Privacy Policy

This Privacy Policy explains, when you use the Soccer Match mobile app and website, what information is collected, the purposes for which it is used, with whom it may be shared, how it is stored, and your account/data deletion rights.

Soccer Match values its users' privacy and processes your personal data only to operate the app, manage your account, deliver the game experience, ensure security, and fulfil legal obligations.

1. Data Controller and Contact

For Soccer Match services, the data controller is:

In this text, "Soccer Match", "the app", "we" or "us" refer to Soccer Match services; "user", "you" or "account holder" refer to people who use the app.

2. Information We Collect

Soccer Match may process the following categories of information to operate the app's features.

2.1. Account Information

• Username
• Email address
• Secure authentication data relating to your password
• Account creation date
• Account status
• Profile image or avatar
• Language preference
• Account settings

Passwords are never displayed in clear text; appropriate technical methods are used for password verification and session security. When you sign in with Apple or Google, your Apple or Google password is not transferred to Soccer Match; only the limited authentication data needed to securely log you in is processed.

2.2. In-Game Information

• Level, XP, tier and progression data
• GM, Coin and in-game virtual values
• Cards, players, squads and substitutes
• Fantasy squad preferences
• Missions, badges, rewards and spin-wheel results
• Game results, points, rankings and leaderboard data
• Results from single-player and multiplayer game modes
• Market and in-game virtual transaction records
• In-game preferences linked to fixture, match, team and player data

This data is used only to deliver the game experience, record user progress, preserve game balance and prevent abuse.

2.3. League, Friendship and Social Feature Information

• Friend list
• Blocked users
• League memberships
• Leagues you create
• Participation in public leagues
• Invite codes
• Multiplayer match-ups
• Username and league name
• Profile visibility
• Report, complaint and feedback records

This data is processed to operate friendship features, manage leagues, deliver the multiplayer experience, allow users to block one another, review reports and complaints, and maintain a safe and fair game environment.

2.4. Technical, Device and Security Information

• IP address
• Device model
• Operating system
• App version
• Browser and device information
• Session records and active device information
• Login and logout records
• Error and crash logs
• Security logs
• Records of cheating, bots, multiple accounts, unauthorized access and abuse

This information is processed to protect your account, operate the app securely, resolve technical issues, prevent unauthorized access and detect cheating, bots, multiple accounts or abuse.

2.5. Notification Information

If you use notifications, your push notification token, notification preferences, sent notification data and notification interactions may be processed. You can change your notification preferences from your device settings or from the in-app settings.

2.6. Support and Contact Information

When you contact us, your email address, support request, feedback, complaint or report descriptions, account/data deletion requests and contact records may be processed. This information is processed to respond to your requests, resolve issues, ensure user security and, where necessary, protect rights.

2.7. Third-Party Sports Data

Fixture, match result, team, player and statistics information in the app may be sourced from API-Football / API-Sports or other third-party sports data providers. No user email, password, username, friend list, virtual balance, personal profile data or account information is transferred to these providers; only football data is obtained.

3. How Do We Collect Information?

• Information you provide directly when creating an account or signing in
• Limited information obtained from the relevant authentication provider during Sign in with Apple or Google
• Records generated while using in-app game, league, friendship, market, mission, wheel and social features
• Technical records generated automatically through your device, internet connection and app usage
• Your support, feedback, complaint, report or account-deletion requests
• Notification preferences and device notification infrastructure
• Mandatory cookies and technical records used during website visits

4. For What Purposes Do We Use Information?

• To create your account and let you sign in securely
• To create and manage your user profile
• To run the game modes
• To provide fantasy squad, league, friendship and multiplayer features
• To keep records of GM, Coin, XP, cards, rewards and in-game progress
• To produce leaderboards, rankings and game results
• To send notifications
• To respond to support, feedback, complaint and report requests
• To ensure app security and prevent cheating, bots, multiple accounts, unauthorized access and abuse
• To resolve technical errors
• To preserve game balance and fair competition
• To fulfil your account/data deletion requests
• To meet legal obligations and protect our rights and the rights of users

5. Virtual Currency and In-Game Values

6. Advertising and In-App Purchases

Soccer Match includes advertising, rewarded ads and real-money in-app purchases. The current version has no system for real-money top-ups, cash withdrawals, real-money prizes or out-of-app economic value.

For advertising and in-app purchase features, a user preference or explicit consent mechanism is provided where necessary. In-app purchase payments are processed by the Apple App Store or Google Play; Soccer Match does not collect or store full credit card information. For purchases, limited transaction records — product information, transaction ID, purchase time and payment status — may be processed.

To measure the effectiveness of advertising campaigns, the Meta Platforms (Facebook) software development kit is used. App events such as app launches, installs and in-app purchases, together with device and app information, are sent to Meta. On iOS, your advertising identifier (IDFA) is shared only if you allow it in the App Tracking Transparency (ATT) prompt; you can withdraw this permission at any time under Settings → Privacy & Security → Tracking.

