1. Controller
MatchTide is operated by Stanislav Sliuzar, a self-employed sole trader in the United Kingdom, trading as MatchTide. The operator is the controller of personal data processed for MatchTide’s own purposes.
Privacy questions, requests and complaints can be submitted through the privacy form in the Support Centre or sent to [email protected].
2. Scope
This Policy applies to the MatchTide website, account functions, comments, in-site notifications, support and rights workflows, News and Storylines, privacy choices and related technical services. Third-party websites and services have their own privacy notices.
3. Data we may process
Depending on how you use MatchTide, we may process:
Account and identity data
Email address, password hash, email-verification status, display name, nickname, avatar, language, timezone, country or region, preferred team, optional profile details and account status.
MatchTide does not need your date of birth for routine registration and does not routinely collect identity documents, selfies or biometric age estimates.
Authentication and security data
Session identifiers, remember tokens, password-reset records, API tokens, login times, IP address, user agent, device/browser information, rate-limit events, anti-abuse signals and security logs.
Football preferences and activity
Teams and fixtures you follow, alert preferences, hidden-score preferences, region settings, notification state and interactions with account features.
Community data
Comments, replies, votes, edit/delete history, moderation status, reports, appeals and public display information linked to a comment.
Support, privacy, legal and security cases
Contact details, category, subject, message, relevant URLs, evidence you choose to provide, correspondence, status, actions, outcome and an audit history of access to private evidence.
Editorial and correction data
Correction requests, source links, rights claims, evidence, editorial correspondence and information required to investigate a report.
Analytics and privacy-choice data
Your analytics choice, consent/version information and limited or full Google Analytics measurement as described in section 8 and the Cookie and Storage Technologies Policy.
Technical and provider data
Request timestamps, server logs, delivery status, queue/job records, API error information and metadata needed to operate football-data imports, email and infrastructure. We avoid putting message bodies or unnecessary personal information into routine technical logs.
4. How we obtain data
We receive data:
- directly from you when you register, update a profile, comment, choose preferences or contact us;
- automatically from your browser, device and network when you use the service;
- from authentication, email, analytics, anti-abuse and infrastructure providers;
- from moderators and administrators who record actions or outcomes; and
- from public or third-party football and editorial sources where the information is not account data.
5. Why we use data and our legal bases
The legal basis depends on the purpose and circumstances.
To provide an account and requested features
We use account, authentication, follow, preference, notification and community data to provide features you request and to perform our agreement with you.
To keep MatchTide secure and reliable
We use security, log, anti-abuse and diagnostic information for our legitimate interests in protecting users, preventing fraud and abuse, maintaining service integrity and investigating incidents, and where necessary to meet legal security duties.
To moderate comments and enforce rules
We use comments, account information, reports and moderation records for our legitimate interests in operating a safe and lawful community, protecting rights and enforcing the Community Guidelines.
To answer support, privacy, legal and security requests
We use case information to respond to your request, comply with legal obligations, protect rights and pursue our legitimate interests in resolving disputes and maintaining an audit trail.
Data-protection complaints are acknowledged within 30 days, investigated without undue delay, kept updated where appropriate and given an outcome without undue delay.
To operate and improve football information
We use technical and aggregate service information for our legitimate interests in operating, debugging and improving MatchTide.
Limited analytics before or without full consent
Where applicable law permits, MatchTide uses limited cookieless Google Analytics measurement solely to create aggregate statistics about how the service is used and to improve it. Analytics and advertising storage remain denied, analytics cookies are not set, advertising features are disabled and the measurement is not used to identify, profile or target individual visitors.
We rely on our legitimate interests and, in the United Kingdom where its requirements are met, the statistical-purposes exception under PECR. You can object free of charge at any time through Privacy Choices. If you turn analytics off, the Google tag is blocked on later page loads and future analytics events are not sent.
In regions where prior consent is required for this limited mode, MatchTide blocks Google Analytics until you choose to allow it.
