Privacy Policy

Who is responsible

Controller: [TODO: legal name of the operator] — [TODO: registered address]. Contact: [TODO: business contact email].

Account data

If you create an account, your email address and password are managed by the authentication service. Passwords are stored only in hashed form and we never see them.

Your profile contains an optional display name and your preferred language.

We do not process payment data.

Favorites

If you save favorite matches, teams or leagues, we store which items you saved. Only you can see your favorites.

Cookies

Authentication cookies keep you signed in. They are necessary for the account to work.

The language cookie (locale) remembers whether you chose English or Serbian. It is kept for one year.

We do not use analytics or marketing cookies.

Technical and security logs

When you use the service, our hosting and database providers record technical data such as IP address, browser type, requested address and time. These logs are used to operate and secure the service.

Sports data

Match, team, league and result data are not personal data. They come from a sports data provider, which never receives your identity or account data.

Purposes

We process personal data to provide your account and favorites, to keep the service secure and prevent abuse, and to remember your language.

[TODO: legal basis for each purpose — to be confirmed by the owner].

Service providers

Vercel — hosting and content delivery.

Supabase — database and authentication.

These providers process data on our behalf.

International transfers

Our providers may process data outside your country, including in the United States. [TODO: data region and transfer safeguards — to be confirmed by the owner].

Retention

Account, profile and favorites are kept until you delete your account.

Technical logs and backups are kept according to our providers' settings. [TODO: retention periods for logs and backups — business decision].

Your rights

Depending on the law that applies to you, you can request access to your data, correct it, delete it, object to processing or receive a copy. You can edit your profile and delete your account yourself.

To exercise your rights, contact [TODO: business contact email]. You may also complain to your data protection authority.

Deleting your account

You can delete your account on the Account page. This immediately removes your sign-in account, your profile and your favorites.

Changes

We may update this policy. The date at the top shows when it last changed.