Privacy Policy

You can use this site without giving up anything. The 5-Keys PDF and the occasional notes from Thomas need your email — only your email. The contact form needs whatever you choose to put in it. Nothing is sold. Nothing is shared except with the small set of named tools used to deliver the email and host the site, listed in §05 below.

This website is operated by Thomas D. Dooley, acting as the data controller within the meaning of the EU General Data Protection Regulation (GDPR) and equivalent laws elsewhere. Full operator details — including postal address and statutory disclosures under § 5 TMG and § 55 RStV — are on the Impressum page.

Not collected: location beyond country, ad-network identifiers, behavioural profiles, social-media handles, or anything you didn't type into a form on this site.

Each category of data has a defined retention window, after which it is deleted or aggregated beyond identification.

• Email list (PDF + follow-ups). Kept until you unsubscribe. One click in the footer of every email. After unsubscribe, your address is moved to a suppression list (so you don't get re-added by accident) and deleted from the active list.
• Contact-form messages. Kept for as long as the conversation is useful — typically no longer than 24 months — and then archived to encrypted offline storage.
• Server logs. 14 days, then rotated.
• Analytics. Aggregate counts only; no per-visitor records.

Legal basis under GDPR Article 6(1): consent for the email list (a); contract / legitimate interest for replying to your direct inquiries (b, f); legitimate interest for security logs and aggregate analytics (f).

A small set of named processors, each operating under a data-processing agreement with us:

Your data is not sold, rented, or licensed to anyone, ever. We will not transfer it to a new operator without notifying you first and giving you a chance to delete it.

Under GDPR (EU/UK), CCPA (California), and equivalent laws elsewhere, you have the right to ask us:

1. What personal data we hold about you.
2. To correct anything that is inaccurate or incomplete.
3. To delete it — the "right to be forgotten."
4. To export it in a portable, machine-readable format.
5. To restrict or object to specific processing.
6. To withdraw consent, at any time, for anything we do under consent.
7. To lodge a complaint with your supervisory authority.

Email [email protected] from the address we hold for you. We respond within 30 days, typically within five. There is no charge for a reasonable first request.

HTTPS everywhere; TLS 1.3 with modern ciphers; HSTS preload. Two-factor authentication on every processor account. Access to personal data is limited to Thomas and one contracted operator. In the event of a personal-data breach affecting you, we will notify you within 72 hours of becoming aware of it, in line with GDPR Article 33.

This site is intended for adults — parents, coaches, organizers — making decisions on behalf of players. We do not knowingly collect personal data from anyone under 16. If a minor has signed up, please email [email protected] and we will remove the record.

When we update this policy, we change the version number and effective date at the top, and post a one-line note in the change log below. Material changes are also announced in the next email.

For anything in this document — questions, corrections, data requests, or disputes: