Privacy Policy

ScoreAssist is operated by IE Ihor Reutskyi, an individual entrepreneur registered in Georgia (reg. code 345758708), Shartava str. 7, Batumi 6004, Georgia ("we", "us", or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using the Service you accept this policy. Where we rely on your consent we ask for it separately, and you can withdraw it at any time. If you do not agree with the practices described here, please do not use the Service.

You can read the whole site without an account. What we process depends on whether you have one. If you do not have an account • Your IP address, the page you asked for, your browser's user agent and the time, in our server logs. We use this to run and protect the site • A record that the age check was shown, confirmed or declined, with the language of the page and your IP address, in our server logs. No cookie or account ID is attached to it • If you try to sign in with an address that has no account: a partly hidden copy of that address and your IP address, in our logs and in Sentry • If a page fails to load or breaks in your browser: the page address without anything after the question mark, your browser and operating system, and the error, in Sentry. Sentry sees your IP address but does not store it • Page-view statistics from Cloudflare Web Analytics: the page you opened (without anything after the question mark), the site you came from, your country, your browser, operating system and device type, and how fast the page loaded. Cloudflare works out the country from your IP address. By Cloudflare's own description, it stores nothing in your browser for this, does not use your IP address or browser details to recognise you, and does not track you from one site to another • The cookies and browser storage listed in the Cookies section If you have an account • Email address and a hashed password (never stored in plain text) • Display name, if you set one. You choose what to put there, so we cannot know whether it is your real name • Language and timezone (the 12- or 24-hour clock setting stays only in your browser, in the clk cookie) • Profile photo, if you upload one (see below) • Your consents: acceptance of the Terms with its date, and a separate on/off switch for each letter and for marketing emails • The teams, competitions, people and matches you follow • A record that the age check was skipped because your account already confirmed you are 18 or older, with the language of the page and your IP address, in our server logs. No cookie or account ID is attached to it • Account creation date, last sign-in time, failed sign-in attempts and whether the account is locked • A record of each letter we sent you (which letter, when and what it listed) • If you or an administrator asks to delete or export your account: the request and its date, and, if an administrator made it, the reason they gave Profile Photo (optional) • If you upload a profile photo, the image is stored on Cloudflare R2 in the EU and served via a Cloudflare-managed custom domain. The image URL is unauthenticated - anyone with the URL can view the photo. The photo persists until you remove it from Profile → Account, or until your account is anonymized via the Right to Erasure (30-day grace window). We may remove a photo if it breaks the user-content rule in our Terms. Sign-in history • For each successful sign-in we store the IP address and your browser's user agent. We keep the 50 most recent records per account and delete older ones automatically. The Security page in your profile shows you a shortened view: the time, an approximate location worked out from the IP address, and a device summary • For each signed-in session we also store the IP address and user agent it started from Do you have to give us this data? Reading the site needs no account and no personal details. An account needs an email address; without one we cannot create it. Everything else in your profile is optional. We do not collect payment information, phone numbers or postal addresses.

We use the collected information to: • Provide, operate, and maintain the Service • Authenticate your account and manage your session • Monitor and enforce usage limits (rate limiting) • Detect and prevent fraudulent or abusive activity, including repeated failed sign-ins • Find and fix errors • Count page views and measure page speed, without cookies • Send transactional emails (email confirmation, password reset, security alerts, account notifications). When you sign in from a new device, the alert we email you includes the IP address of that sign-in so you can recognise it • Send the letters you have asked for: a daily letter about the matches you follow (tomorrow's fixtures, their results and schedule changes), an optional weekly letter about the top matches, and letters about a single match you follow when its analysis is published and when it finishes • Comply with legal obligations Our match analysis is written by AI from sports data about the match. It is not about you, and none of your data goes into it. We make no automated decisions about you and build no profile of you from what you read. We do not sell, rent, or trade your personal data.

For users in the European Economic Area (EEA), we process your personal data under the following legal bases: • Contractual necessity: Processing required to provide the Service you signed up for (account management, authentication, the account emails) • Legitimate interests: Running and securing the site, server logs, the age-check record, fraud prevention, error tracking and page-view statistics. You may object to this at any time • Consent: every letter we send that is not about your account - the daily letter about what you follow, the two letters about a single match you follow, and the weekly letter about the top matches, and our marketing emails, which carry their own switch. All of them are off until you turn them on, each carries a one-click unsubscribe, and you can withdraw at any time in Profile → Account • Legal obligation: Compliance with applicable laws and regulations You have the right to withdraw consent at any time where consent is the legal basis for processing.

