Privacy and your data

Who operates Match XI?

Match XI is an independent project run by a football enthusiast based in Kyiv, Ukraine. The operator determines why and how the service uses personal information. For privacy questions and requests, contact support@matchxi.com.

Your controls, in one place.

What we use, and why.

• Website delivery and security: connection information, such as an IP address and request details, is processed by infrastructure providers to deliver and protect the site. The purpose is operating a secure, functioning service.
• Guest preferences: saved team, match and player IDs, your time zone and viewed-lineup or player-check markers are stored in your browser to provide the features you choose. Clearing browser data can remove them.
• Your optional account: an encrypted email address, sign-in and session records, saved IDs, time zone and read/check markers support sign-in and synchronisation. Signing in lets you choose whether to import local saved IDs. We use this information to provide the account service you request.
• Optional lineup emails: your email address, selected clubs, time zone, quiet hours, correction preferences and consent/delivery records support the alerts you separately choose. Guests confirm by email; signed-in users can enable alerts from their verified account. Consent can be withdrawn through the unsubscribe link or settings. We do not use email-open or link-click tracking in these messages.
• Optional analytics: after you allow it, Google Analytics measures page visits and selected feature interactions, such as using saved items. It uses online identifiers and device/browser information. We do not send account email addresses or the text of your support messages as analytics events. These six information/help pages and private account/email routes are excluded from analytics.
• Corrections and support: a site report can contain the issue, suggested correction, source link, page reference and time. Email support also receives your sender address and message. We use these to investigate, reply and improve the service. Please avoid sensitive personal information.

For account functions, processing is necessary to provide the service you request under these terms. Optional analytics and alerts rely on consent. We rely on legitimate interests in proportionate security, handling support and correcting factual errors. Legal obligations may require retaining or disclosing a record. You can object to processing based on legitimate interests.

Who helps deliver the service?

Cloudflare handles website traffic and support-email forwarding. Resend delivers sign-in codes and requested lineup messages. Google Analytics receives analytics information only after your choice to allow it. Google (Gmail) handles support correspondence; the receiving mailbox address is not published. Hosting and database infrastructure store the service records needed to run Match XI.

These services can process information in countries other than yours, including outside Ukraine and the EEA/UK. A service region is not a guarantee that all support or processing stays in that region. You can ask us about the providers and safeguards relevant to your data. We do not sell account or subscription data.

How long information is kept.

Different records serve different purposes. These are the service’s configured retention rules; provider-held records and backups may have separate retention.

Support messages and correction records are kept as needed to resolve the issue, retain useful correction history and handle related disputes. We do not currently specify a fixed automatic deletion period for them. Infrastructure logs, backups and provider-held analytics have separate settings; contact us for the applicable details. Withdrawing analytics consent stops future collection through this site; it does not itself erase information already received by Google.

Ask, correct, delete or object.

Depending on the law that applies, you may request access, correction, deletion, restriction, a portable copy of information, or object to particular processing. You can withdraw consent without affecting the lawfulness of processing before withdrawal. Some records may need to be retained for legal or security reasons; we will explain when that affects your request.

These links prepare a request; they do not delete or export anything automatically. We may ask for proportionate verification before releasing account information. Do not email sign-in codes or identity documents unless we have explained a necessary, suitable process.

You can complain to the Ukrainian Parliamentary Commissioner for Human Rights, or to the data-protection authority available under the law that applies to you, including an EEA authority or the UK ICO where applicable.

When this notice changes.

We update this notice when the service or its data use changes, with the review date shown above. A revised notice does not automatically grant consent to a new optional purpose. Questions are welcome at support@matchxi.com.