Privacy Policy

This policy covers two separate products: the GlobalScoreX website (globalscorex.com) and the GlobalScoreX mobile app for Android. They collect different data and use different tools, so each is described in its own section below — read the one that applies to you. Neither product requires an account or asks you for personal information such as your name, email or contacts.

Who is responsible for your data

The data controller for the website and the app is [CONTROLLER NAME / ADDRESS]. You can reach us about anything in this policy at [email protected].

Website — globalscorex.com

What we collect

Browsing scores on the website requires no account. Our analytics and advertising providers automatically receive limited technical data — your IP address, device and browser type, approximate (country/region-level) location derived from that IP, and which pages you view. It is used in aggregate to understand traffic, not to identify you. We use trusted service providers to operate the site and app. They process technical data such as your IP address only as needed to deliver the service to you.

Analytics

The website uses Google Analytics 4 for aggregate traffic trends, such as which competitions are most viewed. Google processes that data as our provider under its own policy. We use no other analytics service on the website.

Advertising

The website is supported by advertising, served by Google AdSense. Ads may set cookies and share data with Google's advertising systems in order to select, deliver and measure them, and to limit how often you see the same ad.

Two kinds of ad appear:

• Ads we place ourselves. A banner below the navigation on every page; up to three banners inside the live scores list, which sit between competition sections and never inside a results table; one above the footer; on wide desktop screens only, a tall ad in each of the side margins beside the page content; and, in each Legends article, two ads between paragraphs — one after the opening, one about two-thirds of the way through — which never interrupt a sentence, a quotation or a table. Every one of them sits in a shaded band labelled ADVERTISEMENT, so it is always distinguishable from scores and editorial content.
• Google Auto ads. Google places these automatically: a bar anchored to the bottom of the screen, which you can close, and an occasional full-screen ad shown between page loads, with a frequency cap. We have switched off Google's other automatic formats — including its own in-article ads and its own side-margin ads, now that we place both ourselves — so Google never decides for itself to drop an ad into the middle of an article or into the scores list. The in-article and side-margin ads you see are the ones listed above, in positions we chose.

Consent and your choices.Before Google's analytics or advertising code loads, the site tells it (through Google Consent Mode) what you have allowed. What happens depends on where you are:

• In the EEA, the UK and Switzerland you are asked by Google's consent message, a consent tool certified under the IAB Transparency & Consent Framework (v2.2).
• In Türkiye, and whenever we cannot tell which country you are in, you are asked by our own banner, with "Accept all", "Reject all" and "Manage options" (separate choices for analytics, advertising and ad personalisation, all off until you turn them on). Nothing optional runs and no ad is requested until you choose.
• Everywhere else, including the United States, there is no banner: analytics and advertising (including personalised ads) are on when the page loads, and you can turn each of them off at any time with Privacy settings. US visitors can also opt out of the "sale" or "sharing" of personal information — see US state privacy rights below.
• Without personalisation (because you did not consent, or opted out), ads are still shown but are non-personalised; Google may still use cookies on its own domains for them, to limit how often you see an ad and to prevent fraud. In the EEA, the UK and Switzerland, if you refuse storage on your device, Google shows limited ads that use no cookies.
• Change or withdraw your choice at any time with Privacy settingsat the bottom of every page — it is as easy as giving consent. Turning a purpose off deletes the related cookies on our domain. You can also manage Google ad personalisation through Google's Ads Settings (see Retention & your choices below).
• We keep a record of each choice: when it was made, what was chosen for each purpose, the version of the banner text shown and your country — never your IP address. Each browser gets a random identifier so a later change can be matched to the earlier choice.

Protecting the ads from abuse.Repeatedly clicking ads on a site can get that site's advertising account suspended, whoever did the clicking. To limit that, we count how many times a visitor looks like they have clicked an ad, and if the count passes a threshold within 24 hours we simply stop showing that visitor ads for the rest of the day.

• We never store your IP address for this. Your address is converted into a short irreversible code using a secret key that only we hold, and only that code is stored. It cannot be turned back into an address, and we cannot use it to identify you.
• It is deleted after 24 hours. Both the count and the pause expire automatically; nothing is kept beyond a day and nothing is added to any profile.
• Nothing about the ad itself changes. We do not watch, intercept or block clicks — we only decide, before the page loads, whether to request an ad at all.