We keep personal data for these periods. Where a period is not yet limited, we say so. • Account data: for as long as your account exists. After a deletion request it is anonymized once the 30-day window ends (see Your Rights) • Sign-in history: the 50 most recent records per account; older records are deleted automatically, and all of them when your account is erased • Session records (IP address and user agent of each signed-in session): each record expires at most 30 days after it is created and is deleted within two days after that • What you follow: for as long as you follow it. A follow on a single match removes itself once the match is over • Email sending records (which letter went to which account, when, and what it listed): 90 days • Records of actions our administrators, or our automatic protections, take on accounts: 12 months • Records of export requests: 12 months • Records of deletion requests: kept with no time limit, as proof that the request was carried out. The reason an administrator wrote on it is erased together with your account • Mail you send us and our replies: kept in our mailbox, with no time limit yet • Error reports and request samples in Sentry: 30 days • Page-view statistics in Cloudflare Web Analytics: Cloudflare keeps every record for 7 days, then only a sample of about one in ten. Cloudflare does not publish when that sample is deleted • Server logs: kept in files of limited size (up to three files of 10 MB for each part of the service). The oldest entries are overwritten first, and the logs of a part are deleted whenever we update it. Because the limit is a size, not a date, we cannot give a fixed number of days • Backups: up to 30 days from the date of the backup You may request deletion of your account and associated data at any time. Some data may be retained longer where required by law.

Under GDPR and applicable data protection laws, you have the following rights: Right to Access: Request a copy of the personal data we hold about you. The export in your profile contains your profile, consents, follows and a shortened sign-in history. It does not include the full IP addresses and user agents of your sign-ins and sessions, the record of letters we sent you, or your deletion and export requests; write to us for a complete copy. Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements. You can exercise this right yourself at any time via Profile → Security → Delete account. We schedule deletion 30 days out so you can change your mind: signing in during the grace window automatically cancels it, and the email we send contains a one-click cancel link. In limited cases (serious or repeated terms-of-service violations, fraud, abuse), an administrator may schedule your account for deletion; the same 30-day grace applies, signing in or the cancel link in the email stops the deletion, and you will receive an email notifying you of the scheduled date and the contact path if it was not communicated to you in advance. After the 30-day window we anonymize your account: your email address, display name, password, profile photo, language and marketing settings are removed, and the remaining row no longer identifies you. It is kept in anonymized form for audit purposes. Your sign-in history and session records (with their IP addresses and user agents) are deleted at the same step, and the reason an administrator wrote on your deletion or export request is erased. Copies in backups and error reports in Sentry disappear within 30 days. Server logs that mention your account are overwritten as the log files fill up, and deleted when that part of the service is updated (see Data Retention). Right to Portability: Receive your personal data in a structured, machine-readable format. You can download a JSON copy of your data instantly from your Profile → Security page (limited to one export per 24 hours), or contact us using the address below. An administrator may also create an export on your behalf (for example, in response to a Subject Access Request); in that case you will receive an email with a private download link valid for 7 days. Right to Rectification: Correct inaccurate or incomplete personal data. You can change your display name, email, language, timezone and photo yourself in your profile. Right to Restriction: Request that we limit how we process your data in certain circumstances. Right to Object: Object to processing based on legitimate interests. The page-view counter cannot tell visitors apart, so we cannot switch it off for one person; you can stop it yourself by blocking static.cloudflareinsights.com in your browser or with a content blocker. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Every cookie and browser-storage entry the site uses is listed here. Cookies • age_verified - remembers that you confirmed you are 18 or older. 90 days • theme - light or dark mode. 1 year • tz - the timezone you chose, or automatic. Automatic follows your browser's own timezone setting, which is read in your browser. If you are signed in, we also save the timezone in use, chosen or automatic, to your account and update it when it changes, so letters arrive at your local time. 1 year • clk - 12- or 24-hour clock. 1 year • NEXT_LOCALE - the language of the site. Your browser writes it when you change the language or sign in. Until you close the browser • verify_banner_dismissed_… - remembers that you closed the "confirm your email" banner. Its name ends with a short code derived from your account ID. 24 hours • access_token - keeps you signed in (HttpOnly, Secure). 15 minutes • refresh_token - renews your sign-in (HttpOnly, Secure). 7 days, or 30 days if you tick "Keep me signed in" Browser storage • predictor.session (local storage) - a yes/no hint that you may be signed in. No personal data • sports-predictor-filters (local storage) - the last sport, league, season and date filters you used • Session storage holds a few short-lived interface flags, such as a notice you closed. They disappear when you close the tab Each of these makes the site work or remembers a choice you made. We use no analytics, advertising or tracking cookies and no tracking pixels, so we do not ask for cookie consent. You can delete them in your browser settings; you will then be signed out and asked to confirm your age again. Our page-view counter, Cloudflare Web Analytics, is a small script that runs when a page loads and reports the visit and the page's loading speed to Cloudflare. It stores nothing in your browser, neither a cookie nor local storage, so the list above stays complete.

