Privacy

This notice covers the TifoSports website, dashboard and API. The operator of TifoSports is responsible for your data; write to support@tifosports.com with any question or request.

What we collect, and why

• Your account: your email, your company, your website (or that you are not live yet), a hash of your password (never the password itself), the time you confirmed you sign up for a business and accepted the terms, and the IP address you signed up from. To give you the service, sign you in and keep the free trial to one per company.
• Your API key: stored only as a hash, with its first characters so you can recognise it, when it was last used, the IP address it may be used from, and a log of changes to that address. To check each request and to stop a key being shared.
• Usage: request and socket counts per key, to apply the limits and to show you your usage.
• Match tracker views: how many times the tracker opened with your tracker key, per day and per website that showed it (the site's address only, never your visitors' IP addresses), to stop a key being shared.
• Plan and payments: your plan, its dates, and for each payment the invoice, the amount, the coin, the transaction id and the address it was paid to, and the receipt details you give us (company, address, tax number, billing emails). Payments are made in cryptocurrency through our own checkout, running on our own server: no payment company receives your data, and we never see or store a card or bank account. The address you pay from, like every payment on a public blockchain, is visible to anyone by nature.
• Contact form: your name, company, email and message, and the IP address and browser of the submission, to reply and to stop abuse.
• How you found us: when you sign up, the site that sent you (its name only, such as google.com), the campaign tags of our own links, and the first page you opened here, kept in your session until then and saved once with your account. To know which places bring customers; only we see it.
• Visit counts: Cloudflare Web Analytics counts page views and loading times on the public pages, without cookies and without identifying you.
• Sign-in and security: the IP address and browser of your signed-in sessions, and server logs that can hold IP addresses, to keep the service secure and to find faults.

Cookies

Only the cookies the site needs to work: your session and a security token for forms. No analytics, advertising or tracking cookies, so there is no cookie banner.

Who processes it for us

• Cloudflare: carries all traffic to the site and the API, and protects it@if ($analytics); its Web Analytics counts visits without cookies@endif.
• Resend: sends our emails (sign-up confirmation, password reset, replies to the contact form).
• Our hosting and backup providers: a dedicated server and encrypted off-site backups, both in the EU.

We do not sell your data and do not pass it to anyone for marketing.

How long we keep it

• Account, key and plan data: while your account exists. When you delete your account it is removed at once; copies in our encrypted backups are overwritten within 14 days.
• Payment records: as long as tax and accounting law requires.
• Contact messages: up to 12 months after the last reply.
• Match tracker views: up to 12 months.
• Server and security logs: up to 12 months.

Your rights

You can ask to see, correct, export or delete your data, and you can delete your account yourself in your dashboard settings. Write to support@tifosports.com; we answer within 30 days. Where data protection law gives you the right, you can also complain to your data protection authority.

Who it is for

TifoSports is for businesses and people aged 18 or older. We do not knowingly collect data from anyone younger.

Changes

We may update this notice. The date below shows the current version; important changes are also sent to your account email.

Last updated 17 October 2026.