Privacy Policy

Last updated: 4 September 2026. This policy replaces our previous privacy notice, which predated the GDPR.

1. Who we are

btfscores.com (the ‘Website’) is operated by BTFScores. We are the data controller for the personal data described here, within the meaning of Article 4(7) of the General Data Protection Regulation (EU) 2016/679 (‘GDPR’).

For anything in this policy, or to exercise any right in section 7, write to info@btfscores.com.

2. What this policy covers

It covers the Website, the live-score widgets we publish for embedding on other sites, and the e-mails we send you. It does not cover other websites you reach through links or advertising here — those are controlled by other people and have their own policies.

3. If you only read the scores

You can browse scores without an account and without agreeing to anything optional. In that case we process only what a web server unavoidably receives — your IP address, the page requested, the time, and your browser’s user-agent — to deliver the page and to keep the service secure and available. Lawful basis: our legitimate interests in operating and protecting the Website (Article 6(1)(f) GDPR).

We set one strictly necessary cookie to hold your session and to protect forms against cross-site request forgery. It carries no advertising identifier and is not shared. We also run Google Analytics, which sets its own cookies and is described in section 6.

4. If you register an account

When you register we collect the first name, surname, username, e-mail address, country, time zone and, if you choose to give it, telephone number that you enter. Your password is stored only as a salted hash — we never hold it in a readable form and cannot tell you what it is. We also record the IP address and referring page at registration, and the date, time and IP of your logins.

We process this to create and run your account, to authenticate you, to let you reset a forgotten password, and to apply your preferences such as time zone. Lawful basis: performance of the contract between us (Article 6(1)(b) GDPR). Login and attempt records are kept to detect and limit abuse, on the basis of our legitimate interests (Article 6(1)(f) GDPR).

Providing this data is not a statutory requirement, but without it we cannot give you an account. You are free to browse without one.

5. If you contact us or subscribe

Our contact and add-your-site forms send us the name, e-mail address and message you enter, so that we can reply. Lawful basis: our legitimate interests in answering enquiries, or steps taken at your request before entering a contract (Articles 6(1)(f) and 6(1)(b) GDPR).

We send a newsletter only to people who ticked the subscription box, which is never ticked for you in advance. Lawful basis: your consent (Article 6(1)(a) GDPR). Every newsletter carries a one-click unsubscribe link, and you can also ask us to remove you at info@btfscores.com. Withdrawing does not affect the lawfulness of anything sent before you withdrew.

6. Cookies and analytics

We set three functional cookies, and Google Analytics sets its own in addition.

• 1. A session cookie, which keeps you signed in and protects forms against cross-site request forgery. Without it the Website cannot work.
• 2. tz, which remembers the time zone you picked from the selector, so kick-off times stay in your local time.
• 3. sound, which remembers whether you switched the goal alert on or off.

Of those three, the last two exist only because you asked for them by using those controls, and the first is required to deliver the service. None of the three carries an advertising identifier and none is shared with anyone.

4. Google Analytics cookies (_ga and _ga_<id>), set by Google on our behalf. These are different in kind from the three above: they hold a randomly generated identifier that lets Google recognise the same browser across pages and across visits, and the data is sent to Google, who acts as a separate controller for it. We use it to measure which pages are read and how people move through the site.

We use Google Analytics 4, and we do not ask you to opt in to it. We treat measurement as part of running the Website and load it for every visitor. You should know what that means in practice, so it is stated plainly rather than buried: your visit is reported to Google, a cookie holding a random identifier is stored on your device, and we do not currently offer an on-site control to refuse it.

You can still refuse it. Any of these works without our involvement: block third-party or all cookies for this site in your browser; use your browser’s Do Not Track or tracking-protection setting; or install Google’s official opt-out add-on at tools.google.com/dlpage/gaoptout, which disables Google Analytics on every site you visit. Blocking it costs you nothing on this Website — scores, your account and every feature work exactly the same.

Advertising trackers and push-notification software remain removed: Clevernt and OneSignal both went in September 2026 and have not come back.

We also count visits ourselves. Alongside Google Analytics we run our own counter on our own server. When you open a page it records three things: the date, the page path, and the domain you arrived from — and it adds 1 to a total. That is the entire record.

