Privacy notice

01 Controller

The controller for the processing of personal data within the meaning of Art. 4(7) GDPR is:

02 What we collect

Website — when you visit this site, our hoster (Hetzner, Germany) keeps short-lived server logs: shortened IP address, timestamp, requested URL, HTTP status, referrer and user agent. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable delivery and abuse prevention). Logs are usually deleted after 14 days.

App — when you load the schedule, teams, players or forecasts, the app contacts our API at https://api.match-o-scope.com. We process the device IP address, timestamp, requested endpoint and your device locale. No account, no profile. Legal basis: Art. 6(1)(b) and (f) GDPR.

03 Feedback function

You can optionally send feedback on individual forecasts from within the app. We then process the match ID, your free-text comment, your device locale and — only if you choose to provide it — your email address. Legal basis: Art. 6(1)(a) GDPR (consent through the deliberate act of sending) and (f) GDPR (improving the app based on aggregated feedback). Retention: until your request is answered, at most 24 months for anonymised model evaluations.

04 Push notifications

Push notifications for your selected 2026 football tournament favorite team are optional and require your explicit consent via the iOS permission system. If enabled, we process the Apple push token and your selected team to deliver relevant team updates via Apple Push Notification Service (APNs). If a later app version ships with Firebase Cloud Messaging enabled (presence of GoogleService-Info.plist), the token is forwarded to Google Ireland Ltd. You can revoke push notifications at any time via iOS Settings → matchoscope → Notifications.

05 Processors and recipients

• Hetzner Online GmbH (Germany) — hosting of the website and API on EU servers.
• Apple Distribution International Ltd. (Ireland) — app distribution via the App Store and TestFlight, plus APNs for push delivery.
• Google Ireland Ltd. (Ireland) — only if Firebase Cloud Messaging is enabled in the app version you use.

Data processing agreements pursuant to Art. 28 GDPR are in place. We do not currently transfer personal data to recipients in third countries outside the EU/EEA without appropriate safeguards (e.g. EU Standard Contractual Clauses, EU-US Data Privacy Framework).

06 Cookies, analytics, advertising

This website sets no non-essential cookies and uses no web tracking. The app contains no advertising and no analytics or tracking SDKs. We do not access the IDFA for advertising purposes.

07 Retention

• Server logs: typically 14 days.
• Feedback entries: until answered / revoked, max. 24 months in anonymised form.
• Support email correspondence: up to 12 months after the case is closed.
• Push tokens: until revoked or the app is uninstalled.

08 Your rights

Under Arts. 15–22 GDPR, you have the right to access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent at any time with effect for the future. Please email support@match-o-scope.com. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).