Last updated: 17 August 2026 Effective: on first publication at https://ventajafc.com/privacy
Not legal advice. This was written to match what the code actually does, so it is accurate rather than boilerplate. Have a lawyer review it before you publish, especially the EU/UK sections and the governing-law clause. Every factual claim below must stay true as the app changes — a privacy policy that describes something you no longer do is worse than none.
Ventaja FC ("the app") is operated by Alejandro Gonzalez ("we", "us"), [ADDRESS], United States. Contact: [email protected].
Ventaja FC does not ask you to register, and everything it remembers about you lives in local storage on the device. The exact set is:
| Key | What it holds |
|---|---|
sports-terminal:favorites | Your starred teams — id, name, crest URL |
sports-terminal:theme | Light or dark |
sports-terminal-lang | Language preference |
sports-terminal:legal-ack | That you confirmed you are 18 or older |
sports-terminal:notify | Which alert types you switched on |
sports-terminal:push-enabled | Whether alerts are on |
sports-terminal:fav-prompt-dismissed | That you dismissed the "add a team" prompt |
We never receive any of it. Deleting the app — or clearing site data on the website — deletes all of it.
The backup code in My Teams is your own team list encoded as text. It is generated on your device and never sent to us.
If you turn on match alerts we store one record for your device, and what that record contains depends on where you are using Ventaja FC:
p256dh and auth).Either way we store it together with the team IDs you have starred and which alerts you asked for (kickoff, goal, full time), because that is what the server matches on when a match starts or a goal goes in. Nothing else about you is attached to that record — no name, no email, no identifier you gave us.
Deleting it. On the website, turning alerts off deletes the record immediately, and it is also removed automatically if your browser's push service tells us the address is dead.
On iPhone, a defect in this version means the record is not always removed when you switch alerts off. Email us at [email protected] and we will delete it. A fix is going out in the next release. We would rather write this down than claim a deletion that does not happen.
A match alert names the two clubs and can contain the score. On the website the message is encrypted to your browser's own keys, so the push service carrying it cannot read it. On iPhone it is not end-to-end encrypted — Apple's push service can see the alert text and the match id as it delivers the message. We do not keep a copy of any alert we send; undelivered ones are dropped after 15 minutes.
Our host keeps ordinary web server logs. A log line records your IP address, the time, and the path requested — which includes which team or match page you opened. The backend also keeps an in-memory count of open live connections per IP address, purely to cap abuse; it is discarded when you disconnect or the server restarts.
Nothing in the logs is aggregated into a profile, linked to anything else, or shared. There is no user-facing deletion path for a log line — we cannot tell which IP is yours — and they age out under our host's log retention.
If you tap Subscribe to fixtures, the app builds a calendar link that contains the ID numbers of your starred teams in the URL. Three things are worth knowing:
Remove it by deleting the calendar subscription in your calendar app.
Crests and player photos are loaded by your device directly from our data provider's image servers. Those servers see your IP address and your browser/device user agent, the same way any image on any web page does.
Only the providers that make the service work, never for their own marketing:
We disclose data otherwise only when legally compelled, and will tell you unless prohibited.
Alert registrations are kept until they are deleted. Nothing about them expires on a timer. They are removed when you turn alerts off (see the iPhone caveat above), or when Apple or your browser's push service tells us on a later send that the address is dead.
Server log lines live as long as our host retains them.
Prediction records and match data contain nothing about you and are kept indefinitely.
Because there is no account, there is almost nothing to delete.
Deleting the app — or clearing site data on the website — removes every preference listed above: favourites, language, theme, your 18+ acknowledgement, your alert toggles.
The one thing held on our server is your alert registration. Turn alerts off, or email [email protected], and we remove it.
Anyone may ask us for a copy of their data, a correction, or deletion at [email protected]. We answer within 30 days. In practice the only record we can look up is an alert registration, and only if you can tell us enough to identify it.
EEA/UK (GDPR): you also have the rights to restrict or object to processing and to portability, and you may complain to your national supervisory authority. Our lawful bases are consent for match alerts, which you may withdraw at any time by turning them off, and legitimate interests for the server logs needed to run and secure the service.
California (CCPA/CPRA): we do not sell or share personal information as those terms are defined, and we do not use it for cross-context behavioural advertising. You have the rights to know, delete, correct, and not be discriminated against for exercising them.
The app is not directed to children. Before you can open Predictions or Research you confirm you are 18 or older (21+ where state law sets that bar). We record that confirmation on your device only — we do not verify your age and we collect no date of birth. Live scores, results, standings, teams and stats are not behind that confirmation.
We do not knowingly collect data from anyone under 13; if you believe we have, contact us and we will delete it.
Our server is in the United States. If you are in the EEA or UK, your data is transferred to the United States under the applicable Standard Contractual Clauses with our processors.
Traffic is encrypted with TLS. Access to production data is limited to the operator. No system is perfectly secure, and we will notify affected users and regulators of a breach as required by law.
We will post a new "last updated" date here and, for material changes, ask you to acknowledge them in the app before you continue using the Predictions tab.
This policy describes version 1.0. If we add accounts or a paid tier, we will publish an updated policy at this same URL and ask you to acknowledge it in the app before the new features are used.