It does not set a cookie. It does not store your IP address, your browser, a device fingerprint, or any identifier at all. There is no row anywhere that represents you: only totals such as “/soccer-live-score, 4 September, 812 views”. Because nothing recorded can identify you, alone or combined with anything else, it is not personal data, and neither consent nor a cookie banner applies to it. That is also why we cannot tell you how many unique visitors we have — counting individuals would require identifying them, and we chose not to.

That counter, taken on its own, tells us nothing about you. It is described here because it is what the totals in our own admin pages come from — but it is not a substitute for the paragraphs above, and Google Analytics is the part of this section that actually concerns your privacy.

7. Your rights

Under the GDPR you have the right to:

• 1. Access (Article 15) — be told whether we hold data about you and receive a copy of it;
• 2. Rectification (Article 16) — have inaccurate data corrected and incomplete data completed;
• 3. Erasure (Article 17) — have your data deleted where one of the grounds in that Article applies;
• 4. Restriction (Article 18) — have us limit what we do with your data while a dispute about it is resolved;
• 5. Portability (Article 20) — receive the data you gave us in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible;
• 6. Object (Article 21) — object at any time to processing based on our legitimate interests, and object absolutely to direct marketing, which we will then stop without question;
• 7. Withdraw consent (Article 7(3)) — at any time, as easily as you gave it;
• 8. Complain (Article 77) — to the data protection supervisory authority of the country where you live or work. You may do this whether or not you come to us first.

Write to info@btfscores.com to exercise any of these. We reply within one month and will tell you if we need to extend that, as Article 12(3) permits. There is no charge. We may ask you to confirm your identity before we act, so that we do not disclose your data to someone else.

8. Who we share data with

We do not sell your personal data, and we do not share it for anyone else’s independent marketing. We use the following processors, each acting on our documented instructions and only for what is listed:

• 1. TurboSMTP — sends account e-mails such as activation and password reset. Receives your e-mail address and the message.
• 2. MailerLite — sends the newsletter, if you subscribed. Receives your e-mail address and name.
• 3. Our hosting provider, which stores the databases and logs on our behalf.
• 4. Google (Google Analytics 4) — receives your visit: pages viewed, approximate location derived from your IP, device and browser type, and the random identifier stored in its cookie. Google is not merely following our instructions here; it acts as a separate controller for that data and may process it outside the UK and EEA under its own terms and safeguards. Google’s handling is described at policies.google.com/privacy.

Our own page counter is separate from that and still runs alongside it: it stays on our server and sends nothing to anyone.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

9. Transfers outside the EEA

Some processors above may handle data outside the European Economic Area. Where that happens the transfer relies on a European Commission adequacy decision, or on Standard Contractual Clauses adopted under Article 46 GDPR together with any additional measures needed. Ask us at info@btfscores.com and we will tell you which applies and provide a copy of the safeguards.

10. How long we keep it

• 1. Account data — while your account is open. After closure or an erasure request we delete or irreversibly anonymise it without undue delay, and in any event within 30 days, unless we must keep a limited record to meet a legal obligation or defend a claim.
• 2. Login and failed-attempt records — 12 months, then deleted.
• 3. Newsletter subscription — until you unsubscribe.
• 4. Contact form messages — 24 months after the matter is closed.
• 5. Page counters — kept indefinitely. Totals per page per day; no personal data.
• 6. Your cookies — the session cookie lasts until you close the browser or sign out; tz and sound persist until you change or clear them.

11. Security

The Website is served over HTTPS. Passwords are stored only as salted hashes. Access to the databases is restricted to the accounts that need it, and repeated failed logins are recorded so that abuse can be limited. No system is perfectly secure, but if a breach occurs that is likely to result in a high risk to your rights and freedoms, we will tell you as Article 34 GDPR requires, and notify the supervisory authority under Article 33.

12. Children

Accounts are for people aged 16 or over, or the lower age set by your country under Article 8 GDPR, never below 13. We do not knowingly collect data from children below that age. If you believe a child has registered, tell us and we will delete the account.

13. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects concerning you, or that similarly significantly affects you.

14. Changes to this policy

We update this policy when what we do changes. The date at the top shows the last revision. Where a change materially affects you we will give notice on the Website, and by e-mail to registered users where the change is significant.

15. Contact

Questions, requests, or complaints: info@btfscores.com, or our contact form. See also our Terms and Conditions.