Privacy policy

1. Who we are

VBM (VolleyBall Maroc) is a platform dedicated to Moroccan volleyball: results and standings of official competitions, and free creation of amateur tournaments. This policy explains what personal data we collect through the vbm.ma website and the mobile app, why, and what your rights are.

2. Data we collect

• Account: name, email address, and either a password (stored hashed, never in plain text) or Google sign-in (Firebase Authentication) — in that case we receive your name and email from Google, never your Google password.
• Participation: the teams you create or join, and the amateur tournaments you take part in or organise.
• Site usage: anonymous traffic statistics through Vercel Analytics and Speed Insights, which set no tracking cookie and cannot identify you individually.
• Firebase Analytics / Google: when this feature is enabled, browsing data (pages viewed, device and technical information) is collected to measure audience. For signed-in accounts, a pseudonymised internal identifier and non-identifying profile categories may be sent — never your name, email or declared city.
• Google advertising: when AdSense on the site or AdMob in the app is enabled on an authorised placement, Google and its advertising partners may process your IP address, cookie or device identifiers, technical information (browser, system, language and screen size), approximate location and interactions with an ad. The data actually used depends on your region, the ad format and your consent choices.
• Mobile notifications: if you turn on notifications in the app, a technical token (push token) linked to your device.

3. Why we use it

• To run and secure the platform: account, competitions, tournaments, teams and requested notifications.
• To measure audience and improve the service, according to the applicable privacy choices.
• To fund public content through ads, measure their delivery and fight ad fraud when advertising is enabled.
• To personalise ads only where regulations require it and you have consented. Without that consent, Google may show no ads, or only non-personalised or limited ads, according to its rules and the settings chosen by VBM.

VBM does not sell your personal data. Sharing it with Google and its advertising partners is limited to the purposes described above and depends on the consent required in your region.

4. Who your data is shared with

Some data passes through technical service providers:

• Google — Google sign-in, Firebase Analytics and notifications, then AdSense or AdMob when advertising is enabled. Google may act as a processor or as a separate controller depending on the service and purpose.
• Vercel — website hosting and anonymous traffic statistics.
• Oracle Cloud Infrastructure — hosting of the application server and database.
• Capconnect — sending transactional emails.

For advertising, the detailed list of vendors and their purposes is shown by the consent management platform before you choose. You can also read Google's explanation of how it uses data from partner sites and apps: How Google uses certain data.

5. Advertising, cookies and privacy choices

The consent requested to create a VBM account covers the terms of service and this policy. It is separate from consent for cookies, audience measurement and advertising: accepting one never automatically means accepting the other.

In the European Economic Area, the United Kingdom and Switzerland, advertising choices are collected through a Google-certified consent management platform compatible with the IAB TCF framework. It lets you accept, refuse or manage purposes and partners. Permanent access to the privacy options then lets you change or withdraw that choice as easily as it was given.

Depending on your choice, Google and its partners may use cookies, local storage, pixels or device identifiers. You can also manage ad personalisation for your Google account from My Ad Center. Withdrawing consent does not affect the lawfulness of processing already carried out and may reduce or remove the ads displayed.

6. How long we keep it

Your account data is kept as long as your account exists. If you delete your account (see Account deletion), your personal information is erased; the sports results you took part in (scores, standings) may be kept in anonymised form, as they are part of the public history of competitions.

7. Security

Passwords are hashed (never stored in plain text), all communication between your browser/app and our servers is encrypted (HTTPS), and access to administration data is limited to accounts with an explicit role (organiser, administrator).

8. Your rights

You can request access to, correction of or deletion of your personal data at any time by writing to us at [email protected]. To delete your account, see the dedicated Account deletion page.

9. Changes

This policy may change along with the platform; the last updated date at the top of the page shows the version in force.