 28 rue de Milan, 76330 Port-Jérôme-sur-Seine, France — raso.store.flag@gmail.com. Raso Store has not appointed a data protection officer (not required for its activity): for any question, write to this address.

Data processed

• Nothing is stored on the server: no account, no form.
• Only your preferences (language, theme) and, if you install the app, an offline copy of the pages are kept in your browser.

Purposes and legal bases

• Displaying the Raso Flag portal and its links to the apps: Raso Store’s legitimate interest (GDPR Article 6(1)(f)).
• Server security: legitimate interest (Article 6(1)(f)).

Retention periods

• No data kept on the server.
• Preferences: in your browser, until you erase them.

Who can access it

Nobody: the portal collects no personal data. Each app (Playbook, Arbitre, Tournoi) has its own policy, linked from its footer.

Recipients

Your data is only accessible to the people listed above, to Raso Store (service administrator) and to the host Hostinger, a processor that provides the server. No data is sold, rented or used for advertising; no advertising tracker or audience measurement tool is used; the pages load no resource from a third-party site.

Donations go through SumUp, on its own website: Raso Store never receives your bank details; SumUp processes them under its own responsibility.

Hosting and transfers

Data is hosted on a server located in France (European Union), rented from HOSTINGER INTERNATIONAL LIMITED, 61 Lordou Vironos str., 6023 Larnaca (Cyprus, European Union). No data is transferred outside the European Union.

IP addresses and technical logs

The portal does not keep your IP address: it keeps no counter and no visit log. The HTTPS relay does not record requests, and technical logs (error messages, normally without IP addresses) are size-limited and replaced automatically. Legal basis: legitimate interest (service security).

Security

Encrypted connections (HTTPS), passwords and codes stored as hashes (scrypt, SHA-256), random session tokens stored hashed, HttpOnly and Secure cookies, rate limiting, restricted and logged administrator access. Backup copies are made on the same server during updates; they are deleted no later than 6 months after creation.

Your rights

Under the GDPR (Articles 15 to 22) and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your data, to withdraw your consent at any time, and to give instructions on what happens to your data after your death. To exercise them, write to raso.store.flag@gmail.com (proof of identity may be requested in case of doubt): you will receive an answer within one month.

Complaint

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority: https://www.cnil.fr

Minors

No date of birth or sensitive data is requested. Accounts are intended for responsible adults (organisers, coaches, club officials); a minor under 15 may only create an account with the consent of a holder of parental authority. Names or numbers of players, who may be minors, are entered by the club or organisers under their responsibility: enter only what is necessary (first name or number) and inform the players and their legal guardians.

Cookies

Only strictly necessary trackers are used: see the Cookies and storage page.

Raso Store shop

For orders placed on the shop, see its own privacy policy: https://rasostore.fr/policies/privacy-policy

Changes

This policy may change (new features, legal obligations). The date of the last update is shown at the bottom of the page; any significant change is announced in the app’s news.