Last updated: 2026-06-02
This Privacy Policy explains how Almanacstats LLC, the operator of almanacstats.com and the Almanacstats mobile applications (together, the "Platform"), processes personal data relating to visitors, registered users and other identifiable individuals whose data appears on the Platform.
If you are a sportsperson, coach, club official or other public figure whose data is published on the Platform in our editorial capacity, please read the separate GDPR & Journalism Notice as well — it explains the legal basis on which we publish your information and the rights that apply.
1. Controller and contact
| Item | Details |
|---|---|
| Data controller | Almanacstats LLC |
| Registered seat | Registered office to be confirmed upon incorporation |
| Registration | Registration pending |
| Privacy contact | [email protected] |
| Data Protection Officer | — (if not appointed, omit this row) |
| Supervisory authority | Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, Zagreb — azop.hr |
For users located in the European Economic Area we act as data controller under Regulation (EU) 2016/679 ("GDPR"). For users in the United Kingdom we act under the UK GDPR. For users in other jurisdictions we apply this Policy as a global baseline, subject to additional notices required by local law.
2. The data we collect from you
2.1 When you visit the Platform
When you load a page or open the app we automatically collect:
- IP address and approximate location derived from it (country, sometimes city);
- device type, operating system and version, browser type and version, screen size;
- the page you came from (HTTP referrer), the page you visit, and the time and date of the visit;
- application version (for the mobile app), and a non-personal advertising identifier where the OS allows.
This data is used to operate and secure the service, prevent abuse, count audience and produce aggregate statistics. Without it the Platform cannot be served.
2.2 When you create an account
If you choose to register we ask for:
- email address (mandatory);
- a chosen display name and optional avatar;
- password (stored as a salted, irreversible hash) or, if you use social login, the identifier returned by Apple, Google or Facebook;
- account preferences (favourite teams, leagues, players, notification settings, language, time zone).
2.3 When you interact with the Platform
We log the actions you take while you are logged in: which teams and players you follow, which notifications you enable, which lineups you build, which articles you save. We also log the same actions when you are not logged in, against an anonymous cookie identifier, in order to operate the same features.
2.4 When you contact us
If you write to [email protected], to support, or to legal — we receive your message and any data it contains. If you take part in a survey we receive your answers. If you write a comment or submit user-generated content we receive what you submit.
2.5 What we do not collect
We do not knowingly collect special-category data (Article 9 GDPR) from our visitors and registered users. We do not ask for your political opinions, religious beliefs, biometric or genetic data, sex life or sexual orientation. We do not run profiling for automated decisions that produce a legal or similarly significant effect.
For the separate question of personal data of sportspersons published as editorial content, see Section 4 below and the GDPR & Journalism Notice.
3. Why we process your data — purposes and legal bases
| Purpose | What this involves | Legal basis (GDPR Art. 6) |
|---|---|---|
| Operating the Platform | Serving pages, storing your settings, logging you in, syncing favourites across devices | Performance of contract (Art. 6(1)(b)) for registered users; legitimate interest (Art. 6(1)(f)) for visitors |
| Security and fraud prevention | Rate-limiting, bot detection, blocking abusive traffic | Legitimate interest (Art. 6(1)(f)) |
| Audience analytics | Counting page views, understanding usage patterns, A/B testing UI changes | Consent for non-essential analytics (Art. 6(1)(a)); essential server logs under legitimate interest |
| Personalised content and notifications | Recommending matches, news and players that match your declared favourites | Consent (Art. 6(1)(a)) for app push; settings-based legitimate interest within the app |
| Advertising | Showing ads, measuring their effectiveness | Consent for non-essential advertising and tracking cookies (Art. 6(1)(a)); contextual ads under legitimate interest |
| Customer communication | Replying to your support questions, sending service emails | Performance of contract or legitimate interest |
| Legal obligations | Tax records, response to lawful requests from public authorities | Legal obligation (Art. 6(1)(c)) |
| Editorial publication | Publishing data about sportspersons and other public figures | Public interest in freedom of expression and information (Art. 85 GDPR + Croatian Implementing Act) — covered in the dedicated Journalism notice |
You may withdraw any consent at any time by changing your preferences in our cookie banner, the app settings or by writing to [email protected]. Withdrawal does not affect the lawfulness of processing before the withdrawal.
