Privacy Policy — Z League

Last updated: 9 October 2026

This policy describes how the Z League app ("the App") processes the personal data of its users and of the players in the competitions it shows. The App is a service for running fantasy football leagues.

1. Data controller

The data controller is Julien Charpié, who runs Z League as a private individual. For any privacy-related request, write to info@zleague.ch.

2. Data we collect

When you create an account and use the App, we collect:

• Email address — to create your account, authenticate you and send you service messages (e.g. email verification, password reset).
• Username — to identify you inside the leagues.
• Password — stored only in encrypted form (a hash); it is never accessible in clear text.
• Preferred language — to show the App in the language you chose.
• Device type and App version — only iOS, Android or browser and the version number, from your last visit: not the phone model. They tell us when old versions of the App can stop being supported.
• Notification identifier — only if you turn notifications on in the App: the code that lets your phone receive them and the date it was last used. We delete it when you turn notifications off, log out of the App or delete your account.
• Game data — the leagues you take part in, the squads you build, your transfers and your scores, all needed for the service to work.

We use no advertising trackers and no third-party analytics or crash-reporting SDKs. We do not collect data to track you across other companies' apps or websites.

3. Players in the competitions

The App shows match data from the leagues of the Ticino Football Federation (FTC): player name, team, appearances, goals and cards. We take it from the match reports published on the federation's matchcenter and use it only for the game: to build squads and calculate scores. We do not sell it and do not use it for anything else.

If you are a player and do not want your name to appear in Z League, write to info@zleague.ch with your name and team. Within 30 days your name is replaced by an invented nickname, unrelated to your real name, across all seasons, past and future. The teams statistics stay, but they are no longer linked to your name.

If the player is under 18, the request can also come from a parent.

4. Purpose and legal basis

We process your data solely to provide and deliver the service (account management, authentication and participation in fantasy football leagues). The legal basis is the performance of the contract/service we provide to you.

5. Retention and deletion

We keep your data for as long as your account is active. You can delete your account at any time from inside the App (Profile → Delete account). On deletion, your personal data (email and username) is removed or anonymised and the account can no longer be used or accessed. Some historical game data may be kept in anonymous form, so the tables of the leagues you played in stay intact. The full procedure, including for those who can no longer log in, is described in Account deletion.

6. Sharing your data

We do not sell or hand over your personal data to third parties. The data is hosted at Fly.io, which processes it on our behalf as a data processor. For service emails (address verification and password reset) we rely on an email provider, which processes your email address for the sole purpose of delivering those messages. If you turn notifications on, they are delivered through Google's Firebase Cloud Messaging, which processes your device identifier and the text of the notification for the sole purpose of delivering it.

7. Your rights

Under the applicable law (GDPR / Swiss Federal Act on Data Protection) you have the right to:

• access your personal data;
• ask for it to be corrected or deleted;
• object to or restrict the processing;
• receive your data in a portable format.

To exercise these rights, write to info@zleague.ch.

8. Minors

The App is not intended for children under 16. We do not knowingly collect data from children below that age; if we become aware of an account created by a child under 16, we delete it.

9. Changes to this policy

We may update this policy over time. The current version will always be available at this address, together with the date it was last updated.