Privacy policy

This page is a draft. It has not been reviewed by a lawyer and is published so the site is complete. Replace it before launch.

Last updated: see the date at the top of this page.

This policy explains what MATCH PULSE collects, why, how long it is kept, and what you can do about it. The controller is [COMPANY NAME], [ADDRESS]. For privacy questions, write to [PRIVACY EMAIL].

We apply the GDPR and the UAE Personal Data Protection Law.

What we collect

When you sign in. Your name, email address and profile picture, as the identity provider (Google, Apple or Facebook) gives them to us, plus which provider you used. We never receive or store a password. Apple's private relay addresses work normally.

What you do in the product. The matches, selections and engine reads you follow; your plan, purchases and unlocks; your language and odds-format preference; the competitions you star; which alerts you have switched on.

Your sessions. For each signed-in device: the browser and operating system, the city derived from the IP address, and when it was last used. The full IP address is not stored against your account.

Payments. Handled entirely by Stripe. We store a customer reference and what you bought. We never see or hold your card details.

Errors and security events. When something fails we record what happened and a trace identifier. Tokens, cookies, OAuth codes and payment data are never logged, and email addresses are masked.

What we do not do

We do not sell your data. We do not profile you to decide what to charge you. We do not load any third-party script on a page before you have agreed to it — the site serves its own fonts, icons and images from its own domain, so there is no CDN watching you read it.

Cookies

Necessary cookies keep you signed in and protect forms against cross-site request forgery. They are set for everyone and cannot be turned off, because the site cannot work without them.

Advertising is shown to readers on the Free plan. Nothing personalised is served until you agree, and you can change that at any time. Paid plans see no ads at all, and no ad is ever shown for gambling, betting, casinos, lotteries, fantasy betting, alcohol or adult content.

How long we keep it

Your account data is kept while your account exists. Session records expire after 30 days. Error logs and security events are kept for 90 days. Delete your account and your personal data is removed within 30 days.

The one exception is the ledger. Predictions are published before kick-off and graded afterwards, and the hash chain that makes them verifiable cannot have rows taken out of it. Your rows are anonymised rather than deleted: nothing in them points to you afterwards.

Your rights

You can get a copy of everything we hold about you, as JSON, from your profile — immediately, without asking anyone. You can delete your account from the same place.

You also have the right to correct your data, to object to processing, and to complain to your data protection authority.

Where your data is

The service runs on Railway, in [REGION]. AI engines are called by our own servers; the match data we send them contains no personal data of yours — it is fixtures, statistics and prices, and never who is reading.

Children

The service is for people aged 18 and over. We do not knowingly collect data from anyone younger.