Privacy policy

If you create an account, we store:

• your name, email address and, if you choose one, a username;
• your password, stored only as a secure one-way hash (we never see it), if you sign up with a password;
• if you sign in with Google: your Google account's name, email address and profile picture, as shared by Google with your permission;
• the favourites you pick (club, player, national team, league) to personalise the home page;
• sign-in sessions, including the IP address and browser they were created from, to keep you signed in and protect your account.

When you visit, our server keeps standard access logs (IP address, browser, pages requested) for security and to keep the service running, and we count visits with privacy-friendly analytics that use no cookies and don't identify you.

• to provide your account and sign you in;
• to personalise the site with your favourites;
• to keep the service secure, prevent abuse and fix problems;
• to understand, in aggregate, which pages are used so we can improve them.

• We don't sell or rent your personal data.
• We don't use advertising or tracking cookies, and we don't share your data with advertisers.
• We only use the Google data listed above, only for signing you in and showing your name and picture on your account.

We use one essential cookie to keep you signed in. It's set only when you sign in and is removed when you sign out. There are no analytics or advertising cookies.

• Google: sign-in with your Google account, if you choose it (Google's own privacy policy applies to that step).
• Google Cloud: hosts our servers and database.
• YouTube: match highlight videos play in YouTube's privacy-enhanced mode, only after you press play.
• Football data, team crests and player photos are loaded from our data providers; this doesn't involve your personal data.

Account data is kept until you delete your account. Sessions expire after 30 days of inactivity. Server logs are kept for up to 14 days and backups for up to 14 days.

You can change your favourites at any time, and delete your account and all its data from your account page. If you signed in with Google, you can also remove Gegenstats's access in your Google account's security settings.

To ask for a copy of your data or for any privacy question, email gegenstats@gmail.com.

Gegenstats isn't directed at children under 13, and we don't knowingly collect their personal data.

If we change this policy, we'll update the date above. Significant changes will be highlighted on the site.