GDPR Notice

1. Controller

Your personal data is processed by taraftarsin.com ("we", the controller).

You can reach us about data protection at privacy@taraftarsin.com.

2. Personal data we process

• Identity and contact: the email address you sign up with.
• Account data: your chosen display name, optional profile photo, and your account identifier.
• Preference data: your primary club and followed clubs in each league, plus your preferred language and time zone.
• Activity data: the stances you take, the reasons you write or adopt, and content you flag.
• Technical data: session, language, and time zone cookies, and request logs (IP address, timestamp) kept for security.

3. Purposes of processing

• To create and operate your account and authenticate you.
• To compute your relation (club fan, rival, or neutral) to a proposal and show honest aggregate results.
• To keep the platform safe: rate limits, abuse flags, and moderation.
• To meet our legal obligations and resolve disputes.

4. Legal bases (GDPR Art. 6)

• Contract (Art. 6(1)(b)): processing needed to create and run the account and service you asked for.
• Legitimate interests (Art. 6(1)(f)): keeping the service secure and preventing abuse.
• Consent (Art. 6(1)(a)): optional cookies you opt into from the cookie banner.
• Legal obligation (Art. 6(1)(c)): where the law requires us to retain or disclose data.

5. Transfers

We use cloud infrastructure (Amazon Web Services) to host the service, which may process data in data centres inside or outside the EEA and the UK. Transfers outside those regions use the applicable safeguards or another lawful mechanism.

We do not sell your personal data.

6. Retention

We keep account data while your account exists. When you delete your account, identifying data is erased. Anonymous, aggregated statistics that cannot identify you may be retained. Security logs are kept for a limited period as required for safety and legal purposes.

7. Your rights (GDPR Arts. 15-22)

You have the right to access, rectify, erase, restrict, and port your data, and to object to processing based on legitimate interests.

You can access and download your data, and delete your account, from Settings. We do not take solely automated decisions that produce legal effects about you. Club, rival, and neutral splits are aggregate counts of stances. For any other request, contact us at privacy@taraftarsin.com.

8. Complaints

You can lodge a complaint with a supervisory authority in the EEA. If you are in the UK, you can contact the Information Commissioner's Office (ICO).