This policy explains what personal data is processed when you use almanacstats.com and the public API at api.almanacstats.com (together, the "service"), why, and what rights you have. AlmanacStats is a free football statistics website. It has no user accounts, no comments, no newsletters and no advertising, so we process very little data about visitors.
If you are a player, coach or referee whose sporting data appears on the site, please also read the Data protection and editorial policy.
1. Who is responsible
The controller under the EU General Data Protection Regulation (GDPR) is the operator of AlmanacStats. AlmanacStats is an independent project, not a company.
AlmanacStats is operated by a private individual, Alex Semensky (the operator).
Contact: info@almanacstats.com
Privacy requests: privacy@almanacstats.com
We are not required to appoint a data protection officer and have not appointed one. Please send any privacy question to the address above.
2. What data we process
2.1 Server and Cloudflare logs
The service is delivered through Cloudflare (content delivery, DNS and security) from our server, which is hosted by Aeza in the Netherlands. Both process connection data to deliver pages and data to your browser. Our server keeps a log entry for each request it receives, containing:
- your IP address;
- the user agent (the browser and operating system your browser reports);
- the requested URL and the referrer (the page that linked to it);
- the date and time of the request.
We use these logs to deliver the service, to keep it secure (for example, to detect and block attacks and abusive automated traffic) and to find errors. Server logs are deleted after at most 14 days.
2.2 Cloudflare Web Analytics
All pages use Cloudflare Web Analytics to count visits. It does not use cookies, and we only see aggregate statistics, such as the number of views per page.
2.3 Google Analytics (only with your consent)
Only if you accept the "Analytics" category in our cookie banner does the site load Google Analytics 4 (measurement ID G-6BV77M083S). It records how the site is used, for example which pages are viewed, how you arrived at them, your device and browser type and your approximate location, and it sets the cookies _ga and _ga_6BV77M083S (expiry 13 months). Google Analytics 4 does not store IP addresses, and we have turned off Google signals and ad personalisation. If you do not accept, Google Analytics is not loaded. The information pages, such as this one, do not load Google Analytics at all.
2.4 Settings stored in your browser
The site stores your cookie choice (cookie almanacstats_consent and local storage acb_consent_v1) and the interface language you choose (local storage as_lang). These entries contain only the settings themselves, not an identifier, and are strictly necessary for the functions you use. Details are in the Cookies Policy.
2.5 When you e-mail us
If you write to one of our addresses, we process your e-mail address, your name if you give it and the content of your message in order to reply and deal with your request. E-mail service providers deliver the messages to us.
2.6 What we do not do
We do not run user accounts, advertising, newsletters or social media plug-ins, and we do not sell personal data.
3. Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Delivering the website and API, keeping them secure and fixing errors | Server and Cloudflare logs (2.1) | Art. 6(1)(f): our legitimate interest in operating a working and secure service |
| Aggregate visitor statistics without cookies | Cloudflare Web Analytics (2.2) | Art. 6(1)(f): our legitimate interest in understanding how the site is used |
| Detailed usage statistics to improve the site | Google Analytics (2.3) | Art. 6(1)(a): your consent, which you can withdraw at any time |
| Remembering your cookie choice and language | Browser storage (2.4) | Art. 6(1)(f): needed for the function you asked for; strictly necessary storage needs no consent |
| Answering your messages | E-mails (2.5) | Art. 6(1)(b) where your message concerns a contract or steps before one, such as a partnership; otherwise Art. 6(1)(f): our legitimate interest in answering |
4. Who receives data
We use these service providers, which process personal data for us:
- Aeza: hosting of our server in the Netherlands.
- Cloudflare, Inc. (USA): content delivery, DNS, protection against attacks and Cloudflare Web Analytics. See Cloudflare's privacy policy.
- Google Ireland Limited and Google LLC (USA): Google Analytics, only if you have consented. See Google's privacy policy.
- E-mail service providers: delivery of messages you send us.
We do not sell personal data or share it with advertisers. We disclose data to authorities only where we are legally required to.
5. Transfers outside the EEA
Cloudflare, Inc. and Google LLC are based in the USA and are certified under the EU–US Data Privacy Framework. The European Commission has decided that certified companies ensure an adequate level of data protection (Art. 45 GDPR).
Our server and the data on it are located in the Netherlands, but the operator administers the server remotely from a country outside the European Economic Area (EEA). Data stored on the server, such as the logs described above, can therefore be accessed from outside the EEA for administration.
6. How long we keep data
- Server logs: up to 14 days, then deleted.
- Cloudflare: as described in Cloudflare's privacy policy.
- Google Analytics: the cookies expire after 13 months; event data in Google Analytics is deleted after at most 14 months.
- Cookie choice and language: your cookie choice is kept for 12 months, after which the banner asks again; the language setting stays until you clear your browser's site data.
- E-mails: as long as needed to deal with your request and any follow-up, then deleted.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased (Art. 17);
- have processing restricted (Art. 18);
- receive data you gave us in a portable format (Art. 20);
- object, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21);
- withdraw your consent at any time, with effect for the future (Art. 7(3)). For Google Analytics, use the Cookie settings button at the bottom of every page.
To exercise these rights, write to privacy@almanacstats.com. We answer within one month. As the site has no accounts, we usually cannot link log or analytics data to a person; if you want us to check for data about you, please tell us what would help us find it, such as your IP address and the time of your visit.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular the one in the country where you live (Art. 77 GDPR). The European Data Protection Board publishes a list of the supervisory authorities in the EU and EEA.
8. No automated decision-making
We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you (Art. 22 GDPR).
9. Do you have to provide data?
No. Without the connection data described in section 2.1, however, the service cannot be delivered to your browser. Accepting analytics is optional and does not change what you can use on the site.
10. Children
The site is not directed at children under 16. If you believe that a child has sent us personal data, please contact privacy@almanacstats.com and we will delete it.
11. Changes to this policy
We update this policy when the way we process data changes. The date at the top shows when it was last updated.
12. Contact
Privacy questions and requests about your rights: privacy@almanacstats.com. We reply in English or Russian.