Privacy
What this service records about you, why, who else sees it, and what you can ask for. It describes what the software actually stores, not what such a page usually says.
An entry shown as awaiting publication has not been provided yet and must not be relied upon.
Who is responsible
The publisher of this service decides what is recorded here. Its identification, its contact and the data-protection contact are set out in the legal notice.
Your account and your sessions
An account holds the name you give, your address, whether that address has been verified, and a password that is stored only as a cryptographic derivation and can never be read back. Each sign-in creates a session carrying its own token, the address of the network you connected from and the description your browser sends about itself; that pair is what lets you see and revoke your own sessions, and it is what a compromised-account investigation rests on. Counters limit how often certain actions can be repeated. Your saved matches are kept as match references. The sports, competitions and teams you follow are kept with your account, each as the sports data provider’s reference with the name shown when you chose it, so that your list is the same on every device where you sign in. So are your answers to the welcome shown when the app is first opened: the sports chosen, when you first finished it, the language and the place you first finished it in: in a browser, in the Android app downloaded from this site or in the one from Google Play. Until you sign in, these choices are kept only in your browser’s storage on your device; signing in adds them to your account, and the device keeps a copy so that the list also works offline. Your interface language, light or dark theme and time zone are kept in cookies on your device, not in a profile.
The declarations you make
Four decisions are recorded with the version of the document you were shown, the language it was shown in, and a date and time taken from our own database clock rather than from your browser: your declaration that you are old enough, your acceptance of the terms of use, your choice about optional cookies, and, when you subscribe, your request that the subscription start immediately. The last one also stores a digest of the exact sentence you were shown, so that the record says what you agreed to and not merely that you agreed.
Purchases
A purchase records the billing country that was confirmed for you and the decision it came from, the order with its amount in the smallest unit of its currency, the access it entitles you to and for how long, the payment method chosen, a correlation identifier for each attempt, the stage each attempt reached and, if it failed, a code for why. From the payment provider we keep the transaction identifier, its status, its amount and the timestamps. We never see, receive or store a card number, a security code, a bank identifier or a payment credential: those stay with the provider. Failed attempts are kept, because an attempt that did not succeed is exactly what has to be auditable.
Your visits
To find out where the site gets in its readers’ way and what to fix, it keeps a visit journal: the pages opened and the steps taken towards a subscription (choosing a plan, pressing Pay, what the payment answered, a form error), with the time, the language, the kind of device (app, Android, iPhone, computer) and the country your network address maps to. It also records how the welcome shown when the app is first opened went: whether it was opened for the first time or to change what you follow, the steps reached or skipped, the sports chosen, the age confirmation, how it ended (reading straight away, signing in or creating an account) and how many competitions and teams were picked, never which ones. The address itself is not kept, nor anything you type, such as an email address or a password. A random identifier kept in your browser’s storage links the steps taken on one device; once you are signed in, they are linked to your account. The journal stays on our servers, is passed to no one, is used neither for advertising nor for profiling, and every step is deleted after 90 days. It is included in your account’s download and goes with its erasure.
Messages we send you
A message waiting to be sent is queued with its recipient encrypted. Its link to your account is a keyed blind reference, so a reader of the database alone cannot tell whose message it is, while a deletion request can still cancel everything queued for you.
Where you are, and how it sets your billing country
Your billing country is inferred without asking you, from your network address, looked up on our own server in the DB-IP IP-to-country database (db-ip.com, CC BY 4.0 licence), so the address is sent to no one for this. Only when the address points to no country are your browser's time zone and then its preferred languages used, among the countries where the subscription is sold. The result is recorded with your account, together with the signal it came from, and recorded again when a later visit points to another country; your payment provider confirms it when you pay. It does not set your interface language, your time zone or the legal market you belong to.
Analyses produced by models
Match analyses are generated from sports data. Nothing about you, your account, your sessions or your purchases is sent to a model to produce them, and a published analysis is the same for every reader: it is not personalised and it is not profiled.
Why each of these is kept
To let you sign in and stay signed in; to show the interface in the language, theme and time zone you chose; to show first the matches of the competitions and teams you follow, on every device where you are signed in; to choose which matches are analysed first and the order of the competitions in the public match list, from how many accounts save or follow a competition’s matches, counted only once enough accounts do so and never reader by reader; to open and keep open the access you paid for; to detect and refuse abuse, fraud and repeated automated requests; to answer you when you write to us; to hold the accounting and consent evidence we are required to be able to produce. Nothing here is used for advertising, and nothing is sold.
Who else sees it
The payment provider, which handles the payment itself and tells us only whether it succeeded. The provider that delivers our messages. The hosting provider that runs the servers and their backups. The sports data providers, which receive no information about you at all. A competent authority, where the law obliges us and to the extent it obliges us. Meta (Meta Platforms Ireland), only if you accept advertising cookies: it then receives the pages you view, your browser's technical details and network address and, when you subscribe, the purchase with its amount and currency, to measure our ads; if you refuse, nothing is sent to it. No data broker and no other advertiser or audience-measurement service.
How long it is kept
A session ends at its expiry or when you revoke it. A cookie decision is asked for again after at most six months. The other periods, and in particular how long consent evidence and accounting records are kept, are not published here yet: they depend on the obligations of each launched country and are shown as awaiting publication rather than guessed.
What you can ask for
You can obtain a copy of your data: the account area produces a complete, machine-readable archive covering your account, your sessions, your saved matches, what you follow and your welcome answers, your declarations and consents, your billing-country history, your orders, payment attempts, payment history and entitlements. You can correct your name and change your address, with the new address verified before it takes effect. You can withdraw a cookie consent at any time. You can ask for your account to be erased. Depending on where you live you may also have a right to object, to restrict, or to complain to a supervisory authority.
What erasure actually does
Erasure destroys what identifies you: your address, your name, your password credential, every session, every pending verification, your saved matches, what you follow and your welcome answers, your declarations and accepted documents, and everything queued to be sent to you. Your cookie decision is kept as dated evidence with the link to your account removed. What remains is keyed by an account identifier that is only a pseudonym, and it is what the payment audit requires: payment attempts, provider transactions, entitlements granted and the billing evidence that justified a price. Erasure is recorded with what it removed and what it retained, and repeating the request reports the same result rather than doing it again.
How it is protected
Passwords are never stored in a readable form and payment credentials never reach us. Queued recipients are encrypted. Access to production data is restricted, and operational logs are written to carry correlation identifiers rather than secrets or message contents. No system is beyond reach: if a breach affects you, you are told when the law requires it.
Changes and contact
This notice may be updated, and each update is published under a new version. To ask a question or exercise a right, write to the contact published in the legal notice.
This text is written by the engineering team, not by a lawyer. It must be reviewed by a qualified lawyer, country by country, before any commercial opening.