Privacy statement
Last changed on 25 August 2026. It explains what Canoepolo Scout does with your information, in plain words.
- The shot clock and scouting work without an account. Use them that way and nothing about you reaches our server at all.
- On the free plan your scouting reports stay on your own phone, in your browser. We never see them.
- With a Member account your reports are also kept on our server, so you still have them if the phone breaks.
- We sell nothing, we share nothing with advertisers, and there are no tracking or advertising cookies. No Google Analytics either — we count how often the app is used, anonymously.
- When you write another player's name in a report, you are the one recording information about someone else. Please read the section about that.
Rectusoft, [Capucienenstraat 8A], [8900] [Ieper], Belgium (company number BE [ 0668.738.982]), trading as Rectusoft, is the controller of the personal data described below.
Questions? The quickest way is the suggestions page — it is answered in the app, so you read the reply where you asked. No account, or asking about somebody else's data? Write to info@rectusoft.com.
The shot clock and the scouting screen work with no account and no internet connection. What you enter — your settings, the match in progress, your saved reports — is stored by your browser on the device itself, in what is called local storage. It is not sent anywhere.
That means two things. Nobody but you can see it. And nobody but you can get it back: if you clear your browser, use a different phone, or lose the device, it is gone. You can erase everything yourself at any time under Stats → Erase everything on this device.
Our web server does record ordinary technical log lines when a page is opened (the address requested, the time, the browser type and the IP address), the same as any website. These are used to keep the site working and secure, and to recognise abuse. Legal basis: our legitimate interest in a working, secure site.
We count what happens in the app, but never who does it. A count looks like this and contains nothing else:
There is no account, no device number, no address and nothing that could be pieced back together into a person. Two hundred people using it once and one person using it two hundred times look exactly the same to us, which is the point.
The country is worked out from the time zone your device is set to, not from your address. It tells us "Belgium", never where you are.
Because this holds no personal data, it needs no permission and there is no banner to click away. We use no Google Analytics and no other outside measuring service: the counts stay on our own server.
Then we store, on our server:
| What | Why | Legal basis |
|---|---|---|
| Email address, name, club name | To identify you, to let you sign in, and to write to you about your account | Performance of our agreement with you |
| Your password | Stored only as an irreversible hash. We cannot read it and neither can anyone else | Performance of our agreement with you |
| Date you registered, date you last signed in | Support, and spotting accounts that are no longer used | Legitimate interest |
| Your plan, and a note by the administrator about payment | To know what your account is entitled to | Performance of our agreement, and our legal duty to keep accounts |
| Your scouting reports (Member only) | So they survive a lost phone and are on every device you sign in on | Performance of our agreement with you |
| The devices you use: a random identifier, the browser type, the IP address it was last seen from, and when | A paid account works on one device at a time. This is how we notice one licence being shared, and how we can warn you if someone else signs in with your password | Legitimate interest in protecting our licences and your account |
On the free plan your reports are not sent to our server. Only the account details above are.
When you type a player's name, their team and how they performed, you are recording personal data about a person who is not sitting in front of you.
For that content you are the one who decides what is written down and why, which under data protection law makes you the controller of it. Where it is stored on our server, we act on your instructions and do nothing else with it: we do not read it, analyse it, or pass it on.
Some practical advice, meant seriously:
- A shirt number and a team are usually enough. If you do not need the name, do not write it.
- Be careful with young players. Data about children is treated more strictly by the law and more sensitively by their parents. If you scout youth teams, make sure the club and the parents know it is happening.
- Write nothing you would not be willing to show the player. They have the right to ask what has been recorded about them.
- If a player asks you to erase what you hold about them, you must be able to do it. You can delete a report yourself under Stats.
If someone approaches us directly about a report you made, we will refer them to you, and if we have to act we will tell you first.
Only the ones the app cannot work without, so there is no cookie banner to click away:
| Cookie | What it does | How long |
|---|---|---|
| CanoepoloScout.Auth | Keeps you signed in | 30 days |
| cps_device | A random number identifying this browser, so a Member account can be held to one device | 5 years |
Neither one follows you to other websites. We use no analytics, advertising or social media cookies.
