Privacy statement
What Spotleft keeps about you, why, who sees it and how to delete it. Last updated 24 September 2026.
Who is responsible
Spotleft is run by Emiel Vanderghinste. Questions about your data, or a request to see, change or delete it: email emiel.vanderghinste@gmail.com.
What Spotleft keeps, and why
- First name
- So other players know who they play with.
- Email address
- To log in, and for the emails Spotleft sends you: a reset link, a cancelled session, new chat messages.
- Password
- To log in. Only a scrambled version (a hash) is stored, never the password itself.
- Date of birth
- To check you are at least 16. Other players see your age, not the date.
- Gender and languages
- So other players know a bit about who they play with.
- Level per sport
- So players can see who plays at which level.
- Sports card answer
- Whether you said you have a KU Leuven sports card, so Spotleft asks only once.
- Email setting
- Whether you want an email about new chat messages.
- Sessions
- The sessions you create (sport, day, time, number of players, booking, court, note) and the ones you join.
- Chat messages
- What you write in the chat of a session, and when you last read each chat.
- Reports
- When you report a problem: who it is about, the reason and what you wrote.
- Login
- A random code in one cookie, so you stay logged in (30 days). Only a scrambled version is stored.
- Failed logins and reset requests
- The email address and IP address, to stop people guessing passwords.
Spotleft uses this only to run the platform. It does not sell it, does not show ads and has no tracking or analytics cookies.
Who sees what
- Everyone, also without an account: the sessions (sport, day, time, place, free spots, booking, court and note) and the first name of the organiser. Players show as empty bubbles.
- Everyone with an account: the first names of who plays in a session, and under See who's playing their age, gender, languages and level for that sport.
- The players of a session: its chat, with the first name of who wrote each message.
- Nobody else: your email address, date of birth, password, sports card answer and email setting are never shown to other users.
- Emiel Vanderghinste can see all data, to keep Spotleft running. A report is emailed to him together with the chat of that session, so he can judge it.
- Service providers: the data is stored on a server of OVHcloud in Germany. Emails go out through Brevo, which gets your email address and the text of the email.
How long it is kept
- Your account and profile: until you delete your account.
- Your login: 30 days, or until you log out.
- A reset link: 1 hour, or until it is used.
- Failed logins and reset requests: at most 24 hours.
- Chat messages: 30 days after the session, then they are deleted. A chat closes at the end of the day of its session.
- Sessions, who played in them, and reports: 12 months after the session, then they are deleted.
Deleting your account
Go to Account and choose Delete account. You confirm with your password. Then:
- Your name, email address, password, date of birth, gender, languages, levels, settings and logins are deleted.
- Sessions you organise that have not started yet are cancelled, and the players who joined get an email.
- You are removed from every session you joined.
- Your chat messages stay, so the conversation still makes sense for the others, but they show as from "Deleted user". Reports stay too, without your name.
Can't log in anymore? Email emiel.vanderghinste@gmail.com and your account is deleted for you.