Privacy Policy

The short version

• There are no accounts and no sign-up, so we hold no profile of you.
• We set no cookies.
• There is no analytics, no advertising and no tracking of any kind.
• Your IP address is used for one thing only: rate limiting, to stop the site being hammered. It is held briefly and then expires.
• Your starred teams and your light/dark choice are stored in your own browser and never sent to us.

Who is responsible

The data controller for this site is [FILL IN: legal name of the person or company running KooraKick], contactable at support@koorakick.com. [FILL IN: postal address, if you are required to publish one in your jurisdiction]

What we collect

Your IP address, for rate limiting

Every request to this site passes through a rate limiter before it is answered. The limiter reads your IP address — from the x-forwarded-for or x-real-ip header your request arrives with — and uses it as a counter key: no more than 300 requests per minute from one address.

That counter is held by Upstash, a hosted Redis service, on our behalf. The window is a rolling 60 seconds, so an entry stops mattering almost immediately and expires shortly after. The limiter is configured to fail open: if it is unreachable, your request is served rather than blocked.

We do not log IP addresses anywhere of our own, do not link them to anything else, and cannot look up “who visited” from them. The purpose is purely protective.

Your host will also see your IP

This site runs on [FILL IN: hosting provider], and like every web host it will record the addresses that reach it, for its own operational and security purposes and for its own retention period. [FILL IN: link to your host’s privacy policy and data-processing terms, and confirm whether you have a data-processing agreement with them]

If you use the contact form

The contact form asks for your name, your email address and your message, and sends them so we can reply. [FILL IN: once the form is connected — say which service delivers the mail, and how long the message is kept. Today it is not wired up to anything and nothing is sent.]

What we do not collect

None of the following exist on this site, and if any of them appear later this page has to be rewritten before they go live:

• No accounts, logins or passwords.
• No analytics or visitor statistics, self-hosted or otherwise.
• No advertising, ad networks or affiliate tracking pixels.
• No social media plugins or embedded players.
• No profiling, no automated decisions, and nothing sold or shared for marketing.

What your browser stores

Two things are saved in your browser’s local storage. They stay on your device, are readable only by this site, and are never transmitted to us:

• Your theme choice (light or dark), under the key matchday-theme. It exists so the page does not flash the wrong colours while loading.
• Your starred teams, under the key matchday:favorites. It is how the favourites feature remembers what you picked.

Clearing your browser’s site data removes both, and neither is backed up anywhere. See the cookie policy for how to do that.

Cookies

This site sets no cookies of its own — not for sessions, not for preferences, not for anything. That is why you have never seen a cookie banner here. It also means there is nothing here to consent to, which is why we do not ask.

Separately, some images — team crests and competition badges — are loaded straight from API-Sports’ image servers. That is a request from your browser to their servers, and it carries your IP address, your browser’s user-agent string and the page you came from. What they do with that is governed by their policy, not ours. See the cookie policy for the detail.

Third parties

• API-Sports — supplies all scores, fixtures, tables and player statistics, and serves the crest images your browser loads directly. See their privacy policy.
• Upstash — holds the rate-limit counters described above, keyed by IP address for a rolling 60-second window.
• [FILL IN: hosting provider] — runs the servers and sees the traffic that reaches them.

We do not sell personal information, and we do not share it with anyone beyond the processors listed here.

Your rights

Depending on where you live, you may have the right to ask for a copy of the personal data held about you, to have it corrected or erased, to object to or restrict its processing, to receive it in a portable format, or to withdraw consent you previously gave.

Being straight about the practical position: this site holds no profile of you, and the only thing it can be holding is a rate-limit counter keyed by an IP address, which expires within a minute. There is usually nothing to hand over. If you want to make a request anyway, write to support@koorakick.com and we will answer it.

[FILL IN: name the supervisory authority your users can complain to — the ICO in the UK, your national DPA in the EU, and so on — and confirm whether you are subject to the GDPR, the UK GDPR, CCPA/CPRA, or none of them. This section is written neutrally because the answer changes it a lot.]

Children

This site is not aimed at children and we do not knowingly collect information from them. [FILL IN: the age below which you consider a user a child in your jurisdiction — 13 under COPPA, 16 under much of the GDPR] If you believe a child has sent us something through the contact form, write to us and we will delete it.

Keeping it current

If what the site does changes, this page changes with it and the date at the top moves. Anything that would meaningfully affect you will be noted on the site itself rather than only here.

Contact

Questions about any of the above, or a request under the section on your rights: support@koorakick.com, or the contact form.