Last updated: May 2026. Effective: May 2026.
Summary
Afghan Sports Federation (ASF) runs this platform to connect Afghan athletes, teams, coaches, and fans across the world. We collect only what we need to run the service, never sell your data, and give you tools to download or delete your information at any time.
Who we are
Afghan Sports Federation is a non-profit community organization. The data controller is the ASF Board, contactable at privacy@afghansportsfederation.com. The platform is operated from Northern Virginia, USA.
What we collect
Information you give us:
- Account: email, password (stored hashed via Supabase Auth), date of birth for age verification.
- Profile: full name, username, bio, photo, country, state or province, city, sport, position, free-agent status.
- Optional: phone number, links to your other social accounts.
- Content you create: reels, comments, polls, match results, messages, team or event pages.
- Parental consent records, when applicable, for members aged 13 to 15.
Information collected automatically:
- Standard server logs: IP address, user agent, requested URL, timestamp. Retained 90 days.
- Aggregate usage metrics via Plausible Analytics (cookieless, no cross-site tracking).
- If you opt in: web push subscription endpoint, used only to deliver notifications you asked for.
We do not collect:
- Government IDs, social security numbers, or passport numbers.
- Financial account information. Payments, when offered, are handled by third-party processors.
- Precise GPS location. Country and city are entered by you.
Why we use it
- Run the service: profile pages, teams, events, tournaments, reels, messaging.
- Notify you about activity you opted in to (mentions, follows, match updates).
- Moderate content and enforce community standards (see Trust & Safety below).
- Comply with legal obligations and respond to lawful requests.
- Improve the platform via anonymous, aggregate analytics.
We do not use your data for advertising or sell it to third parties.
Legal bases (GDPR)
- Contract: to provide the service you signed up for.
- Consent: marketing emails, web push notifications, optional profile fields.
- Legitimate interest: security, abuse prevention, basic analytics.
- Legal obligation: responding to lawful requests, age and consent recordkeeping.
Service providers
- Supabase — database, authentication, file storage. EU and US regions.
- Vercel — application hosting and edge delivery.
- Resend — transactional email delivery.
- Mux — video ingest and streaming, when reels are uploaded.
- Cloudflare — content delivery network and DDoS protection.
- Plausible — privacy-respecting analytics.
- Sentry — error tracking; we strip personal data before transmission.
Each provider is contractually bound to handle your data only for purposes we authorize. International transfers are covered by Standard Contractual Clauses.
Your rights
You can:
- Access and download all your data from Profile > Edit profile > Data export.
- Correct inaccurate information directly in your profile settings.
- Delete your account from Profile > Edit profile > Delete account. Deletion is soft for 90 days, then permanent.
- Restrict processing or object to specific uses by emailing privacy@afghansportsfederation.com.
- Withdraw consent for marketing emails or web push at any time.
- Lodge a complaint with your local data protection authority.
We respond to verified requests within 30 days.
Children and youth
The platform is not intended for children under 13. Members aged 13 to 15 must provide a parent or guardian email at signup; we email the guardian a consent link that must be confirmed before the account becomes active. Guardians can revoke consent at any time by emailing safeguarding@afghansportsfederation.com and the account will be deactivated immediately.
For members under 18 we additionally:
- Default privacy settings to the most restrictive option.
- Disable direct messages from non-followed adults.
- Apply enhanced moderation to content involving minors.
Trust & Safety
We log moderation actions (reports, strikes, suspensions, appeals) for safety and accountability. Records of harassment, abuse, or safeguarding violations are retained even if you delete your account, in line with our duty to protect the community.
Cookies
We use strictly necessary cookies for sign-in, language preference, and security. Analytics is cookieless. We do not run third-party advertising trackers. You can manage preferences from the Cookie settings link in the footer.
Retention
- Active account data: kept while your account is active.
- Server logs: 90 days.
- Soft-deleted accounts: 90 days, then permanent purge.
- Safeguarding records: minimum 7 years, longer if required by law.
Changes to this policy
If we materially change this policy, we will notify active members at least 30 days in advance via email and an in-app banner. The current version date is at the top of the page.
Contact
Privacy questions: privacy@afghansportsfederation.com
Safeguarding: safeguarding@afghansportsfederation.com
Data protection requests: dpo@afghansportsfederation.com