Privacy Policy

Data we collect

• Account data: if you create an account, we store your email address (you sign in with a one-time magic link, so we do not store a password) and the session identifiers needed to keep you signed in.
• Your follows: the competitions and teams you choose to follow, so we can build your calendar and show your matches.
• Match reminders (push): if you opt in to browser push reminders, we store the push subscription your browser provides (an endpoint URL and cryptographic keys). You can turn this off at any time.
• Calendar feed: if you subscribe to your personal calendar feed, we generate a private token that lets your calendar app fetch your matches.
• Contact messages: if you write to us through the contact form, we store the email address you give us and the message itself, so we can read and answer it. We delete contact messages 12 months after we receive them.
• Technical data: like any website, our server records standard request logs (IP address, browser type, pages requested) to keep the Service secure and running, and to measure aggregate usage of the Service (for example, how many visits a page receives and which search engine sent them). This analysis is aggregate only: we do not build visitor profiles and we do not share these logs with anyone.

We do not use third-party advertising trackers, and we do not sell your data. We use Google Analytics 4 (Google Ireland Ltd) to understand how visitors use the Service. It runs in Google Consent Mode: until you opt in it sets no cookies, stores no identifiers and sends Google only anonymous, cookieless consent signals; usage analytics runs only with your consent - see "Cookies" below.

Why we use it (legal bases under the GDPR)

• To provide the Service you asked for (Art. 6(1)(b) GDPR) - accounts, follows, calendar feed.
• With your consent (Art. 6(1)(a) GDPR) - push reminders and, where you opt in, analytics; you can withdraw consent at any time.
• Our legitimate interest (Art. 6(1)(f) GDPR) - keeping the Service secure and operational, and measuring aggregate usage of it (server logs).

Football data

Match, team and competition information is supplied by third-party football data providers. These providers do not receive any of your personal data.

Sharing

We use service providers (hosting, and the push-messaging service your browser uses) only to run the Service. Google Ireland Ltd receives the cookieless consent signals described under "Cookies" and, if you consent to analytics, usage data for Google Analytics 4. We do not share your personal data with anyone else, except where required by law.

Retention

We keep account data for as long as your account exists. If you delete your account, or ask us to, we erase your personal data. Server logs are kept for 30 days and then deleted; only the anonymous aggregate counts derived from them (with no IP address) are kept longer.

Your rights

Under the GDPR you have the right to access, correct, erase, restrict or object to the processing of your data, and the right to data portability. To exercise any of these, email admin@matchcalendar.football. You also have the right to lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, PUODO).

Cookies

We use the cookies strictly necessary to sign you in and keep the Service secure, plus - only if you consent - Google Analytics 4 (Google Ireland Ltd) cookies to understand how visitors use the Service. Analytics cookies default to denied (Google Consent Mode) and are set only after you opt in. You can change your choice at any time via the "Cookie settings" link in the footer; declining has no effect on how the Service works. We do not use advertising cookies.

Changes

We may update this policy. Material changes will be reflected on this page with a new "last updated" date.