Privacy Policy
Last updated: 12 March 2026
1. Data Controller
The data controller for personal data processed through FootyPulse.org is:
Given the nature and scale of our data processing, we are not required to appoint a Data Protection Officer (DPO) under GDPR Article 37. For any privacy inquiries, please contact us at the email above.
2. What Data We Collect
We collect the following categories of personal data:
2.1 Account Registration
When you create a FootyPulse account, we collect your full name and email address. You may optionally add a username, avatar, and country.
2.2 Premium Subscriptions
If you subscribe to FootyPulse Premium, payment is processed by Stripe, Inc. We do not store your credit card number or bank details. We receive and store your Stripe customer ID, subscription status, and billing period dates.
2.3 Affiliate Click Tracking
When you click an affiliate link (e.g., a link to a betting site), we store a hashed version of your IP address, your user agent, referrer URL, country, and device type. We do not store your raw IP address.
2.4 Telegram Integration
If you link your Telegram account, we store your Telegram chat ID and username to deliver messages and feed subscriptions you have opted into.
2.5 Region Detection
We detect your approximate country using the x-vercel-ip-country header provided by our hosting provider (Vercel). This is used only to display region-appropriate content. The result is stored in a cookie on your device; your IP address is not logged by us for this purpose.
2.6 Server Logs
Our hosting provider (Vercel) automatically collects standard server logs including IP address, browser type, pages visited, and timestamps. These logs are retained by Vercel per their own data retention policy.
3. Legal Basis for Processing
We process your personal data on the following legal bases under GDPR Article 6(1):
| Purpose | Legal Basis |
|---|---|
| Account registration & management | Contract performance (Art. 6(1)(b)) |
| Premium subscription & payment | Contract performance (Art. 6(1)(b)) |
| Affiliate click tracking cookies | Consent (Art. 6(1)(a)) |
| Region detection & preference | Legitimate interest (Art. 6(1)(f)) |
| Authentication cookies | Contract performance (Art. 6(1)(b)) |
| Telegram integration | Consent (Art. 6(1)(a)) |
| Server logs & security | Legitimate interest (Art. 6(1)(f)) |
Where we rely on legitimate interest, our interest is providing a functional, secure, and region-appropriate service. We have assessed that this does not override your fundamental rights or freedoms.
4. Data Processors & Third Parties
We share personal data with the following third-party processors:
| Processor | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Database & authentication | USA (EU region available) |
| Vercel, Inc. | Hosting & CDN | USA / Global edge |
| Stripe, Inc. | Payment processing | USA / Ireland |
| Telegram FZ-LLC | Messaging (opt-in) | Dubai, UAE |
We do not sell your personal data. We do not use advertising networks, analytics tracking pixels, or third-party marketing tools.
5. International Transfers
Some of our processors are located outside the EU/EEA (primarily in the USA). These transfers are safeguarded by:
- The EU-U.S. Data Privacy Framework (where the processor is certified)
- Standard Contractual Clauses (SCCs) approved by the European Commission
You may request a copy of these safeguards by contacting us.
6. Data Retention
| Data Category | Retention Period |
|---|---|
| Account data | Until you delete your account |
| Subscription & payment records | 5 years (Danish bookkeeping law / Bogforingsloven) |
| Affiliate click data | 12 months |
| Telegram data | Until you unlink your account |
| Region preference cookie | 1 year (on your device) |
7. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Access — Request a copy of the personal data we hold about you.
- Rectification — Request correction of inaccurate data.
- Erasure — Request deletion of your data ("right to be forgotten").
- Restriction — Request that we limit how we process your data.
- Portability — Receive your data in a structured, machine-readable format.
- Objection — Object to processing based on legitimate interest.
- Withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, email privacy@nordenmediagroup.com. We will respond within 30 days.
8. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you. Our football predictions are generated from statistical models applied to match data, not personal data.
9. Cookies
We use a limited number of cookies. For full details, see our Cookie Policy.
10. Children
FootyPulse is not intended for persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
11. Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Danish Data Protection Agency:
Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby, Denmark
Email: dt@datatilsynet.dk
Phone: +45 33 19 32 00
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be announced on the site. Continued use of FootyPulse after changes constitutes acceptance.