4. Editorial processing of public-figure data
Almanacstats is an editorial publication. We publish information about sportspersons, coaches, referees, officials and clubs in their public sporting capacity. This processing relies on the journalism exemption (Article 85 GDPR) and the Croatian Media Act. The categories of public-figure data we publish, the limits we apply, and how a sportsperson can exercise their rights against us are set out in full in the GDPR & Journalism Notice. The rest of this Privacy Policy refers to data of visitors and registered users unless we say otherwise.
5. Cookies and similar technologies
We use cookies, local storage and similar identifiers for essential, analytics and advertising purposes. The full list and a way to manage them is provided in our Cookies Policy and through the consent banner.
6. Sharing your data
We do not sell your personal data. We share it only with:
- Service providers acting as our processors under written data-processing agreements: cloud-hosting providers, content-delivery networks, email-delivery services, push-notification gateways, customer-support tooling, analytics providers (when consented to).
- Advertising and measurement partners when you consent to non-essential cookies. The list is shown in the consent banner and updated in the Cookies Policy.
- Identity providers Apple, Google or Facebook, only when you choose to use social login and only to the extent strictly necessary for authentication.
- Statutory authorities when we are required by law, court order or duly issued government request — and we resist requests we consider disproportionate.
- In a corporate transaction (merger, acquisition, sale of assets) we may transfer data to the successor, subject to the same level of protection and notice to you where required by law.
A list of current key processors is available on request to [email protected].
7. International transfers
Some of our processors are located outside the European Economic Area, primarily in the United Kingdom and the United States. We rely on the following safeguards:
- adequacy decisions where they exist (UK, Switzerland, Israel, South Korea, Japan and others designated by the European Commission);
- the EU–US Data Privacy Framework for certified US recipients;
- Standard Contractual Clauses adopted by the European Commission in 2021 for transfers not covered above, together with a Transfer Impact Assessment.
You can request a copy of the safeguards we rely on for a specific transfer at [email protected].
8. Retention
We retain personal data only for as long as we need it for the purposes set out in this Policy:
- Server logs — 30 days, then aggregated for the security analytics archive;
- Account data — for as long as the account is active and for 6 months after deletion or last sign-in, then deleted or anonymised;
- Support correspondence — 24 months from the last message in the thread;
- Cookie data — see lifetimes in the Cookies Policy;
- Editorial content that contains personal data — see the Journalism Notice (longer retention is allowed for archival purposes in the public interest).
9. Your rights
If we hold personal data about you as a user (not as a sportsperson covered by the Journalism Notice), you have the right to:
- access the data we hold about you;
- rectify inaccurate or incomplete data;
- erase the data, subject to legal exceptions;
- restrict processing while a dispute is being resolved;
- portability of the data you provided to us;
- object to processing based on legitimate interest, including for direct marketing;
- withdraw consent at any time, where consent is the basis;
- lodge a complaint with the Croatian AZOP or with the supervisory authority of your country of residence.
To exercise these rights, write to [email protected]. We will respond within 30 days, or explain why we need more time (Article 12(3) GDPR).
We will ask you for a proof of identity sufficient to confirm that you are the person whose data is requested, but no more than necessary.
10. Children
The Platform is not directed at children under the age of 16. If you believe that a child under that age has provided us with personal data, please contact [email protected] and we will delete the data without undue delay.
11. Changes to this Policy
We may amend this Policy from time to time. When we do so we will update the "Last updated" date at the top and, in case of material changes, notify registered users by email or a clear on-platform message. Continued use after the effective date constitutes acceptance of the amended Policy.
12. Contact
Privacy questions, rights requests and complaints — [email protected]. Postal address — Almanacstats LLC, Registered office to be confirmed upon incorporation.