Privacy policy

Version 2026-10.

1. Who is responsible for your data

StatGol is operated by Flavio Carneiro Barros, CPF 024.456.097-80. Contact: [email protected].

That operator is who you contact to exercise any of the rights described in this policy.

2. The principle we follow

We collect the minimum the service needs in order to work and to charge. We do not sell, rent or trade your data with anyone. There are no advertising trackers, social network pixels or third-party analytics tools on the site.

3. What we collect

For the account to exist: your email and your password. The password is stored only as a cryptographic hash; not even we can read it.

To record your acceptance: the date you signed up, which version of these documents you accepted, and your declaration that you are 18 or older.

For the device limit to work: the browser and operating system of each connected session (for example, “Chrome on Windows”) and when it started. We do not store the IP address alongside this.

For the scanner to open your way: your preferences — visible columns, filters, theme, language, currency, time zone, sound, preferred leagues, hidden matches, pinned matches, your notes about matches and the rules you created.

For the subscription: which plan, which period, which price and which status. Where payment goes through a processor, we store the processor's transaction identifier — never your card number, which never passes through us.

Technical logs: the server logs requests, including IP address, for security and troubleshooting. These logs rotate on their own and are not cross-referenced with your account for commercial purposes.

4. Why we may process this data

• Email, password, subscription and preferences: performance of the contract you enter into when you create the account and subscribe.
• The record of acceptance and of age: compliance with a legal obligation and the exercise of our rights.
• Technical logs and the device limit: legitimate interest in keeping the service secure and available.
• Emails about the end of the trial and the expiry of the subscription: performance of the contract. We do not send marketing.

5. Who we share with

Only with those the service needs in order to exist, and only what is strictly necessary:

• the provider of the server the site runs on, with its data centre in Brazil;
• Cloudflare, which sits in front of the site for security and performance and therefore processes IP addresses;
• the email delivery provider, which receives your address in order to deliver the service's messages;
• the payment processor, where there is a charge, which handles payment data directly;
• the authorities, where the law requires it.

The match data provider receives nothing about you: the request goes out from our server, not from your browser.

6. Cookies

We use only what is indispensable, and none of it serves advertising or follows you across other sites:

• session, to keep you signed in;
• form security, to prevent forged requests;
• language and currency, so the site opens the way you chose.

Your scanner preferences are also kept in the browser's own storage, so the scanner opens quickly even without an account.

7. How long we keep it

Account data, for as long as the account exists. When you delete the account, your personal data is erased, except what the law requires us to keep — tax and acceptance records, for their legal periods.

Database backups are encrypted and kept for a limited time; a deletion may take up to that period to disappear from them as well.

8. Your rights

You may ask, at any time, for: confirmation that we process your data, access to it, correction of anything wrong, portability, information about who we share it with, and deletion.

Much of this you can do yourself, without asking: the My account page shows your sessions and lets you delete the account; the preferences page shows everything we keep about how you use the scanner.

For anything not on screen, write to [email protected]. We answer within 15 days.

If you are in the European Union or the United Kingdom, the same rights apply under the regulation there, including the right to object to a processing activity and the right to complain to your country's authority.

9. International transfers

The server is in Brazil. Some providers — the security network in front of the site, email delivery, the backup store and the payment processor — operate in other countries, which means data is transferred internationally, with the safeguards the law requires.

10. Security

The site answers only over an encrypted connection. Passwords are stored as cryptographic hashes. Backups are encrypted before they leave the server. Administrative access requires a second factor.

No system is impregnable. If there is an incident that could pose a meaningful risk to you, we will notify you and the competent authority within the time the law allows.

11. Children and young people

The service is not meant for anyone under 18 and we do not knowingly collect their data. If we find an account belonging to a minor, it is closed and the data erased.

12. Changes to this policy

Each version has a number, shown at the top of this page. Significant changes are notified by email to account holders.

13. Contact

For anything to do with personal data, write to [email protected].