Privacy policy
Last updated: 2026-10-23
Data controller
[legal_owner] (Tax ID [legal_tax_id]), [legal_address]. Contact: administrator@cyclingforfun.org.
What data we process
- Account data: username, team name, e-mail address, password (stored hashed, never in plain text), chosen language and country, sign-up date.
- Game data: your team, riders, tactics, results, achievements, the messages you send to other players and guestbook comments.
- Technical data: IP address at sign-up and at your last login, the browser you used to sign up and the date of your last login.
- Supporters: if you make a contribution, the payment is handled by PayPal; we only receive the payment notice (name, e-mail and transaction reference), never your bank details.
Why, and on what legal basis
- Providing the game (your account and team, in-game messages, public rankings with your username and team): performance of the contract, i.e. the terms of use you accept when signing up.
- Security and fair play (preventing multiple accounts, cheating and abuse by comparing IP addresses between accounts): legitimate interest of the owner and of the other players.
- Usage statistics (Google Analytics), to learn which parts of the game are used and improve them: your consent, given or refused in the cookie notice.
- Advertising (Google AdSense): your consent, given or refused in the cookie notice. Without consent Google may only show non-personalised or limited ads.
- Handling supporter contributions: performance of the contract and legal obligations.
Who receives it
- The site's hosting provider, as a processor.
- Google (AdSense and Analytics) for advertising and statistics, according to your cookie choice. See how Google uses data.
- PayPal, if you make a contribution.
Google and PayPal may process data outside the European Economic Area under the safeguards of the GDPR (EU-US Data Privacy Framework or standard contractual clauses). We never sell your data.
How long
- Account data, while you keep your account. If you delete it, your personal data is erased or anonymised; the sporting results of your former team may remain in historical rankings without anything that identifies you.
- IP addresses and login history are deleted automatically after 365 days.
- Inactive accounts are removed in the end-of-season processes.
Your rights
You can ask for access, rectification, erasure, restriction or portability of your data, or object to its processing, by writing to administrator@cyclingforfun.org. You can delete your account yourself at any time from Delete my account. If you think your request was not handled properly you can complain to the Spanish Data Protection Agency (AEPD) or the authority of your country.
Minors
You must be at least 14 years old to sign up. If you are younger you need the consent of a parent or guardian.
Security
Passwords are stored with a secure hashing algorithm, the game uses protected sessions and only administrators can see the technical data of accounts.