Privacy policy

Your data at a glance

Matchday XI processes the data needed for your account and shared gameplay. Usage statistics and delivery of crash reports are optional and initially disabled. You decide separately whether to enable each in the app.

Analytics and crash reports · Delete your account · Your rights

1. Controller and contact

The controller is Can Ata, Hans-Böckler-Str. 176A, 46242 Bottrop, Germany. For questions about your data, email support@canata.app. Further provider details are in the imprint.

2. Your account and shared gameplay

We use Firebase Authentication for sign-in. Even without personal registration, the app creates a technical guest account with an account ID when it starts with an internet connection. “Guest” describes this sign-in method; it does not mean that no data is sent to Firebase. Registering may add your email address, display name and information about your Apple, Google or email sign-in.

Firestore stores leagues, memberships, roles, invitations and join requests, as well as squads, lineups, bids, offers, virtual transactions and matchday results. Other league members can see the information intended for shared gameplay, such as your display name, squad, standings and visible league activity. This does not make your credentials or private account settings public.

If you contact us, we process your message, email address and the information you send to help resolve your request. Please do not send passwords, sign-in codes or complete access tokens.

3. Purposes and legal bases

• Account and gameplay: Sign-in, storage, synchronization, league management and settlement provide the services you use (Art. 6(1)(b) GDPR).
• Secure operation: Technical request data and operational logs help diagnose faults, secure access and prevent abuse. This is based on our legitimate interest in a secure and reliable service (Art. 6(1)(f) GDPR).
• Optional diagnostics and analytics: Firebase Analytics and delivery of Crashlytics reports rely on your separate consent for each service (Art. 6(1)(a) GDPR). Gameplay remains available without these permissions.
• Support: We handle messages about your use of the app to perform our user agreement or respond to your request; other enquiries are handled on the basis of our legitimate interest in communication.

Required account data is needed for the relevant online features. We do not sell personal data or use optional analytics for personalized advertising.

4. Data on your device

The app stores items such as session information, preferences, favorites, previously loaded content and your Squad Builder lineups locally. This makes parts of the app usable offline. Sign-in, bids, league changes and current sports data require an internet connection.

Your two privacy choices are also stored locally. Crashlytics may initially buffer crash reports on your device even though automatic delivery is disabled. The section about your choices explains how the app handles those reports.

5. Notifications

We use Apple Push Notification Service (APNs) and Firebase Cloud Messaging for push notifications. This involves processing push tokens and technical installation identifiers. Associated tokens are stored under your user profile so that updates reach the right device.

You choose which notifications to receive in Matchday XI and in iOS Settings. Account deletion removes the push tokens stored under your user profile. The two optional analytics and crash-report switches do not disable all necessary sign-in, synchronization and notification services.

6. Your choice: analytics and crash reports

Under Profile → Privacy, you have two separate switches. Both are initially disabled:

• Share usage statistics: Firebase Analytics helps us understand which features are used, for example through app launches and usage events.
• Share crash reports: Firebase Crashlytics helps us investigate technical faults using crash data and information about the app, device and operating-system version.

The current app version does not attach your account ID, name or email address to these services. Technical SDK and installation identifiers may still be included. This processing is therefore not fully anonymous.

Automatic Crashlytics delivery stays disabled. Without permission, the app does not release buffered reports for delivery and requests their deletion. A new grant discards older pending reports; subsequently consented reports may be sent on the next app launch.

You can withdraw either choice here at any time. Signing out or switching to a different account resets both permissions. Withdrawal stops further consented deliveries and discards unsent crash reports. Transfers already started may still finish. Withdrawal or account deletion does not automatically erase data already transmitted to these services, including older reports.

7. Recipients and services

• Google Firebase / Google: We use Authentication for sign-in, Cloud Firestore for the database, Cloud Functions for server processing and Cloud Messaging for notifications. Analytics and Crashlytics are used only within the optional scope described above. Depending on the service, Google's data-processing or separate service terms apply. See privacy at Firebase.
• Apple and Google as sign-in providers: They are involved when you choose the corresponding sign-in method. Apple also participates in push-notification delivery.
• BSD Sports API, Bzzoiro LLC: The app and our backend obtain football information and images from BSD. The app may also fetch data and images directly. The provider then receives information such as your IP address and technical request data, including the requested player or club ID. We do not send your Matchday sign-in credentials with these requests. See the BSD privacy notice.
• Other image addresses: A fallback from football-data.org or its image host may be used for individual club badges. When an image is fetched directly, that host also receives your IP address and technical request data. This is separate from optional app analytics.
• Website hosting: The Matchday pages on fitdata.app are served through GitHub Pages; see section 10.

8. Processing locations

Our Firestore database is configured in the EU. The current Cloud Functions run in the US region us-central1. This does not mean that all participating services process data exclusively in the EU. Depending on the service, Google, Apple, GitHub and Bzzoiro in particular may also process data outside the European Economic Area.

International transfers are subject to the safeguards of the relevant service, such as an applicable adequacy decision or EU Standard Contractual Clauses. Google describes its participation in the EU-US Data Privacy Framework and the relevant terms in its Firebase privacy information. Using an EU database alone does not rule out processing in other countries.

9. Retention and account deletion

We generally keep account data for the lifetime of your account. Gameplay data is needed for as long as it supports the shared league and traceable settlement. Technical logs support operation and the investigation of security incidents or faults; participating services also have their own retention and backup processes.

Start deletion under Profile → Account → Delete account. Depending on your sign-in method, you may need to confirm your credentials again. Successful deletion removes your Auth account, profile and the push tokens stored there. Leagues you own are deleted. Other leagues remain for their members and you leave them. The app also removes the associated local account data and saved Squad Builder teams.

Attributed contributions and personal display names are selectively removed. Historical transactions, matchday settlement, results and necessary technical references may remain in surviving leagues so that league history and subsequent corrections stay traceable. Technical identifiers are not automatically anonymous. Older data without clear attribution may also remain.

There is currently no automatic removal of all personal references at a fixed season-end date. For a review or further deletion, contact us through our privacy contact. We assess whether the specific personal reference is still necessary or can be removed, taking justified retention grounds and other league members' rights into account.

Account deletion does not separately erase Analytics data or crash reports already transmitted. Analytics is subject to the retention and deletion settings configured in that service. According to Google, Crashlytics retains reports and associated identifiers for 90 days before starting removal from live and backup systems. The provider information also explains the separate backup and deletion processes for other Firebase services.

10. This website

The Matchday section loads no website-analytics script and sets no analytics cookies. Fonts and the app screenshots embedded here are served directly by the website. GitHub Pages processes technical connection data to serve the site; GitHub in particular logs IP addresses for security. Serving and securing this website is based on our legitimate interest in a secure website (Art. 6(1)(f) GDPR). See the GitHub privacy statement.

If you switch to FitData, the FitData privacy information applies there. Its optional website analytics is a separate choice and does not enable analytics in the Matchday app.

11. Your rights and minors

You can request access, rectification, erasure, restriction of processing and data portability (Art. 15–20 GDPR). You may object to processing based on legitimate interests under Art. 21 GDPR. You may withdraw consent for the future at any time; this does not affect processing that was lawful before withdrawal.

To exercise these rights, email support@canata.app. You may also complain to a data protection supervisory authority, such as the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Germany.

Matchday XI is not specifically directed at children. For minors, any consent legally required from a parent or guardian must be obtained. If you believe a child has sent us data without a required consent, please contact us.

12. Updates

We update this information when the app or its data processing changes. The version date appears at the top. New purposes requiring consent need the corresponding permission; changing this page does not replace it.