Only messages about your own account: confirming a change, resetting a password, or telling you that your account has been used on a new device. No newsletters and no advertising unless you ask for them.
Nobody, other than the people who need to. Specifically:
- Our hosting provider stores the database and the website on our behalf, in the European Union.
- Our administrator can see accounts, plans and the device list to run the service and to help you.
- Other Members, but only as counted-up numbers, and only for a report you linked to a Rectusoft League player. This is explained just below.
- A court or an authority, if the law obliges us.
We do not sell data, we do not trade it, and we do not use it to train anything. Your data stays inside the European Economic Area.
While scouting, a Member can link a report to a player who is already in the Rectusoft League instead of just typing a name. That link is optional and it has one consequence worth understanding before you use it.
A player scouted by several people, or by you on several devices, is otherwise several separate half-pictures. The league link is what makes them one. So the totals shown for a linked player — matches, playing time, goals, passes and the percentages that follow — are added up from every report on our server carrying that same link, including reports made by other accounts.
What is not shared, ever:
- Who made a report. No name, no account, no club.
- Which match it was, when it was played, or against whom. No dates at all.
- Anything written in the notes.
- The individual reports themselves. You see your own in full and nobody else's, exactly as before.
Two conditions have to be met before you are shown anything at all, and both exist to stop the totals being read backwards into one person's work:
- You have scouted that player yourself. Otherwise anyone could walk the whole league and pull a file on players they have never seen.
- At least two other accounts have too. With exactly one, somebody who knows their own numbers could subtract them and be left with a stranger's entire report. Two is where the total stops being about one identifiable person.
We would rather be straight with you about the limit of that. Somebody who looks at a player's totals before and after a tournament can see the difference, and the difference is roughly one match. Hiding that completely would mean feeding you numbers that are slightly wrong, which is not a trade we think a coach wants. If that matters to you for a particular player, the answer is not to link those reports.
In other words: the numbers describe the player, and the work stays with whoever did it. A coach's preparation is not handed to their opponent.
Do not want a report to count towards that shared picture? Then do not link it — a report with a typed name is never pooled with anything. A report that is already linked can be deleted at any time, which removes it from the totals as well.
| Reports on your own device | Until you erase them. We have no say in it and no copy. |
|---|---|
| Reports on our server | Until you delete them, or until your account is closed. |
| Your account | While it is in use. After you ask us to close it, it is removed within 30 days; backups are overwritten within 3 months. |
| Device records | While the account exists, and at most 24 months after the device was last used. |
| Payment records | 7 years, because Belgian bookkeeping law says so. |
| Server logs | At most 12 months. |
| Usage counts | Kept indefinitely. They are sums with nobody in them, so there is nothing to delete. |
Under the GDPR you may ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete your account and everything in it;
- hand your data over in a file you can take elsewhere — a Member can do this without asking, under Stats;
- stop using your data for something, or object to it.
Write to info@rectusoft.com. We answer within one month. There is no charge.
Deliberately an email address and not a page inside the app. Asking us to delete your account is hard to do from a screen you have to sign in to reach, and somebody who appears in a report made by their coach has no account here at all. Signed in and just curious? The suggestions page is quicker.
Not happy with our answer? You can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, Belgium, contact@apd-gba.be, https://www.dataprotectionauthority.be.
An account is meant for coaches and adults. We do not knowingly create accounts for children under 16. Players being scouted may of course be younger — see the section above about your responsibility there.
The site runs over an encrypted connection. Passwords are stored as a hash and are never readable. Access to the server is limited to the people who maintain it. No system is perfect: if something goes wrong that puts your data at risk, we will tell you and the authority, as the law requires.
If this statement changes in a way that matters, we will say so in the app and, for anything significant, by email. The date at the top always shows the current version.
Rectusoft
[Capucienenstraat 8A], [8900] [Ieper], Belgium
info@rectusoft.com