Full analytics
Full Google Analytics measurement is used only after you consent. It may set analytics cookies and measure sessions and interactions in more detail. You can withdraw consent at any time through Privacy Choices. Withdrawal does not make earlier lawful processing unlawful.
Legal obligations and claims
We may use or retain information where necessary to comply with law, respond to a lawful request, preserve evidence, or establish, exercise or defend legal claims.
6. Public information
Your nickname or display name, avatar, comment text, comment time and public moderation labels may be visible to anyone. Do not include private information in comments.
Account email, follow lists, private cases and private evidence are not intended to be public.
7. Automated systems and AI
MatchTide may use automated rules and, where enabled, artificial intelligence to:
- detect spam, abusive language, suspicious links or unsafe usernames;
- assist comment moderation and route content for review;
- structure, enrich, translate or rewrite football and editorial information;
- calculate football predictions, similarities or content relevance; and
- support the preparation and publication of News, Storylines or match-impact content.
Automated moderation may allow content, hold it for review or block it. These actions do not produce legal or similarly significant effects. You can report an error or appeal an eligible moderation action. Open form
We do not intentionally send account passwords, authentication codes or raw private evidence to an AI provider. The exact active AI flows and provider status are maintained in the service’s internal provider inventory and reflected in this Policy when they change.
8. Google Analytics 4 and Consent Mode
MatchTide uses Google Analytics 4 to understand how public pages are used and to improve the service. Google Consent Mode v2 controls the existing analytics implementation before any measurement is sent.
In the United Kingdom, before you make a choice, MatchTide may use limited cookieless measurement with analytics storage denied. In that mode:
- analytics cookies are not read or written;
- advertising storage, advertising user data and advertising personalisation are denied;
- Google Ads linking, remarketing, Google Signals, enhanced conversions and User-ID are not used;
- measurement is restricted to an allowlisted, sanitised set of public page-use information for aggregate statistics and service improvement; and
- sensitive, account, support, privacy, legal and security routes are excluded.
Google may still receive a cookieless network request containing technical information, consent state and a sanitised page location or event. Google may receive an IP address as part of the network request and use it transiently for security or coarse location processing; MatchTide does not receive a full IP address in Google Analytics reports. Limited analytics is not the same as no data being sent.
In regions configured to require prior consent, MatchTide blocks the Google tag until you allow analytics cookies.
If you allow analytics cookies, analytics storage is granted and Google Analytics may set first-party cookies such as _ga and a property-specific _ga_* cookie. Advertising-related consent remains denied.
MatchTide does not intentionally send email addresses, names, nicknames, comment or reply text, support messages, legal or privacy case data, passwords, authentication codes, raw search text, account identifiers or notification subscriptions to Google Analytics.
You can change your choice at any time through Privacy Choices. If you turn analytics off, MatchTide blocks future Google Analytics requests on later page loads and attempts to remove MatchTide-domain Google Analytics cookies. This does not delete aggregate reports created from earlier lawful processing.
9. Recipients and service providers
We may use providers for:
- hosting, database, storage and backups;
- content delivery, DNS, security and traffic protection;
- email delivery through SMTP2GO;
- authentication and anti-abuse services, including Google where enabled;
- Google Analytics 4;
- football information through API-Football/API-Sports;
- AI or moderation services where enabled; and
- error monitoring or operational support where configured.
Providers receive only the information reasonably needed for their role. Some providers act on our instructions; others may process limited information under their own terms. We do not claim a contractual role, storage location or transfer safeguard that has not been verified.
Football-data providers generally supply public sports information rather than account data, but they may receive technical request data from MatchTide’s server.
10. International processing
Some providers may process information outside the United Kingdom. Where a restricted international transfer of personal data occurs, we assess and use an available legal mechanism where required, such as an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses or another lawful safeguard.
Provider locations and contractual mechanisms can change. Contact [email protected] for current information about a material transfer relevant to your data.
