Football Competition Results & Standings Manager

1. Scope of this policy

This policy applies to Football Competition Results & Standings Manager, including its Google Sheets workbook, bound Google Apps Script automation and connected Google Form.

2. Information processed

The product processes information that a competition organiser or authorised submitter enters into the customer's Google files. This may include:

  • competition name, season, organiser and settings;
  • team, venue and fixture information;
  • submitted match results and status updates;
  • submitter name, submitter role and optional messages to the competition manager;
  • review decisions, official outcomes, standings and reports; and
  • the browser timezone used during Result Form setup.

The product is not designed for player registration, health information, disciplinary records, payment information or other sensitive personal records. Users should not enter such information into optional message fields.

3. Google permissions and their purpose

The product requests only the Google permissions required for its workbook and Result Form workflow:

  • Current spreadsheet access: read and update the competition workbook in which the product is installed, including fixtures, reviews, standings, reports and reset backups.
  • Google Forms access: create, configure and update the customer-owned Result Form and its response destination.
  • Background trigger access: run submission and approval processing when the user is not actively present.
  • Workbook interface access: display the setup dialog used to detect and apply the browser timezone.

The product does not request full Google Drive access, Gmail access, Calendar access, account-wide Google Sheets access or access to the user's Google profile.

4. How information is used

Information is used only to provide the product functions selected by the user. These functions include creating and maintaining fixtures, collecting Form submissions, supporting manager review, updating official results and standings, producing reports, checking competition records and creating reset backups.

The browser timezone is applied to the customer's workbook. It is not sent to an external product server.

5. Storage and transfer

Competition information is stored in Google Sheets, Google Forms and workbook backup copies owned or controlled by the customer. The product does not operate an external database and does not transmit workbook or Form contents to freydigitalstudio.com.

Google processes the files and authorisation data as the platform provider, subject to the customer's Google agreement and privacy settings. The bound Apps Script runs in Google's environment. Google manages the OAuth credentials used by the script, and the product does not store OAuth access tokens in the workbook, on freydigitalstudio.com or in a Frey Digital Studio database.

The public product website is delivered through Cloudflare. Cloudflare may process limited network and device information, such as IP address, browser details and request metadata, to deliver and protect the website. Competition workbook and Form contents are not sent to Cloudflare.

6. Sharing and sale of data

Customer information is not sold, rented or used for advertising, retargeting, credit decisions, lending decisions, data brokerage or general artificial intelligence model training. Competition information is not copied into an unrelated database.

Google processes customer files as the platform provider. Cloudflare processes website request information as described above. Frey Digital Studio accesses customer competition information only when the customer explicitly requests support and grants access to the specific Google file. Access to a workbook, Form or report is otherwise controlled by the sharing settings chosen by the customer in Google Drive.

7. Retention and deletion

Information remains in the customer's Google files until the customer changes or deletes it. A reset action clears the records described in its confirmation message and creates a timestamped workbook backup first. Replacing a Result Form does not automatically delete the old Form.

Customers can delete workbooks, Forms, response records and backups through their Google account. They can also revoke the product's Google access through their Google Account security settings.

Frey Digital Studio does not retain a continuing copy of customer competition data. If a customer sends a file or grants temporary access for support, access is limited to the support purpose, removed when the case is resolved and any downloaded support copy is deleted within 30 days after resolution unless a longer period is required by law or requested by the customer.

8. Data protection mechanisms

The product uses the following safeguards:

  • customer ownership and Google Drive sharing controls for workbooks, Forms, response records and backups;
  • the minimum approved Google permission set, including access only to the spreadsheet in which the product is installed rather than account-wide Google Sheets access;
  • processing inside Google Apps Script and Google Workspace without an external competition database;
  • HTTPS for the public product and privacy pages, with browser security headers that restrict framing, content sources and unnecessary device permissions;
  • Google-managed OAuth credentials, with no OAuth access tokens stored by Frey Digital Studio;
  • hidden response sheets and protected automatic workbook areas to reduce accidental disclosure or modification during ordinary use; and
  • temporary, purpose-limited support access only when the customer grants it.

Customers are responsible for protecting their Google accounts, choosing appropriate owners, editors and viewers, reviewing Form sharing and removing access that is no longer required. No method of storage or transmission is completely secure, so users should avoid entering unnecessary personal or sensitive information.

9. Human access and support

Frey Digital Studio personnel do not read customer competition information unless the customer explicitly requests support and grants access, access is required to investigate a security incident, or access is required by law. Support access is limited to the named file, the stated purpose and the time needed to resolve the request. The customer can remove that access at any time.

During controlled delivery, the support account may prepare a workbook before ownership is transferred. The customer becomes the owner, and the support account must be removed after transfer unless the customer separately requests continuing support access.

10. Incident response

If Frey Digital Studio becomes aware of unauthorised access, disclosure, modification or loss involving Google user data, it will act to contain the issue, revoke unnecessary access, preserve relevant evidence, investigate the cause and correct the affected control. Affected customers and Google will be notified when appropriate or required.

11. Google API data policy

Use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

12. Policy changes

This policy may be updated when the product's permissions, data handling or support arrangements change. The effective date at the top of this page will be revised when a material change is published.

13. Contact

For privacy questions, access concerns or deletion guidance, email [email protected].