Privacy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Stefan Böttcher, Neue Str. 2, 16515 Zühlsdorf, Germany Email: support@matchanalyzr.com

We process personal data only within the legally permitted scope and limit collection to what is necessary for the respective purpose (data minimization). The applicable legal bases include, in particular: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures), and Art. 6(1)(f) GDPR (legitimate interest).

Where we use external service providers for individual functions of our services, these providers have been carefully selected and engaged. They are bound by our instructions and are contractually obligated under data processing agreements pursuant to Art. 28 GDPR.

MatchAnalyzr is hosted on the infrastructure of Vercel Inc., with servers located in Frankfurt am Main. Vercel processes technically necessary server log data (e.g. IP address, time of access, requested URL) to provide and secure the application. The legal basis is our legitimate interest in stable and secure operation (Art. 6(1)(f) GDPR). We have entered into a data processing agreement with Vercel.

For our database we use Neon (PostgreSQL) with servers located within the EU. For caching and access acceleration we use Upstash (Redis) with servers located in Frankfurt am Main. Both providers process data exclusively on our behalf under a data processing agreement.

For account creation, login, and session management we use the authentication service Clerk, Inc., based in the USA. This involves processing your email address, name (if provided), login credentials, and technically necessary session cookies.

The transfer of data to the USA is based on EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR. The legal basis for this processing is the performance of the usage agreement (Art. 6(1)(b) GDPR). The session cookies used are technically necessary for you to navigate the application while logged in and do not require separate consent.

To process paid subscriptions (Pro and Premium plans) we use the payment service provider Stripe Payments Europe, Limited, based in Ireland. When you take out a paid subscription, the contract and payment data required for payment processing (e.g. name, email address, billing address, payment method) is transmitted directly to Stripe and processed there.

We do not store credit card data or other sensitive payment data on our own systems. The legal basis for this processing is the performance of the paid-usage contract (Art. 6(1)(b) GDPR). For further information please refer to the Stripe privacy policy.

If you contact us by email at support@matchanalyzr.com or via our support form, we process the information you provide (in particular your email address and the content of your inquiry) to handle your request. The legal basis is the performance of the contract or the handling of pre-contractual inquiries (Art. 6(1)(b) GDPR) or our legitimate interest in efficiently handling inquiries (Art. 6(1)(f) GDPR).

For sending emails (e.g. support replies and transactional emails), we use the service Resend, Inc., based in the USA. Data transfers to the USA are based on EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR; a data processing agreement is in place with Resend.

For organising and answering support requests, we use the helpdesk service Crisp IM SAS, based in France (EU). Requests submitted via our support forms as well as messages addressed to support@matchanalyzr.com are processed and answered there; Crisp does not run a chat widget or otherwise access your device. A data processing agreement is in place with Crisp.

To detect and resolve technical errors we use the service Sentry, with servers located in the EU. In the event of an error, technical context information (e.g. error message, affected function, truncated IP address) is captured; personal data such as email addresses or names is filtered out before transmission.

To monitor the availability of our services we additionally use Checkly, with servers located in the EU. The legal basis for both services is our legitimate interest in stable, secure, and error-free operation of the application (Art. 6(1)(f) GDPR).

We use Vercel Web Analytics for statistical analysis of how our website is used. The service operates without cookies and does not create personal usage profiles; only aggregated metrics such as page views, referrers, and approximate geographic origin are collected. The legal basis is our legitimate interest in optimizing our offering (Art. 6(1)(f) GDPR). No consent is required for this.

We use exclusively technically necessary cookies that are required for the operation of the application and do not require consent under § 25 TTDSG. These include in particular:

We store personal data only for as long as necessary for the respective processing purpose or as required by statutory retention obligations. Account-related data is stored until your account is deleted.

If an account without an active paid subscription is deleted, deletion takes place immediately. If an active Pro or Premium subscription exists, deletion is scheduled for the end of the current billing period and carried out automatically. Statutory retention obligations (e.g. under commercial or tax law) remain unaffected.

Security-relevant log data (e.g. login attempts, administrative changes) is retained in pseudonymized form (hashed IP addresses) for 12 months for security and evidentiary purposes.

Under the GDPR you have the following rights:

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR that produces legal effects concerning you or similarly significantly affects you. The statistical metrics and analysis scores displayed in MatchAnalyzr serve exclusively to present football data for informational purposes and are not used to make automated decisions about you as a person.

We will adapt this privacy policy whenever the legal framework or the services we offer change. The version published on this page at any given time shall apply.