Cookies

The website itself sets no cookies. It keeps your consent choice, any "Do Not Sell or Share" opt-out, and your country for choosing the right consent prompt, in your browser's local storage, which is strictly necessary and never leaves your device. Cookies from Google Analytics 4 and Google AdSense are set, where we ask for consent (the EEA, the UK, Switzerland and Türkiye, or when your country is unknown), only after you consent to their purpose; elsewhere they are set when the page loads, unless you turn them off in Privacy settings. Google's consent message and Cloudflare set strictly necessary cookies of their own. Every cookie, who sets it, how long it lasts and where the provider is located is listed in the Cookie Policy.

Retention & your choices

• Analytics (where consent is asked, only with it): Google Analytics 4 keeps event data for up to 14 months; its cookies last up to 2 years.
• Advertising: Google's advertising cookies last up to 13 months (where consent is asked, only with it); Google keeps ad-serving logs under its own retention rules and anonymises them over time.
• Your consent record: kept for up to 3 years from the decision, to show what you agreed to; your stored choice in the browser expires after 12 months, when you are asked again. A "Do Not Sell or Share" opt-out stays in your browser until you clear it.
• Ad abuse protection: 24 hours (see above).

None of this is linked to your identity. You can block or delete cookies in your browser, opt out of Google Analytics, and manage Google ad personalisation at Google's Ads Settings.

Why we use your data, and on what legal basis

• Analytics (Google Analytics 4) — to understand traffic and improve the site. Basis: your consent (GDPR Art. 6(1)(a); for the cookies, the ePrivacy rules).
• Personalised advertising (Google AdSense) — ads based on your interests. Basis: your consent (GDPR Art. 6(1)(a)).
• Non-personalised advertising and ad measurement — to fund the free service when you have not consented to personalisation, shown (where we ask) only after you have made a choice. Basis: our legitimate interests (GDPR Art. 6(1)(f)).
• Ad abuse protection — counting suspected invalid clicks with an irreversible code, for 24 hours. Basis: legitimate interests in preventing fraud (GDPR Art. 6(1)(f)).
• Delivering and securing the site (hosting, Cloudflare, technical logs). Basis: legitimate interests (GDPR Art. 6(1)(f)).
• Recording your consent choice — to be able to show what you agreed to. Basis: legal obligation (GDPR Art. 6(1)(c) with Art. 7(1)).
• Answering your emails. Basis: legitimate interests (GDPR Art. 6(1)(f)).

Where your data goes, and transfers abroad

• Hetzner Online GmbH — hosts the website, Nuremberg, Germany (EU).
• Cloudflare, Inc. (USA) — delivers and protects the website; it sees your IP address and sets security cookies.
• Google LLC(USA) and Google Ireland Ltd — Google Analytics 4, Google AdSense and Google's consent message.
• Supabase, Inc. (USA) — our database, which stores your consent record (no IP address).

Transfers to the USA are protected by the providers' safeguards: their certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where it applies, and the Standard Contractual Clauses approved by the European Commission in their data processing terms. You can ask us for details.

Complaints

If you think we handle your data unlawfully, you can complain to a data protection supervisory authority — in the EEA, the authority of the country where you live or work; in the UK, the Information Commissioner's Office; in Switzerland, the FDPIC; in Türkiye, the Personal Data Protection Board (KVKK). We would like to hear from you first at [email protected].

US state privacy rights (California and other states)

We do not sell personal information for money. But the ads and analytics on the website let Google collect identifiers — cookie IDs, your IP address, device and browser information, and the pages you view here — and Google may use them for ad targeting and measurement across sites. Under the California Consumer Privacy Act (as amended by the CPRA) and similar laws in other US states, that can count as a "sale" of personal information or "sharing" it for cross-context behavioural advertising. In the last 12 months we have disclosed these categories — identifiers and internet activity — to Google, for advertising and analytics. We collect no sensitive personal information, and we do not knowingly sell or share the data of anyone under 16.

• Opt out with Do Not Sell or Share My Personal Information at the bottom of every page. Opting out makes ads on this site non-personalised, tells Google to restrict how it processes your data, and switches off Google's advertising signals in Analytics. You will still see ads. The opt-out applies to the browser you use; repeat it on other browsers and devices.
• Global Privacy Control. If your browser sends a GPC signal, we treat it as that opt-out automatically — no click needed.
• Your other rights — to know what we collect, to have it deleted or corrected, and not to be treated differently for using your rights. As we keep no accounts, most data is held by Google; write to [email protected] and we will help, including requests from an authorised agent. If we decline a request, you can appeal by replying to our answer.

Notice for users in Türkiye (KVKK)

This section is the information notice required by Article 10 of the Personal Data Protection Law No. 6698 (KVKK).

