This Privacy Policy describes how LineupDesigner (operated by MP Ton & Produktion AB, org. nr 559066-1921, Sweden) collects, uses, and protects your personal data. We comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), and the US Children's Online Privacy Protection Act (COPPA).
MP Ton & Produktion AB is the data controller for the processing of your personal data. Contact: privacy@lineupdesigner.com. Our registered address is in Sweden.
LineupDesigner is operated by MP Ton & Produktion AB.
We collect the following categories of personal data:
When you publish in the coach forum, your profile name and posts are visible to other signed-in coaches with forum access, including coaches outside your own team. Reports are visible to moderators, not other members. Forum posts are stored by our existing hosting and database providers. Do not post player names or personal details. You can delete your own posts and include them in your account data export.
When you send a request through the partnership form, we process your name, your email address, your organisation, the type of partnership and your message. We use these details only to read and reply to your request. The legal basis is our legitimate interest in replying to partnership requests (Art. 6(1)(f)) or, where the request concerns an agreement with you, steps taken at your request before entering into a contract (Art. 6(1)(b)). The request is sent by email through Resend and forwarded to our inbox by ImprovMX (see section 6). Resend processes the details in the US; see section 7 on international transfers and Standard Contractual Clauses.
The request is not stored in our database, and neither the message nor your email address is written to our logs. Your IP address is used only briefly in the server's memory to limit the number of attempts and is not stored. We keep the request in our email for 12 months after we have replied to it (or received it, if we do not reply) and then delete it, unless it leads to an agreement. If it does, the details are handled as described in section 8. Resend keeps a copy of the sent message for a limited time under its own retention policy, and ImprovMX stores the email only temporarily until it has been delivered. You have the rights described in section 9 and can contact privacy@lineupdesigner.com to exercise them.
We process your personal data based on the following legal bases under GDPR Article 6:
We use the following third-party services that may process personal data as data processors on our behalf. We have Data Processing Agreements (DPAs) in place with each provider to ensure your data is handled in accordance with GDPR:
Your data is primarily stored in EU-based servers (Supabase). Some processing occurs in the US through Vercel (hosting), Stripe (payments), and Resend (email). These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, and each provider maintains appropriate certifications (SOC 2, PCI DSS). ImprovMX (email forwarding) receives email in the EU but may deliver it onward through servers in the US; that transfer is protected by the Standard Contractual Clauses in ImprovMX's data processing agreement. By using the service from outside the EU, you consent to the transfer of your data to Sweden and the EU.
We store your data as long as your account is active. Upon account deletion, personal data is removed within 30 days. Exceptions: billing records are retained for 7 years as required by Swedish accounting law (Bokföringslagen), and anonymized aggregate data may be retained indefinitely. Stripe retains payment data according to their own retention policy.
Under GDPR, you have the following rights. To exercise them, contact privacy@lineupdesigner.com. We will respond within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
We do not sell or share your personal information as defined by the CCPA/CPRA. We do not use your data for cross-context behavioral advertising. To exercise your rights, contact privacy@lineupdesigner.com.
If you are a Canadian resident, you have rights under PIPEDA including the right to access your personal information, challenge its accuracy, and withdraw consent for its collection and use. We collect, use, and disclose personal information only for purposes a reasonable person would consider appropriate. To file a complaint, contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).
LineupDesigner accounts are intended for adult coaches and team managers (18+). The service is not directed at children. We do not knowingly collect personal information directly from children under 13 (COPPA) or under 16 (GDPR).
Coaches may enter player data for minors (names, birth years, jersey numbers) as part of team management. The coach, as the account holder, is responsible for obtaining verifiable parental consent before entering such data. If we learn that a child under 13 has created an account, we will promptly delete it. Parents can contact privacy@lineupdesigner.com to request access to or deletion of their child's data.
We use only essential cookies required for the service to function:
With your consent, we use Vercel Web Analytics for visitor statistics without analytics cookies. We do not send URL parameters, invitation codes or player details in pageviews. You can withdraw consent through the cookie settings in the footer.
We implement industry-standard security measures including: encrypted data transfer (TLS/HTTPS), encrypted data at rest, row-level security (RLS) in our database limiting access to users’ own data and content they are authorized to access, secure authentication via Supabase Auth, and regular security audits. Payment data is handled exclusively by Stripe (PCI DSS Level 1). Despite these measures, no system is 100% secure. If you discover a security vulnerability, please report it to security@lineupdesigner.com.
We may update this policy as needed. For material changes, we will notify you via email at least 30 days before they take effect and publish the updated policy here with a new effective date. Continued use of the service after the effective date constitutes acceptance of the updated policy.
For questions about how we handle your personal data, contact our Data Protection Officer at privacy@lineupdesigner.com
You have the right to file a complaint with your local data protection authority: Integritetsskyddsmyndigheten/IMY (Sweden), your national DPA (EU), the Office of the Privacy Commissioner (Canada), or the California Attorney General (US/California).