Privacy policy for Sideline: Spons

Version 2026-10-19. The Norwegian version applies if the two differ.

Who is responsible

Braastad Software og App Utvikling, a Norwegian sole proprietorship (enkeltpersonforetak), org. no. 938 698 503, Brokvollveien 12, 3032 Drammen, Norway, is the controller of the personal data in Spons. Contact: support@sideline.no.

Teams use Spons for their own fundraiser. Information a team enters about its participants (for example recorded payments) is processed to run that team's fundraiser.

What we store

• Account: name, email address, language and settings (for example whether you want the weekly summary).
• Fundraiser: which teams you take part in, your role, your pledge (amount per goal, win and clean sheet, and any caps), what it has come to, and payments the team has recorded.
• Team: team name, match results, season and the team's payment link or account number.
• Subscription: the team's plan, who bought it and the email used for the purchase (for the order confirmation and reminders that the subscription is running), the consent to start before the withdrawal period ends, and references to the customer and subscription at Stripe. Card details are stored only by Stripe, never by us.
• Technical: sign-in sessions and a log of important changes (without names) to fix errors and prevent misuse.

We store no information about children apart from team names and match results. We use no cookies for tracking or advertising; the browser only remembers your language, light/dark mode and your sign-in.

Why, and on what basis

We process the data to provide the service you asked for (contract, GDPR Art. 6(1)(b)): your account, the pledge calculations, notifications and the weekly summary. Subscription data is also processed to meet accounting obligations (Art. 6(1)(c)).

Who sees what

• Participants see the team's results and totals, and their own amounts. They do not see what others have given.
• The team's administrators see participants' names, pledges and payments so they can run the fundraiser.
• We never sell data or share it with advertisers.

Processors

• Supabase (database and sign-in, stored in the EU)
• Cloudflare (the website)
• Resend (email)
• Stripe (subscription payments)

All have a data processing agreement with us. Transfers outside the EEA only happen on a lawful basis, such as the EU standard contractual clauses.

How long

Data is kept as long as you have an account. If you delete your account, we delete your personal data within 30 days. The team's results and totals remain without your name. Accounting records for subscriptions are kept as long as the law requires.

Your rights

You can ask for access, correction, deletion, restriction and data portability, and object to the processing. Much of this you can do yourself in Spons; otherwise contact support@sideline.no. You can complain to the Norwegian Data Protection Authority (datatilsynet.no).