Privacy Policy – Pase

Last updated: November 3, 2026

1. About Us

The Pase app and the pase.club website are operated by Lucky Tech, Brazilian company CNPJ 42.480.339/0001-82, located at Rua Dr. Guilherme Bannitz, 126, Vila Nova Conceição, São Paulo - SP, 04532-060, Brazil.

2. Personal Data Collected

We collect:

• Account data: name, email address, picture and @handle, obtained through Google or Facebook social login.
• League data: leagues, teams, players (name and nickname), fixtures, goals, assists and other events, and each person's roles (manager, scorekeeper, referee and others), entered by you or by the league manager.
• Technical data: an internal account identifier, sign-in logs and app usage events, such as sign-in, measured by Firebase Analytics.
• Browser storage: when you sign in on pase.club, we keep a session token and your name and @handle in your browser (localStorage) to keep you signed in. They are removed when you sign out.

3. Data Published on pase.club

When a manager publishes a league, its data becomes visible to anyone on pase.club, without signing in: league name, teams, player nicknames or names, lineups, results, fixture events and statistics. People who are not the account holder appear only under the player name entered by the manager.

An account's statistics profile is published only if the account holder turns that option on, and it can be turned off at any time in the app or on the site. To delete your account and published profile, see the Account and Data Deletion page.

4. Purpose

• User authentication
• Delivering the app and the site, including publishing leagues and profiles
• Customer support
• Product improvement
• Usage analytics
• Legal compliance

5. Third-party Services

We use Firebase (Authentication and Analytics), Google Sign-In and Facebook Login to sign you in and measure app usage, and Cloudflare to host the site, the API, the database and the published files. Each handles data under its own privacy policy. We do not show ads or process payments in the app or on the site.

6. Sharing

We do not sell personal data. We share data only with the providers named above, as needed to run the service, to comply with legal obligations, or with your consent. Data published on pase.club (section 3) is public.

7. International Transfers

Your data may be processed outside your country using safeguards required by applicable laws, including LGPD and GDPR.

8. Retention

Account data is kept while the account exists and is deleted at the account holder's request, as described on the Account and Data Deletion page. League history belongs to the league's records and to its other participants: after an account is deleted it remains, unlinked from the account holder. We also keep data the law requires us to keep, for the legal period.

9. Security

We use reasonable technical and organizational measures to protect personal data, such as encrypted communication and role-based access control.

10. Your Rights

Under LGPD and GDPR, you may request access, correction, deletion, portability, restriction, objection and information regarding the processing of your personal data.

11. CCPA/CPRA

Where applicable, California residents have additional rights under the CCPA/CPRA, including access, deletion, correction and limiting the sharing of personal information. We do not sell or share personal information for advertising.

12. Children

The App is not intended for children under 13 years old and does not knowingly collect their information.

13. Legal Basis

Processing relies on the legal bases in LGPD and GDPR, including performance of a contract, consent, compliance with a legal obligation and legitimate interest, where applicable.

14. Changes

This policy may be updated from time to time. The date of the last update is at the top of this page.

15. Contact

Privacy inquiries and the data protection contact: [email protected].