Skip to content
Results
MTP 1 – 7 ROU F TOU 0 – 3 LAR F SAV 4 – 10 SEN F PUC 8 – 6 BEZ F PUC 9 – 12 BEZ F TOU 4 – 5 LAR F MTP 3 – 13 ROU F SAV 3 – 2 SEN F MTP 1 – 7 ROU F TOU 0 – 3 LAR F SAV 4 – 10 SEN F PUC 8 – 6 BEZ F PUC 9 – 12 BEZ F TOU 4 – 5 LAR F MTP 3 – 13 ROU F SAV 3 – 2 SEN F
Log in

Privacy Policy - Baseball TV France

Last updated: April 2026

1. Data Controller

Comité Départemental Baseball 17

Association under the 1901 Act — RNA: W1733004899

Headquarters: 20 rue de la Paix, 17300 Rochefort, France

Email: redaction@baseballtv.fr

2. Data Collected

Email, display name

Purpose: Account management — Legal basis: Contract — Duration: Account duration

First name, last name, date of birth, city

Purpose: Extended profile (optional) — Legal basis: Consent — Duration: Account duration

Avatar (photo)

Purpose: Profile customization — Legal basis: Consent — Duration: Account duration

Push token (device identifier)

Purpose: Sending notifications — Legal basis: Consent — Duration: Until deactivation

Geolocation (city, region, country)

Purpose: Stadium check-in, audience statistics — Legal basis: Consent — Duration: 12 months

Reading history

Purpose: Recommendations, ‘For You’ feed — Legal basis: Legitimate interest — Duration: Account duration

Gamification (XP, badges, challenges)

Purpose: User engagement — Legal basis: Contract — Duration: Account duration

Payment data

Purpose: Processing donations — Legal basis: Contract — Duration: Retained by Stripe only

Comments, reactions, votes

Purpose: Community interaction — Legal basis: Consent — Duration: Account duration

Content of messages and check-in photos

Purpose: AI automatic moderation — Legal basis: Legitimate interest (security) — Duration: Duration of analysis (not retained by the subcontractor)

Warnings, reports, suspensions

Purpose: Moderation and security — Legal basis: Legitimate interest — Duration: Indefinite retention (moderation history)

Preferences (team, categories, theme)

Purpose: Personalizing the experience — Legal basis: Contract — Duration: Account duration

3. Subcontractors

  • OVH SAS (server hosting) — data hosted in France (Roubaix)
  • Stripe Inc. (payments) — PCI DSS certified, data hosted in the EU. Stripe Policy
  • Expo / expo.dev (push notifications) — device token transmitted for sending notifications. Expo Policy
  • Google / YouTube (video player) — when watching live streams and replays, the user’s IP address and Google cookies are transmitted via the embedded YouTube player. Google Policy
  • Google Firebase / FCM (Android push notifications) — the device token is transmitted via Firebase Cloud Messaging for sending notifications on Android. Firebase Policy
  • ffbs.wbsc.org (World Baseball Softball Confederation) (sports data: matches, scores, standings, statistics) — no personal data transmitted. Data is retrieved read-only via the public site. WBSC Policy
  • ffbs.fr (Fédération Française de Baseball et Softball) (federal news) — retrieved read-only via public RSS feed, no personal data transmitted.
  • Gravatar / WordPress.com (default avatars) — MD5 hash of the email transmitted to display the avatar. Automattic Policy
  • Groq Inc. (AI moderation) — the texts of comments and check-in photos are transmitted to the Groq API for moderation analysis. No identifiable personal data is transmitted (no email, name, or user ID). The
    data is not retained by Groq after analysis. Groq Policy

4. Automatic Moderation and Automated Decisions

In accordance with Article 22 of the GDPR, AI analysis of content constitutes automated processing that may have consequences for the user (warning, suspension). However:

  • Suspensions can be contested to a human moderator via redaction@baseballtv.fr
  • An administrator can at any time review an automatic decision
  • The user is informed of each warning and can consult their history in their profile

5. Data Transfers Outside the EU

Some subcontractors (Expo, Groq, Stripe) may process data in the United States. These transfers are governed by:

  • The EU-US Data Privacy Framework (adequacy decision of the European Commission)
  • The European Commission’s standard contractual clauses (SCCs)

6. Your Rights

In accordance with the GDPR (EU Regulation 2016/679), you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct your inaccurate or incomplete data
  • Right to erasure: delete your account and all your data
  • Right to data portability: export your data in JSON format
  • Right to object: object to certain processing (profiling, marketing)
  • Right to restriction: restrict the processing of your data in certain cases
  • Right to withdraw consent: at any time, without retroactive effect

To exercise your rights: redaction@baseballtv.fr or directly from the Application (Profile > Privacy > My Data).

Response time: up to 30 days in accordance with the GDPR.

7. Account Deletion

You can delete your account at any time from the Application (Profile > Privacy > Delete My Account). This action is irreversible and results in:

  • The deletion of your profile and personal data
  • The deletion of your comments, reactions, and votes
  • The deletion of your gamification data
  • The anonymization of your check-ins and reading statistics

An export of your data (JSON format) is available before deletion (Profile > Privacy > Export My Data).

8. Local Storage

The Application uses local storage on your device (AsyncStorage, SecureStore) to save your preferences, session, favorites, and gamification data. This data remains on your device and is not accessible by third parties.

Sensitive data (authentication token) is stored in the device’s encrypted SecureStore (Keychain on iOS, EncryptedSharedPreferences on Android).

9. Security

We implement the following security measures:

  • Encrypted communications via HTTPS/TLS 1.2+
  • Passwords hashed with bcrypt (never stored in plain text)
  • JWT authentication tokens with expiration (30 days)
  • Sensitive data stored in the device’s encrypted SecureStore
  • Rate limiting on login attempts (5 attempts / 15 minutes)
  • Email verification by OTP code upon registration

10. Minors

The Application is intended for individuals over 13 years old. Minors aged 13 to 16 must obtain authorization from their legal representative. No data is knowingly collected from minors under 13 years old. If you notice that a minor under 13 years old has registered, contact us for immediate deletion.

11. Modifications

This policy may be updated. In case of substantial modification, users will be informed via the Application. The last update date is indicated at the top of this document.

12. Contact and Complaint

For any questions regarding your personal data:

Comité Départemental Baseball 17

Email: redaction@baseballtv.fr

Address: 20 rue de la Paix, 17300 Rochefort, France

You can also file a complaint with the supervisory authority:

CNIL — Commission Nationale de l’Informatique et des Libertés

3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

www.cnil.fr