Privacy policy
Last updated: 8 October 2026
Matchly helps you run leagues and tournaments. To do that, we process some personal data. This policy explains what we process, why, how long we keep it and what your rights are. We keep it as short and plain as we can.
Who is responsible
Matchly is run by Jens De Muynck, Deinze, Belgium. We are the controller of the personal data described below.
For any question about your data, email hello@matchly.be.
What we process, and why
Your account
When you create an account we store your name, email address, a securely encrypted version of your password (we can't read it), your language and whether you confirmed your email address.
We need this to give you an account, let you log in, and send you the emails that belong to it, like confirming your address or resetting your password. Legal basis: the agreement between you and us (our terms of use).
Competitions you organize
As an organizer you enter the names of participants (players, pairs or teams), optionally the names of their players, and the results of matches, with dates, times and venues if you add them.
These names and results are shown on the competition's public page and player pages, to anyone who has the link. They are not shown in search engines like Google: we ask search engines not to index these pages.
Legal basis: the agreement with you as an organizer, and our legitimate interest in providing a working competition tool. As an organizer you are responsible for only entering names of people who agree to take part. See also our terms of use.
Score keeper links
Anyone with a competition's secret score keeper link can enter results without an account. We don't store who used the link. You can make a new link at any time, which stops the old one from working.
Feedback
When you send feedback from the app, we store your message, the type (idea, problem or question), the page you were on, and a link to your account, so we can read it and reply to you by email. Legal basis: our legitimate interest in improving Matchly and answering your questions.
Invites
While Matchly is not open to everyone yet, we keep track of invite links: a short note about who an invite is for, and which account used it. Legal basis: our legitimate interest in letting people in before Matchly opens to everyone.
Donations
If you donate through Ko-fi, Ko-fi shows us your name (or the name you choose), the amount and your message, if you add one, in our Ko-fi account. Matchly itself doesn't store anything about donations. Ko-fi handles the payment under its own privacy policy.
Technical data
When you use Matchly, our hosting provider and our own servers process technical data: your IP address, your browser type and the pages you request. Your login session is stored on our servers with your IP address and browser type. We use this to keep Matchly working and secure, for example to stop abuse. Legal basis: our legitimate interest in a secure, working service.
The free bracket generator
The free bracket generator keeps your bracket in your own browser only (in what's called local storage). Nothing is sent to us until you choose Save and share. Then the bracket becomes a normal competition in your account, as described above.
Cookies and similar technologies
We only use what Matchly needs to work. No advertising, no tracking, no analytics cookies.
| Name | What it does | How long |
|---|---|---|
matchly_session |
Keeps you logged in and remembers your session | 2 hours |
XSRF-TOKEN |
Protects forms against misuse from other websites | 2 hours |
locale |
Remembers the language you chose | 1 year |
remember_web_… |
Keeps you logged in for longer, only if you tick "Remember me" | until you log out |
matchly.generator (local storage) |
Keeps your bracket in the free generator | until you remove it |
Because these are strictly necessary for the service, we don't ask for permission to use them.
Who else receives your data
We don't sell your data and we don't share it for advertising. We use a few service providers who process data for us, under our instructions:
- Laravel Cloud (hosting), with servers in Frankfurt, Germany. Laravel Cloud uses Cloudflare to deliver the website quickly and securely around the world.
- Combell (Belgium), which sends our emails.
Some of these providers are companies based outside the European Union, or work with such companies. Where your data may be processed outside the EU, this happens with the safeguards the GDPR requires, such as the European Commission's standard contractual clauses.
How long we keep your data
- Your account and competitions: as long as your account exists. When you delete your account (Settings → Delete account), we delete your account and all your competitions, participants and results.
- Feedback: kept after you delete your account, but no longer linked to you.
- Login sessions: at most 2 hours after your last activity.
- Technical logs: a few days at most.
- Backups: deleted data can remain in our backups for up to 7 days before it's gone for good.
Your rights
You have the right to see the personal data we have about you, to have it corrected or deleted, to limit or object to how we use it, and to receive it in a portable format. You can delete your account yourself at any time in your settings. For everything else, email hello@matchly.be; we answer within one month.
If you think we're not handling your data properly, you can file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be. We'd appreciate hearing from you first, so we can try to fix it.
Minimum age
Accounts are meant for people aged 16 and older. Organizers may enter the names of younger participants, for example in a youth competition, if they have permission from those participants or their parents.
Changes
If we change this policy, we'll update the date at the top. If a change matters for you, we'll let you know by email or in the app before it takes effect.