11. Retention
We keep personal data only for as long as reasonably necessary for the purpose, legal obligations, security and claims.
- Account and preference data is generally kept while the account exists.
- Sessions and reset records expire according to their technical lifetime.
- Comments remain until you delete them, a moderator removes them or an account-deletion process anonymises them, subject to legal or moderation needs.
- General support cases are normally retained for up to 24 months after closure.
- Privacy complaints, formal rights matters, serious security reports and related evidence may be retained for up to six years after closure where needed for legal claims, accountability or preventing repeated infringement.
- Application, security and access logs are retained according to configured operational rotation and may be kept longer where an incident, abuse investigation or legal hold requires it.
- Policy acceptance records may be retained for the account lifetime and up to six years afterwards to demonstrate the account relationship and versions accepted.
- Full Google Analytics event-level data should be configured for no more than 14 months. Limited cookieless measurement is used for aggregate statistics and should not be retained at individual level longer than needed for aggregation and Google’s consent-mode processing.
- Backups are retained according to a rolling backup schedule. Deleted information may remain in a backup until that backup expires and is overwritten. Backups are used for disaster recovery and are not restored to recover a deliberately deleted account except where legally required.
If the implemented cleanup mechanism differs, MatchTide must publish the accurate mechanism instead of relying on this text.
12. Account export and deletion
You can request a machine-readable export of account data through account settings. The export may include profile, follows, preferences, comments, votes, in-site notifications, policy acceptances and eligible case information. It excludes passwords, secret tokens, internal security controls, other people’s data and provider data that MatchTide is not permitted to redistribute.
Account deletion requires reauthentication. MatchTide may use a short cancellation period before permanent deletion. At final deletion:
- profile, login, tokens, follows, preferences, votes and private account records are deleted or anonymised where appropriate;
- public comments may be anonymised to “Deleted user” to preserve discussion and moderation context, unless you delete them first or removal is otherwise required;
- closed support, privacy, legal, moderation and security records may be retained in minimised form for the periods above; and
- deletion from rolling backups occurs when the relevant backups expire.
13. Your rights
Depending on the law that applies, you may have rights to:
- obtain information about processing;
- access personal data;
- correct inaccurate data;
- erase data;
- restrict processing;
- object to processing based on legitimate interests;
- withdraw consent;
- receive portable data; and
- complain to a supervisory authority.
Rights are not absolute. We may need to verify your identity and may retain information where lawfully required.
For United Kingdom concerns, you may complain to the Information Commissioner’s Office after giving MatchTide a reasonable opportunity to address the matter.
14. Children and younger visitors
Public football pages can be browsed without an account. MatchTide accounts and account-only community features are for adults aged 18 or over. See Privacy for Younger Visitors.
15. Security
We use proportionate technical and organisational controls, including access controls, password hashing, HTTPS, rate limiting, private evidence storage and audit records. No service can guarantee absolute security.
Report a suspected vulnerability through Security and Responsible Disclosure or [email protected].
16. Changes
We may update this Policy when processing, law or providers change. Material account-related changes may require a new acknowledgement. Previous published versions remain recorded.
17. Contact and complaints
Privacy form: MatchTide Support Centre
Email: [email protected]
We will acknowledge a data-protection complaint within 30 days, investigate it without undue delay, keep you appropriately informed and communicate the outcome without undue delay.
YouTube API Services and embedded playback
MatchTide uses the YouTube API Services and the official YouTube embedded player to provide approved football video content. We store limited public YouTube channel and video metadata, such as channel identity, video title, publication time, availability, embed status and match relevance. Applicable YouTube API data is refreshed or deleted within the period required by YouTube's policies. MatchTide does not download or host copies of YouTube videos and does not access or store users' YouTube login credentials.
The player is not loaded during an ordinary match-page visit. If you choose Play on YouTube, Google and YouTube may receive information such as your IP address, browser or device information, the MatchTide page that initiated the request, and player interactions. They may use cookies or similar technologies under the Google Privacy Policy.