Privacy Policy

Last updated: 19 June 2026

1. Controller

The controller responsible for data processing in Dartshift is:

2. About Dartshift

Dartshift is a web app for managing dart leagues, tournaments, players, games, results, standings and schedules.

The app is intended for invited league admins and players. Private app data is not intended to be publicly accessible without an account.

3. Categories of personal data processed

Depending on how the app is used, Dartshift may process the following data:

• Email address
• Password and authentication data
• Player name or Autodarts nickname
• User account identifiers
• Player-to-user assignment data
• League, tournament, schedule, game, result and standing data
• Login/session data
• Password reset data
• Technical data such as IP address, timestamps, browser/request data and server logs, where processed by hosting or authentication providers
• Discord authentication data if Discord login is used

Dartshift does not currently request phone numbers, profile pictures, billing data or payment data.

4. Purposes of processing

Personal data is processed for the following purposes:

• Creating and managing user accounts
• Providing login and authentication
• Linking users to player profiles
• Managing leagues, tournaments, players, schedules, games, results and standings
• Showing authorized users their relevant app data
• Providing admin and player functionality
• Securing the app and preventing misuse
• Handling password reset and account recovery
• Troubleshooting technical issues
• Responding to support, feedback or deletion requests

5. Legal bases

Where applicable, data is processed on the following legal bases under the GDPR:

• Art. 6(1)(b) GDPR: processing necessary to provide the app and user account functionality
• Art. 6(1)(f) GDPR: legitimate interests, including app security, abuse prevention, troubleshooting, maintaining league history and ensuring the integrity of league records

6. Hosting, database and authentication providers

Dartshift uses external providers to operate the app:

7. Cookies and session technologies

Dartshift uses technically necessary cookies and session technologies for login, authentication, session handling, protected route access, token refresh and password reset security.

This includes Supabase authentication/session cookies and a Dartshift cookie named sb-recovery-pending, which is used during password reset and expires after 30 minutes.

Dartshift currently does not use analytics cookies, marketing cookies, advertising pixels or newsletter tracking.

More details are available in the Cookie Policy.

8. Support communication

Users can contact Dartshift by email or Discord.

If users contact Dartshift by email, the message and contact details are processed to respond to the request.

If users contact the operator through Discord, Discord may process message and account data according to Discord's own systems and policies.

9. Data retention

Account and app data is generally kept for as long as the account or app use relationship exists.

Users can request account deletion from /my. The request does not delete the account immediately: the user must confirm deletion by email, and the confirmation link expires after 24 hours.

During deletion, personal data may be deleted or anonymised. This may include the Supabase Auth account, profile/player data, email-linked data, user-scoped games, league join requests, league invites created by the user, and Discord link data.

Active league or tournament participation may be converted to a withdrawal. Historical competition records may remain in anonymised form to preserve league and tournament integrity.

10. Account deletion and right to erasure

Users can request account deletion from /my. In the Danger Zone, the user types DELETE and submits the request. Dartshift then sends a confirmation email; deletion only continues after the user opens the confirmation link. The link expires after 24 hours.

The raw confirmation token is not stored. Dartshift stores only a hashed token for the pending deletion request.

After email confirmation, personal data may be deleted or anonymised. This may include the Auth account, profile/player data, email-linked data, user-scoped games, user-scoped requests or invites, and Discord link data. Active league or tournament participation may be converted to withdrawal. Historical competition records may remain in anonymised form to preserve league and tournament integrity.

If a Discord account is linked, Dartshift may attempt to remove the user from the Dartshift Discord server after app-level deletion succeeds. Discord cleanup is best-effort and is not guaranteed.

A final confirmation email is sent before the Supabase Auth account is deleted. Privacy or account deletion questions can be sent to dartshift@outlook.com.

11. No analytics, marketing or payments

Dartshift currently does not use analytics tools, marketing tools, advertising tools, newsletters or payment processing.

12. User rights

Under the GDPR, users may have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability, where applicable
• Right to lodge a complaint with a competent data protection authority

To exercise these rights, contact: dartshift@outlook.com

For North Rhine-Westphalia, the competent supervisory authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

13. No automated decision-making

Dartshift does not currently use automated decision-making or profiling that produces legal or similarly significant effects.

14. Changes to this Privacy Policy

This Privacy Policy may be updated when Dartshift, its providers or legal requirements change. The current version will be available on this page.