MatchBerry logo
MatchBerry
Sign in

Privacy Policy

Last updated: May 6, 2026

This Privacy Policy explains how MatchBerry ("we", "us", "our"), operating the website matchberry.net (the "Service"), collects, uses, stores and protects your personal data. We are committed to safeguarding your privacy and complying with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Who we are (Data Controller)

MatchBerry is the data controller for personal data processed via matchberry.net. For any privacy-related questions you can reach us through the contact page.

2. Data we collect

  • Account data: email address, full name, hashed password (when you sign up).
  • Tournament content: tournament name, sport, location, country, dates, teams, players (name, jersey number, position, statistics) and match results that you create or upload.
  • Contact form data: name, email, optional sports club and phone, and the content of your message.
  • Technical data: IP address, browser type, device, basic usage logs (used only for security and reliability).
  • Authentication data: if you sign in with Google, we receive your name, email and profile identifier from Google.

3. How we use your data (Purposes & legal bases)

  • Providing the Service — creating accounts, hosting tournaments, displaying brackets and statistics. Legal basis: performance of contract.
  • Communication — replying to messages sent via the contact form. Legal basis: legitimate interest / your request.
  • Security & abuse prevention — detecting fraud, abuse and securing accounts. Legal basis: legitimate interest.
  • Legal compliance — complying with applicable laws. Legal basis: legal obligation.

4. Public content

Tournament pages, teams, players, scores and statistics are public by design and accessible via a shareable URL. Do not include sensitive personal data in tournament content.

5. Sharing your data

We do not sell your personal data. We share data only with:

  • Infrastructure providers hosting the website, database and authentication (acting as our data processors).
  • Authorities when required by law.

6. International transfers

Our processors may store data within the EU/EEA or in countries that provide an adequate level of protection or under appropriate safeguards (e.g. Standard Contractual Clauses).

7. Retention

  • Account and tournament data: kept while your account exists. Tournaments older than one year may be automatically deleted.
  • Contact form messages: kept up to 24 months for support purposes.
  • Technical logs: typically up to 90 days.

8. Your rights (GDPR)

You have the right to:

  • Access the personal data we hold about you;
  • Request correction of inaccurate data;
  • Request deletion ("right to be forgotten");
  • Restrict or object to processing;
  • Receive your data in a portable format;
  • Withdraw consent at any time;
  • Lodge a complaint with your local data protection authority.

To exercise these rights, contact us via the contact page.

9. Cookies

We use only essential cookies and local storage strictly necessary to keep you signed in and to remember your preferences. We do not use advertising or third-party tracking cookies.

10. Security

We apply technical and organisational measures to protect your data, including encryption in transit (HTTPS), hashed passwords and row-level access controls in the database.

11. Children

The Service is not directed to children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the latest changes.

13. Contact

For privacy questions or to exercise your rights, please use our contact form.