Privacy, legal notice and cookies
All XOGA legal information grouped in a single page.
Privacy policy
This policy explains clearly how we process personal data on the XOGA website and app.
Controller identity
Controller: XOGA
Contact email: xogaapp@gmail.com
Location: Spain
Data we process
- Account and authentication data: email, encrypted password or Google/Apple sign-in identifiers.
- Profile data: name, surname, nickname, birth date, gender, profile photo, description, sports, preferences and registration date.
- Sports activity data: games created or joined, schedules, spots, teams, scores, history, ratings and participation in tournaments or matches.
- Location data: approximate or precise location when enabled by the user to show maps, find nearby matches, suggest fields or open directions.
- Communications and moderation: chat messages, contact forms, reports, blocks, incidents and support communications.
- Technical data: session identifiers, authentication tokens, device identifiers for push notifications, language, app preferences and data needed for security and operation.
Purposes
- Create and manage user accounts.
- Organize matches, teams, spots, invitations, shared links and related chats.
- Display maps, sports fields and nearby matches.
- Send operational notifications about matches, chats, changes, cancellations, removals or reminders.
- Manage profile photos, preferences, history, ratings, reports, blocks and moderation tools.
- Reply to enquiries sent from the website or app.
- Prevent abuse, fraud, unauthorized access and uses that are harmful to the community.
Legal basis
We process data needed to provide the service on the basis of performance of the user relationship. Certain processing, such as commercial communications or optional permissions for location, photos or notifications, is based on consent. We may also process data under legitimate interest to maintain security, prevent abuse and moderate the community, and under legal obligation where applicable.
Providers and recipients
XOGA does not sell personal data.
To provide the service we use technical providers that may process data on behalf of XOGA, including Supabase for authentication, database, storage and backend functions; Firebase Cloud Messaging for push notifications; Google Maps, Google Places and Apple Maps for maps, place search and directions; Google and Apple for sign-in; Resend for contact emails; and Cloudflare for website hosting and security.
International transfers
Some providers may process data outside the European Economic Area. Where required, safeguards under data protection law will be used, such as adequacy decisions or standard contractual clauses.
Retention
Data is kept while the account remains active or while it is needed to provide the service. The user may request account deletion; in that case related data will be deleted or anonymized except data that must be kept for security, abuse prevention, legal claims or legal obligations. Messages, reports, blocks, notification events and technical logs are kept for the time needed to operate and protect the platform.
User rights
The user may request access, rectification, erasure, objection, restriction, portability and withdrawal of consent by writing to xogaapp@gmail.com. The user may also lodge a complaint with the Spanish Data Protection Agency if they believe processing does not comply with applicable law.
Security
We apply technical and organizational measures to protect data, including authentication, access control, database security rules, secure token storage and permission minimization. No system is infallible, so we recommend protecting login credentials and keeping the device updated.
Legal notice
In compliance with Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), the following information is provided:
Service owner
Owner: XOGA
Contact email: xogaapp@gmail.com
Location: Spain
Purpose
This Legal Notice governs access to and use of the XOGA website and app, whose purpose is to help users organize sports games, teams, chats, fields, invitations and related activities.
Terms of use
The user agrees to use XOGA lawfully, respectfully and in accordance with these terms. It is not permitted to publish offensive, false, illegal or discriminatory content, content that infringes third-party rights, or content that interferes with service security.
Account and user responsibility
The user is responsible for the accuracy of the data provided, for keeping credentials confidential and for activity carried out from their account. XOGA may limit, suspend or cancel accounts where breaches, abuse, serious reports or risks to other users are detected.
Sports activity
XOGA facilitates organization and communication between users, but does not directly organize matches or supervise sports facilities. Each user participates under their own responsibility and must assess their physical condition, follow venue rules and act prudently.
User content and moderation
Users may create matches, messages, reports, profile photos and other content. XOGA may review, remove or block content or accounts where needed to protect the community, comply with the law or maintain the service.
Intellectual property
XOGA's own content, including texts, designs, logos, images, software and visual elements, belongs to XOGA or is used with the necessary rights. Unauthorized reproduction or exploitation is prohibited.
Third-party services
The service may integrate external providers such as Supabase, Google, Apple, Firebase, Cloudflare, Resend and map services. XOGA does not control third-party websites or services accessed by the user outside the platform.
Changes
XOGA may change the website, app, features and these legal texts to adapt them to technical, operational or legal changes. The current version will be the one published on this website.
Applicable law and jurisdiction
The relationship between XOGA and the user is governed by Spanish law. Where legally permitted, the parties submit to the courts and tribunals of Spain.
Cookie policy
This policy explains the use of cookies and similar technologies on the XOGA website and app.
What they are
Cookies are small files or identifiers stored in the browser. In a mobile app there are similar technologies, such as local storage, secure storage, session identifiers, tokens or device preferences.
Necessary technologies
XOGA uses cookies and similar technologies that are necessary to provide the service and keep it secure.
- Keep the user signed in and authenticate the account.
- Save preferences such as language, theme, location settings and notification settings.
- Protect the account and prevent unauthorized access.
- Enable shared links, password recovery, navigation and basic operation of the website and app.
Third-party technologies
When using specific features, technical third parties may be involved: Supabase for authentication, database and storage; Firebase for push notifications; Google Maps, Google Places and Apple Maps for maps and directions; Google and Apple for sign-in; Cloudflare for hosting and security; and Resend for contact emails. These services may use technical identifiers needed to provide their function.
Analytics and advertising
XOGA does not use advertising cookies or commercial tracking cookies on the website. If non-essential analytics or advertising cookies are added in the future, the corresponding consent will be requested before using them.
How to manage them
On the website, the user may block or delete cookies from browser settings. In the app, permissions such as location, photos and notifications can be managed from device settings, and the user may sign out or delete the app to remove local data. Disabling necessary technologies may prevent XOGA from working correctly.
Updates and contact
XOGA may update this policy to reflect technical or legal changes. For any questions, the user may write to xogaapp@gmail.com.