Politika privatnosti

1. Who is responsible

Sportybell is operated by sportybell.com (North Macedonia) ("we", "us"). We are the controller of the personal data described here. You can reach us about privacy at support@sportybell.com. Our full details are in the Legal notice.

2. What we process, and why

2.1 Stored in your browser. These items stay on your device; we cannot read them except where noted below:

2.2 Sent to our server on each visit or app launch: the random identifier, the language you use Sportybell in and your time zone. We use them to word and time your alerts, and to keep your follows working. Legal basis: our legitimate interest in providing the service you are using (Art. 6(1)(f) GDPR).

2.3 When you follow a match, team, competition or country, or turn on its alerts, we store under the random identifier: what you follow, which alerts you want (kick-off, goals, red cards, half-time, full-time), and the alerts created for you, with whether you have read them. Legal basis: providing the feature you asked for (Art. 6(1)(b) GDPR).

2.4 Push notifications are optional. If you allow them, your browser or phone gives us a push address: for the website, an endpoint and encryption keys from your browser's push service; for the apps, a push token. We use it only to send the alerts you turned on. You grant this permission in your browser or phone and can withdraw it at any time in the same settings. Legal basis: your consent (Art. 6(1)(a) GDPR) and providing the feature.

2.5 The Sportybell apps send us, when they start: the platform (iOS or Android), the app version, your language and time zone, and — if you allow notifications — a push token, under a random identifier the app creates. They are used exactly as above. The apps have no accounts, no advertising and no analytics SDKs.

2.6 Server and security logs. With every request our servers and network receive technical data: IP address, date and time, the page or address requested, browser type (user agent) and referring page. We use it to deliver pages, keep the service secure, stop abuse such as automated scraping, and fix errors. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

2.7 When you write to us we process your email address, name and message to answer you. Legal basis: legitimate interests, or steps you asked us to take (Art. 6(1)(f) and (b) GDPR).

2.8 Analytics, only if you accept. We use Google Analytics 4, provided by Google Ireland Limited, to see which pages and features are used. Nothing from Google is loaded until you choose Accept in the cookie banner. After that your browser loads Google's script, which sets the cookies _ga and _ga_<ID> (kept for up to 13 months) and sends Google: the pages you view and their language, actions such as opening a match, switching a tab, pinning a match, turning alerts on or off, choosing how many past matches to show, changing language and what you search for, plus your browser, device, screen size and approximate location (country and city, derived from your IP address, which Google Analytics does not store). We never send your Sportybell identifier, your push address or anything that names you, and Google signals and ad personalisation are off. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with Cookie settings at the bottom of every page, which also deletes the _ga cookies; if you decline, nothing is loaded or sent.

3. What we do not do

• No accounts, passwords or payment details.
• No cookies except Google Analytics, and those only if you accept them (section 2.8).
• No advertising, and no profiling or tracking across other websites or apps.
• We do not sell personal data, and we do not "share" it for cross-context behavioural advertising (as defined in California law).
• No decisions about you are made by automated means with legal or similarly significant effects.

4. Who receives data

Only service providers who process data on our behalf, under our instructions and a data processing agreement where the law requires one:

• Hosting and network providers that run our servers and protect them against attacks.
• Push services, only if you turn on notifications: your browser's push service (for example Google Firebase Cloud Messaging for Chrome and Android browsers, Apple Push Notification service for Safari, Mozilla for Firefox, Microsoft for Edge). Website alerts are encrypted end to end, so the push service cannot read them.
• For the apps, Expo (650 Industries, Inc.), which forwards app notifications to Apple and Google for delivery.
• Google Ireland Limited (Google Analytics), only if you accept analytics cookies. Google may process this data in the United States.
• Our email provider, when you write to us.
• Public authorities, only where the law obliges us.

5. International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision (such as the EU–US Data Privacy Framework, where the provider is certified) or on the European Commission's Standard Contractual Clauses.

6. How long we keep data

• Alerts: 30 days, then deleted automatically.
• Follows: until you unfollow or ask us to delete them.
• Push addresses: until you block notifications, the push service reports them as no longer valid, or you ask us to delete them.
• Everything stored under an identifier (language, time zone, app version, follows, alerts, push address): deleted automatically when that browser or app has not used Sportybell for 12 months.
• Server logs: a short period, normally no longer than 30 days, unless needed to investigate an attack.
• Analytics: the _ga cookies expire after 13 months; Google keeps the analytics data for 14 months, then deletes it.
• Emails: as long as needed to deal with your request, and no longer than 2 years after it is closed.
• In your browser: until you clear this site's data.

7. Your rights

Depending on where you live, you have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time (withdrawing does not affect processing before it). Residents of California and other US states also have the right to know, delete and correct, and not to be discriminated against for using these rights.

To use your rights, email support@sportybell.com and include your Sportybell identifier (shown on this page in the browser you use Sportybell in). We do not know who you are, so without the identifier we cannot find your data. We reply within one month.

You can also delete everything yourself: clearing this site's data in your browser (or uninstalling the app) removes the identifier, after which the data on our server can no longer be linked to you and is deleted as described in section 6.

You may complain to a data protection authority, in particular in the country where you live or work — for example your national authority in the EU, the Information Commissioner's Office in the UK, or the Personal Data Protection Agency in North Macedonia.

8. Children

Sportybell is not directed at children under 13 (or the higher age set by the law of your country), and we do not knowingly process their data. If you believe a child has given us data, contact us and we will delete it.

9. Security

All connections use HTTPS. Identifiers are random and carry no personal meaning. Website push messages are encrypted end to end. Access to our servers is restricted to the people who run the service.

10. Changes

If this policy changes, we update the date at the top of this page; important changes are announced on the site.