This policy explains what personal data SIA processes, why, and your rights under the GDPR.
The controller of your personal data is the Operator of SIA, whose registration details appear at the top of this page; contact: statnode.contact@gmail.com. We have not appointed a Data Protection Officer; data matters go to that address.
Account data: email address, chosen plan, monthly usage counter, and the acceptance record of the Terms and this Policy (date/version). Preferences stored in your browser: language, appearance theme, favorites, session. Technical data from requests: IP address, device/browser type, timestamps, error logs. Billing data for paid plans: held by our payment provider — we receive only a customer reference and payment status, never full card numbers. Communications you send us (e.g. support/complaints).
Providing the Service and your account — performance of a contract, Art. 6(1)(b) GDPR. Processing payments and meeting tax/accounting duties — legal obligation and contract, Art. 6(1)(b),(c). Handling complaints and defending claims — legitimate interest and legal obligation, Art. 6(1)(f),(c). Keeping the Service secure, preventing abuse and fraud, and improving it with aggregate analytics — legitimate interest, Art. 6(1)(f); the interest pursued is the security, integrity and development of the Service. Non-essential cookies/analytics — only with your consent, Art. 6(1)(a). You may withdraw consent at any time.
Browsing schedules and statistics requires no personal data. To create an account and use the AI Analyst, providing an email address is a contractual requirement — without it we cannot create the account. For a paid plan, providing billing data to the payment provider is required to process payment. Refusal simply means the relevant feature is unavailable.
We share data only with providers processing it on our behalf under data-processing agreements: hosting and delivery — Vercel; accounts and database — Supabase; payments and invoicing — our payment provider; sports data and media — api-sports.io and similar feeds; product analytics — a privacy-friendly provider (with consent). We do not sell personal data and do not share it for third-party marketing.
Some processors are located outside the European Economic Area (e.g. in the USA). Such transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision, ensuring a level of protection comparable to the EEA. You can request information about the safeguards used.
Account data is kept while your account exists and deleted or anonymized within 30 days of account deletion, except billing/accounting records that must be kept for the period required by tax law (in Poland typically 5 years). Complaint records are kept for the limitation period of related claims. Browser-stored preferences remain until you clear them.
You have the right to: access your data and obtain a copy; rectify inaccurate data; erase data ("right to be forgotten"); restrict processing; object to processing based on legitimate interest; data portability; and withdraw consent at any time (without affecting prior lawful processing). You may also lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO). To exercise any right, write to statnode.contact@gmail.com; we respond within one month.
The AI Analyst generates statistical reports and estimates by automated means. This processing operates on public sports data, not on profiling of you, and does NOT produce legal effects concerning you or similarly significantly affect you within the meaning of Art. 22 GDPR — it is an informational tool. We do not make automated decisions about you (e.g. about pricing or eligibility) based on profiling.
We use strictly necessary browser storage (session, language, theme, favorites) that does not require consent, and — only with consent — analytics; details and controls are in the Cookie Policy. We may update this Policy for legal or technical reasons; the current version and its date are always shown here.