🔒 Poteau Privacy Policy
Last updated: 29 September 2026
Effective: 1 November 2026
This page explains what data we use when you play with Poteau, why, who can see it, and how you stay in control of it.
We wrote it to be read. If anything is unclear, email us at contact@poteau.team and we'll get back to you.
1. Who is responsible for your data
Krank, société par actions simplifiée (SAS, a French simplified joint-stock company)
18 bis rue d'Anjou, 75008 Paris, France
SIREN (French company number): 809 684 533
EU VAT number: FR 78 809684533
Contact: contact@poteau.team
In this text, "we" and "us" means Krank.
Poteau is the app for players. Poteau Max is the app for our partner sports centres. This policy covers both, and says so when something only applies to one of them.
2. The data we use
2.1 What you give us
Data | What it's for | Legal basis |
|---|---|---|
Email address | Creating your account, signing you in, writing to you about your games and your account | Performance of the contract |
Phone number | Letting the organiser or captain of your game, and partner centres, reach you | Performance of the contract |
First name, last name, nickname, photo | So other players know who they're playing with and can recognise you on the pitch | Performance of the contract |
Sports, position, level, answers to the level quiz | Suggesting games and players at your level | Performance of the contract |
Your availability (the times and areas where you want to play) | Inviting you to games that suit you | Performance of the contract |
Messages and photos in game chats | Talking with other players | Performance of the contract |
Results, scores and goals you report after a game | Showing scores and player stats | Performance of the contract |
Date of birth | Optional. Completing your profile | Consent |
Gender | Optional. Getting the wording right in the languages where it depends on gender | Consent |
2.2 What we record when you use the app
Data | What it's for | Legal basis |
|---|---|---|
Your location | Showing you games near you. We only read it when you ask, with the app open, never in the background | Consent (your phone's permission) |
Your recent addresses and your last location | Finding your usual areas without you typing them in again | Performance of the contract |
Your games, sign-ups and drop-outs | Running the service, applying game rules, working out your stats | Performance of the contract |
Reports, post-game feedback and cards | Protecting players from abusive behaviour | Legitimate interest |
Account and device ID, app version, phone model | Keeping your account working and fixing bugs | Legitimate interest |
Crash reports | Understanding why the app crashed and fixing it | Legitimate interest |
How you use the app (screens opened, actions) | Understanding what works and what gets in the way, to improve the app | Legitimate interest |
Your first name, your profile photo and what you do in public games | Showing game activity on the poteau-app.com home page (see 4.3) | Legitimate interest |
2.3 Payments
When you pay for a game in the app or subscribe to Poteau Gold:
We never see your card numbers and we never keep them. Stripe handles them for games, Apple or Google for Gold.
We only keep the amount, the date, the payment status, the game it's for and a Stripe customer reference.
2.4 Your phone's contacts
The app still declares access to your contacts, left over from an old invitation feature. That feature is no longer used: we don't read your contacts and we don't send them anywhere. We'll remove this permission in an upcoming version.
3. Minimum age
Poteau is for people aged 16 and over. We don't check ages, but if we find out an account belongs to someone younger, we delete it.
If you're a parent and your child has created an account, email us at contact@poteau.team and we'll delete it.
4. Who sees your data
We don't sell your data to anyone.
4.1 Other players
Everyone on Poteau can see your profile: your first name or nickname, your photo, your sports, your position, your level, your stats, how many games you've played, your reliability score, your Gold status and your cards with the reason for each.
Anyone who opens a game can see who has signed up and read its chat.
The organiser or captain of a game can see your number to call or text you: in the 4 hours before the game, or at any time if they're a Gold member.
Your email address is never visible to other players.
4.2 Partner centres
Centres that use Poteau Max can search for a player by name and see their first and last name, photo, phone number, level, Gold status, last activity and the feedback other players have left. They use this to manage their games and reach players.
4.3 On the web
On the poteau-app.com home page, the "Happening now on Poteau" feed shows recent activity in public games: your first name and your profile photo, the venue, the kickoff time and what you just did, for example "Hugo joined a soccer game" or "Sarah took the last spot". Your last name, phone number, email and the rest of your profile never appear there, and neither do games organised at a private address. The feed is rebuilt every 5 minutes and only shows about twenty recent events.
We do this to show that games happen every day (legitimate interest). If you don't want to appear in it, write to us at contact@poteau.team and we'll remove you from the feed.
Game web pages show the date, time, place and sport, never the players. When you share your invitation link, the preview shows your profile photo.
4.4 Our service providers
These companies process data for us, on our instructions, and are not allowed to use it for themselves.