These services process data for us: AI Predictions (via OpenRouter) We send match data to a language model through OpenRouter to write the match analysis: the preview before a match and the recap after it. That data describes the fixture and the people taking part in it: team names; where a player has been reported absent, their name and the general reason; and, for a recap, the lineups, the scorers, the cards and the player ratings the provider reports. It carries no personal data about you as a reader - no account details, no email address, no browsing history. See OpenRouter's privacy policy at openrouter.ai/privacy. Sports data (API-Sports, TheSportsDB) We download fixtures, results, teams, players and statistics from these providers. We send them nothing about you. Sentry (error tracking) When our server hits an error, the error report goes to Sentry. When a page fails to load or breaks in your browser, that error goes to Sentry too, whether or not you have an account. Such a report holds the page address without anything after the question mark, your browser and operating system, and the error itself; if you are signed in, also your account ID. Sentry sees your IP address when the report arrives but does not store it. For sign-in events it includes your IP address, a partly hidden email address and your account ID, so we can investigate failures and repeated attempts to break into an account. Sentry also receives a small sample of ordinary requests (the address requested and how long it took) so we can find slow pages. Our Sentry account stores its data in Sentry's EU region (Germany). Resend (email delivery) Every email we send goes through Resend, which receives your email address and the content of the letter. Cloudflare (network, storage, security, statistics) All traffic to the site passes through Cloudflare, which protects it and resizes team and player images. Profile photos and account exports are stored on Cloudflare R2 in the EU. Database backups are also stored on Cloudflare R2. Mail to our addresses is forwarded by Cloudflare. If the sign-up and sign-in forms show a security check, it is Cloudflare Turnstile, which receives your IP address. Cloudflare Web Analytics also counts page views and page speed for us: a small Cloudflare script runs in your browser, and Cloudflare sees your IP address, from which it works out your country. It sets no cookie. Google (Gmail) Mail you send to our addresses is forwarded by Cloudflare to a Gmail mailbox, where we read and answer it. Google stores those messages and our replies. Hetzner (hosting) The application and its database run on a server rented from Hetzner in a data centre in Germany. Transfers outside the EEA The operator is established in Georgia and accesses this data from there. Georgia does not have an EU adequacy decision, and we have not signed standard contractual clauses with the services above. We transfer your data because it is necessary to provide the service you asked for (Article 49(1)(b) GDPR). The services above may also process data outside the EEA under their own terms.

Our match pages name the people taking part: players and, where the data carries them, coaches and officials. That information comes from the sports data providers named above, and we publish it as they report it - including where a player has been reported unavailable for a match, with the general reason given. We do not gather it ourselves, we add nothing to it, and we build no profiles from it. If you are named on one of our pages and want an entry corrected or removed, write to the address in the Contact section, naming the page and the entry. We will act on it, and where the record originates with a data provider we will pass your request on to them as well.

We protect your data with these measures: • Passwords are hashed using argon2id (memory-hard hashing algorithm) • Authentication tokens are stored in HttpOnly, Secure cookies (not accessible to JavaScript) • Refresh token rotation with family tracking to detect token theft • Brute-force protection: accounts are temporarily locked after repeated failed login attempts • HTTPS encryption for all data in transit Despite these measures, no security system is completely impenetrable. We encourage you to use a strong, unique password and to notify us immediately if you suspect unauthorized access to your account.

We may update this Privacy Policy from time to time. When we do, we change the "Last updated" date at the top of this page. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

The data controller for personal data processed through the Service is: IE Ihor Reutskyi, individual entrepreneur (Georgia) Reg. code: 345758708 · Certificate no.: C56572 Address: Shartava str. 7, Batumi 6004, Georgia For privacy-related inquiries, data subject requests, or concerns: Email: [email protected] Subject line: Privacy Request For general inquiries: [email protected] We respond to all privacy requests within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.