• Data controller: [CONTROLLER NAME / ADDRESS].
• Data we process and how: your IP address, device and browser data, approximate location (country/region) and the pages you view, collected automatically by electronic means through cookies and similar technologies when you use the website; and the content of any email you send us.
• Purposes: measuring traffic (analytics); showing advertising, personalised only with your consent; protecting the ads from abuse; delivering and securing the website; recording your consent choice; and answering your messages.
• Legal bases (Article 5): your explicit consent for analytics and for advertising and personalisation cookies (Art. 5(1)); our legitimate interests, provided they do not harm your fundamental rights, for delivering and securing the site, non-personalised ads and ad abuse protection (Art. 5(2)(f)); and compliance with a legal obligation for keeping the consent record (Art. 5(2)(ç)).
• Transfers abroad (Article 9): the data is transferred to Google LLC, Cloudflare, Inc. and Supabase, Inc. in the USA, and to Hetzner Online GmbH in Germany, to provide the services described above. These transfers are made under the conditions of Article 9 of Law No. 6698.
• Your rights (Article 11): you can ask us whether your personal data is processed; request information about it if so; learn the purpose of the processing and whether it is used for that purpose; know the third parties, in Türkiye or abroad, to whom it is transferred; ask for incomplete or incorrect data to be corrected; ask for it to be erased or destroyed under Article 7; ask that third parties it was transferred to be told of such correction or erasure; object to a result against you that arises from analysis exclusively by automated systems; and claim compensation if you suffer damage because of unlawful processing.
• How to apply: email [email protected] with your request and enough information for us to identify the data concerned. We answer free of charge within 30 days at the latest (Article 13). If your request is refused or not answered, you can complain to the Personal Data Protection Board (Article 14).
• Consent and withdrawal: consent is asked separately from this notice, in the cookie banner, and you can withdraw it at any time with Privacy settings at the bottom of every page.

Mobile app — GlobalScoreX for Android

What the app collects, and why

The Android app requires no account and asks for no personal information. Unlike the website, the app is supported by advertising and uses mobile SDKs (not cookies). It collects:

• Advertising — Google AdMob. The app shows banner ads and an occasional full-screen ad, served by Google AdMob, with Meta Audience Network as a mediation partner that may also bid to fill those ad slots. This keeps the app free.
• Android advertising ID (AD_ID).AdMob and its advertising partners use your device's resettable advertising ID to serve and measure ads and to limit how often you see the same ad.
• Analytics — Google Analytics for Firebase. Aggregate usage only: which screens are opened, session and retention counts, app version, and device model and OS version.
• Crash & diagnostics. When the app hits an error it sends a diagnostic report (the error, app version and device state at that moment) so we can fix bugs.
• Approximate location. Country/region-level location is derived from your IP address by the Google SDKs above for aggregate analytics and ad delivery. The app requests no device-location permission and does not access GPS or precise location.

Who it is shared with

Data is processed by the providers that power these features: Google (AdMob advertising and Firebase analytics) and Meta Platforms (Audience Network ad mediation). Each handles data under its own privacy policy. We do not sell your data for money, and we do not build advertising profiles ourselves. But the advertising SDKs (Google AdMob and Meta Audience Network) receive your device's advertising ID and device information to show and measure ads, which some US state laws treat as a "sale" or "sharing" of personal information. To opt out in the app, delete your advertising ID or limit ad personalisation (see Your choices & opting out below).

How long it is kept

Retention follows each provider's policy — for example Firebase analytics event data is retained for up to 14 months and crash reports for around 90 days. None of it is linked to your identity, since the app has no accounts.

Your choices & opting out

• Reset or delete your advertising ID:Android Settings → Privacy → Ads → "Delete advertising ID" (or "Reset advertising ID"). Deleting it stops apps receiving a personalised ID.
• Limit ad personalisation: in the same Android Ads settings, and via Google's Ads Settings.
• Uninstalling the app stops all collection by the app.

Children

GlobalScoreX is a general-audience sports information service and is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal data from children on either the website or the app.

Your rights (GDPR & KVKK)

If you are in the European Economic Area, the United Kingdom or Türkiye, you have rights over your personal data — which may include access, correction, deletion, restriction, objection and portability. Because we maintain no user accounts, most data we handle is anonymous or held by the third-party analytics, advertising and crash-reporting providers named above; you can exercise many choices directly through their settings, your browser, and your device's ad-ID controls. US residents: see US state privacy rights.

Changes & contact

We may update this policy from time to time; the "last updated" date above reflects the latest revision. For privacy questions, contact us at [email protected].