Where data lives
Feera runs on its own server in Falkenstein, Germany, hosted by Hetzner. The database runs on that server and is not shared with any other company. Backups, made daily and before each release, are kept on the same server for up to 14 days.
What is encrypted
All traffic uses TLS. The phone numbers and email addresses on profiles, and the private details venues keep, are encrypted at rest with a key that is rotated every quarter; the sign-in system keeps the phone number or email you sign in with unencrypted, because that is how it finds your account. Passwords are never stored: sign-in is by one-time code, magic link, or Google and Apple.
Who can see what
Row-level security in the database means a club's staff can only read that club's bookings and players, and a player can only read their own records and the matches they were part of. Platform administrators are named individuals with separate sign-in and their access is logged.
Money
Feera never holds player funds. Payments go from the player to the club's own merchant account, or to a licensed payment provider that settles to the club. We store a payment reference, not card numbers.
Error reporting
Application errors are collected without personal data: names, numbers and emails are scrubbed before anything leaves the server.
Your rights
Any player can export or delete their data from their account at any time. Any club can export its player list at any time and receives a full export on leaving.
Report a vulnerability
Email [email protected] with the subject "Security report". We acknowledge within two business days and do not take action against good-faith researchers.