Provider | Role | Data | Where |
|---|---|---|---|
Google (Firebase) | Hosting, database, sign-in, photo storage, notifications, crash reports | Most of your account | European Union ( |
Google Maps Platform | Address and place search | Addresses searched, location | Worldwide |
Photon (komoot) | Finding the address that matches a location | Location | Germany |
BigDataCloud | Working out your country from your location | Location | Australia |
OpenStreetMap | Displaying maps | IP address | United Kingdom |
Stripe | Payments for games | Name, email, phone, amounts | European Union and United States |
RevenueCat | Managing Gold subscriptions | Account ID, subscription status | United States |
Algolia | Player search, game invitations | Name, nickname, email, phone, photo, date of birth, city, location, Gold status, availability | European Union |
Amplitude | Usage analytics | Account ID, app usage, and with certain actions your name, email, phone, location and the text of the notifications you receive | United States |
Amazon Web Services (SES) | Sending emails | Email address, message content | Sweden |
Cloudflare | Delivering images | Photos | Global network |
Anthropic | Internal artificial intelligence tools: a daily summary of game chats for our team, help with support and moderation, replies to store reviews | Game chat messages with their author's name, and the account information the team looks up, including email and phone | United States |
Slack | Internal moderation and support tool | Reports, appeals, chat excerpts and photos, name, email and phone of the people involved | United States |
Apple, Google | Sign in with Apple or Google, notifications, subscriptions | Device ID, email, notification content, subscription status | Worldwide |
GoCardless | Direct debits for centre subscriptions (Poteau Max) | The centre's bank details | United Kingdom and European Union |
4.5 Transfers outside the European Union
Your data is hosted in Europe, with a few exceptions:
part of our server processing still runs on Google servers in the United States. We're moving it back to Europe step by step;
Stripe, RevenueCat, Amplitude, Anthropic and Slack are American companies, and BigDataCloud is an Australian company;
Cloudflare and Google Maps serve their content from the server closest to you.
These transfers are covered by the European Commission's standard contractual clauses and, for companies that have signed up to it, by the Data Privacy Framework.
4.6 Measuring our campaigns
There are no ads in the app.
The app does, however, include Meta's (Facebook's) software development kit, which we use to measure how well our campaigns on Facebook and Instagram work. As soon as you open the app, it sends Meta, among other things, the app install and app opens, purchases made in the app (amount, currency, product) and technical information about your phone (model, operating system, language, time zone, app version). On Android, it also sends your phone's advertising ID. It does not send your name, your email or your number. Meta Platforms Ireland processes this data under its own privacy policy, including in the United States.
On Android, you can reset or delete your advertising ID in your phone's settings. On iPhone, the app doesn't ask for access to the advertising ID, so it doesn't send it.
4.7 When the law requires it
We may pass on data if the law requires us to, at the request of a judicial authority, or to defend our rights in court, in particular when one player has seriously harmed another.
5. Notifications and emails
We send you notifications and emails about your games (sign-ups, reminders, changes, payments), invitations to games that fit your availability, and important information about your account, such as a change to these rules.
You can turn off notifications in your phone's settings, and our emails with the unsubscribe link at the bottom of each one. Messages you need about your account, such as the warning before an inactive account is deleted or a change to these rules, are still sent to you.
6. How long we keep your data
Data | How long |
|---|---|
Active account | As long as your account exists |
Inactive account | Deleted after 3 years with no activity. We email you a month before, and all you need to do to keep it is open the app again |
Blocked account | Kept for as long as the sanction lasts, to stop you signing up again |
Your game history | As long as your account exists, then anonymised |
Chat messages | 5 years after the date of the game |
Chat photos | 5 years after the date of the game |
Payments (amounts, dates) | 10 years, an accounting requirement |
Crash reports | 90 days |
App usage | 25 months |
Reports and sanctions | 5 years after the sanction |
7. Your rights
The GDPR gives you these rights, at any time:
Access: find out what data we hold about you and get a copy.
Rectification: correct data that's wrong. You can change most of it directly in the app.
Erasure: have your account and your data deleted.
Objection: object to what we do on the basis of our legitimate interest.
Restriction: have processing paused while a dispute is checked.
Portability: get your data back in a machine-readable format.
Withdrawing consent: at any time, without affecting what was done before.
Deleting your account
You can do it directly in the app: Settings, then "Delete my account". Deletion is immediate.
What's erased: your profile, your photo, your email, your phone number, your date of birth, your locations, your availability, your level quiz answers, your alerts and your cards.
What stays, with nothing that can identify you: the games you played, so everyone else's history stays accurate. You show up in them as a deleted player. Your messages in game chats also stay, but without your name or your photo.
What we keep, because the law requires it: records of your payments, for 10 years.
Your other rights
Email contact@poteau.team. We'll reply within a month.
If you're not satisfied
You can file a complaint with the Commission nationale de l'informatique et des libertés (CNIL, the French data protection authority):
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
www.cnil.fr
8. Security
Your data is encrypted in transit and where it's stored. Payments are handled by PCI-DSS certified providers.
No system is perfectly secure. If a data breach is likely to seriously affect you, we'll tell you directly, and we'll notify the CNIL within 72 hours.
9. Automated decisions
Some decisions are made automatically, without a human involved:
a yellow card when you leave a full game in the hour before it starts. Our servers record the time you left themselves;
a yellow card when three players from the same game report the same problem about you (not showing up, being late, behaviour). The same reason can only earn you one card this way;
blocking an account that shows clear signs of spam or a scam.
Two yellow cards make a red card, which blocks your account (see the Terms of Use, article 8).
You can challenge any of these decisions and ask for someone on the team to review it: from the screen that appears if your account is blocked, or by emailing contact@poteau.team.
A single report never gets you a sanction on its own: it alerts our team, who look into the situation.
10. When this policy changes
This policy may change. If we change something important, we'll let you know in the app or by email at least 30 days in advance.
The date of the last update is at the top of this page.
11. Contact us
For any question about this policy or your data:
Krank, 18 bis rue d'Anjou, 75008 Paris
Thanks for your trust.