7. User Content and Moderation

In Soccer Match, usernames, league names, profile information, friendship interactions, multiplayer interactions, report descriptions and feedback may be content that is created by users or becomes visible to other users. To maintain a safe and respectful environment:

• Inappropriate usernames, league names and visible content may be reviewed.
• Profanity, insults, threats, harassment, discrimination, spam, fraud or harmful content may be removed.
• Users may report or block other users.
• Reports are reviewed within a reasonable time.
• For repeated or severe violations, accounts may be temporarily or permanently restricted.

In these processes, usernames, league names, report descriptions, transaction records, in-game behaviour and security logs may be processed.

8. Parties With Whom Your Information Is Shared

Your personal data may be shared only with the following parties, limited to the purposes stated in this Privacy Policy:

• Apple and Google (including Sign in with Apple / Google)
• Apple Push Notification Service and Google/Firebase Cloud Messaging
• Firebase, where used
• Server, database, cloud and hosting service providers
• Email, support and communication service providers
• API-Football / API-Sports
• Apple App Store and Google Play payment infrastructure
• Meta Platforms (Facebook Login and advertising measurement)
• Legal advisers
• Authorized public institutions and authorized persons/authorities within the scope of legal obligations or dispute resolution

Only football data is obtained via API-Football / API-Sports; no user account, email, password, friend list, virtual balance or profile information is transferred to these providers. Your personal data is not shared with third parties except for the purposes stated here, legal obligations, and the technical processes required to operate the service.

9. International Data Transfers

Your core service data are processed on servers hosted by Hetzner Online GmbH in Nuremberg, Germany. This processing is ongoing. Data may be processed outside Türkiye through infrastructure used by Apple, Google/Firebase/AdMob, Meta, RevenueCat, AppsFlyer and other identity providers you choose. International transfers are subject to the applicable conditions under Article 9 of the KVKK: an applicable adequacy decision, appropriate safeguards or occasional-transfer exceptions only where their statutory conditions are met. Reading this notice or accepting the terms of use does not by itself constitute explicit consent to an international transfer.

10. How Long Is Your Information Kept?

Retention periods by category: analytics events 180 days; raw purchase data 12 months; error and crash logs 90 days; the account record until the account is closed. Account closure does not itself initiate a store refund.

11. Account Deletion and Data Deletion

You can close your account from within the app via Profile → Delete My Account. If you cannot access the app, you can submit your account/data deletion requests via the link below or by email:

Account closure disables sign-in and removes or replaces the email address, username and linked social account identifiers with pseudonymous values. This does not permanently delete or anonymize all records. The user identifier (UUID), transaction and Coin history and some related records remain in the system; your sign-in credentials (including the password hash) are deleted. Refresh sessions are revoked; their records are not immediately erased. Squad and league memberships are cleaned up after the relevant league ends. Retention periods by category: analytics events 180 days; raw purchase data 12 months; error and crash logs 90 days; the account record until the account is closed. Account closure does not itself initiate a store refund.

Core service data are continuously processed on Hetzner Online GmbH servers in Nuremberg, Germany. Firebase Analytics is not used; Firebase Crashlytics provides crash diagnostics and Cloud Messaging delivers notifications. Server diagnostics use Sentry in the EU region, with personal-data sending disabled and filtering applied. AppsFlyer is enabled in the production release. User-linked Gol Yolu anomaly records support security review without automatic sanctions.

12. Children's Privacy

Soccer Match is not a service specifically targeted at children. To use Soccer Match you must be at least 13 years old; if a higher age limit applies in your country, that limit is valid. If it is determined that a user under 13 has created an account or had personal data processed, the account may be closed and the personal data deleted or anonymized in accordance with legislation. Minors must use the app with the knowledge and permission of a parent or legal representative.

If, as a parent or legal representative, you believe your child's personal data is being processed, you can contact us at [email protected].

13. Cookies and Mobile Technologies

On the Soccer Match website, mandatory cookies or technical records may be used so that the site works, is secure, and the account/data deletion page can be used. If non-mandatory cookies are used for analytics, advertising or marketing, the necessary information is provided and, where required, a user preference or explicit consent mechanism is offered. In the mobile app, instead of cookies, device information, in-app technical records, notification tokens and mobile app technologies may be used.

14. Third-Party Links and Services

Soccer Match may contain links to third-party websites, app stores, sign-in providers, support channels or services. These third-party services have their own privacy policies and terms of use; Soccer Match is not responsible for the privacy practices, content or data processing activities of third parties. You are advised to review the privacy policies of Apple, Google and other third-party service providers separately.

15. Automated Decision-Making

Soccer Match may analyze usage data for app security, cheating prevention, improving the game experience, performance measurement and understanding user preferences. Soccer Match does not make solely automated decisions that produce legal or similarly significant effects about users. Where cheating, abuse or a security risk is detected, a review of the account, score, virtual balance or in-game progress may be carried out; user objections are evaluated through the support channels.

16. Changes to the Policy

This Privacy Policy may be updated from time to time. For material changes, users may be informed via in-app notification, email, a website announcement or publication of the updated text. The current Privacy Policy is published in the app or at https://soccermatch.supalab.org.

17. Contact

You can contact us regarding the Privacy Policy, your personal data, your account-deletion requests or your privacy rights: