Privacy Policy

Your Privacy Matters

At Scoutzy, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.

1. Information We Collect

Account Information

Username and email address
Password (encrypted and hashed)
Profile picture (optional)

Organization Data

Organization names, descriptions, and settings
Member information and roles
Attendee records including name, contact details, date of birth, gender, and parent/guardian information
Events, attendance records, and inventory data

Usage Information

Log data (IP address, browser type, pages visited)
Device information and preferences

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process your requests and transactions
Send you technical notices and support messages
Respond to your comments and questions
Protect against fraudulent, unauthorized, or illegal activity

3. Legal Basis for Processing

Where applicable under EU and Czech law (including the GDPR), we process your personal data on the following legal bases: (a) contract performance — processing necessary to provide the service you registered for; (b) legitimate interest — for security, fraud prevention, and service improvement; (c) legal obligation — where we are required to do so by law. For personal data processed by organizations within Scoutzy (such as attendee records), the relevant organization is the data controller and is responsible for establishing the appropriate legal basis for that processing.

4. Data Storage and Security

Data Storage

Your data is stored securely using industry-standard encryption methods. We use secure servers and implement appropriate technical and organizational measures to protect your information.

Security Measures

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure your information, please be aware that no security measures are perfect or impenetrable.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. If you request deletion of your account (see "Your Rights" below), we will remove your personal data within 30 days of a verified request, except where retention is required by a legal obligation. Organization data — including attendee records, inventory, and events — is retained until deleted by an organization owner or until the organization itself is deleted. Change-history and audit logs associated with organization records (for example, prior values of an attendee's record) may additionally be retained for as long as the related organization or attendee record exists, for accountability purposes.

6. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

With other members of organizations you join (as necessary for collaboration)
When required by law or to respond to legal process
To protect our rights, privacy, safety, or property

Sub-processors

We use a small number of third-party service providers (sub-processors) to operate Scoutzy:

Cloudflare Turnstile — used on our registration and password-reset forms to detect bots and prevent fraud. Completing a Turnstile challenge may set cookies from Cloudflare.
Resend — used solely to deliver password-reset emails; Resend receives your email address for this purpose only.

7. Your Rights

You have the right to:

Access your personal information
Correct inaccurate or incomplete information
Request deletion of your account and associated data
Request an export of your data
Opt out of marketing communications
Request erasure of your personal data (right to be forgotten)
Request restriction of the processing of your personal data
Object to the processing of your personal data
Lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů — UOOU) at uoou.gov.cz

To exercise any of these rights — including requesting deletion, export, correction, or erasure of your data — email us at [email protected]. These requests are currently handled manually; we will act on verified requests within 30 days.

8. Cookies and Tracking

We use only essential cookies required for the site to function. We do not use third-party tracking, advertising, or analytics cookies.

Name	Purpose	Duration	Type
auth-token	Keeps you signed in (session authentication)	7 days	Essential
NEXT_LOCALE	Remembers your preferred language (English/Czech)	1 year	Essential / Preference

Because we only use strictly necessary cookies, current law (the ePrivacy Directive and GDPR) does not require us to show a cookie consent banner. This exemption ends the moment we introduce analytics or marketing cookies — if that happens, we will update this policy and request your consent via a cookie banner before setting them.

9. Minors & Account Eligibility

Scoutzy accounts may not be created by persons under the age of 15. However, organizations using Scoutzy may manage records of individuals of any age — including minors — as part of their legitimate activities, such as managing club members or event attendees. In such cases, the organization assumes full responsibility for obtaining appropriate parental or guardian consent as required by applicable law. We do not solicit personal information directly from minors.

10. Changes to Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date. You are advised to review this privacy policy periodically for any changes.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

[email protected]

For the legal identity of the operator behind Scoutzy, see the About page.