Privacy Policy
This Privacy Policy explains how BolaMatch Inc ("BolaMatch", "we", "us", "our") collects, uses, shares, and protects information when you visit bolamatch.com or use the BolaMatch mobile application (collectively, the "Service").
BolaMatch is a football schedule and TV-guide service. We do not require accounts, do not process payments, and do not knowingly collect personal information from children. By using the Service, you agree to the practices described in this policy.
1. Information we collect
We collect a limited set of information automatically when you use the Service. We do not ask you to create an account, and we do not collect names, addresses, phone numbers, or payment information.
1.1 Automatically collected information
- Approximate location (country level): We read your visitor country code via Cloudflare's edge network in order to display the Service in an appropriate default language. We do not collect precise GPS or street-level location.
- Device and browser information: User-agent string, operating system, browser type, screen size, language preference, and approximate timezone. This is used to render the Service correctly and to debug issues.
- IP address: Logged transiently by our hosting providers (Cloudflare Pages, Vercel) for security and abuse-prevention purposes. We do not store IP addresses in our application database (we have no application database).
- Usage information: Pages viewed, leagues selected, language switched to, search queries you type into the in-app search field, and timing of these interactions. This is collected via Google Analytics (see section 3).
1.2 Information you provide
You may type team or league names into the in-app search field. These queries are processed in your browser to filter the visible fixture list and may also be sent to Google Analytics as part of standard event-tracking. We do not link search queries to your identity.
2. How we use information
- To display football fixtures, kickoff times, and broadcast information in your local timezone and preferred language.
- To measure usage of the Service (which leagues are popular, which languages are used, error rates) so we can improve it.
- To detect and prevent abuse, fraud, and security incidents.
- To comply with applicable law and respond to lawful requests.
We do not use your information to build advertising profiles, sell your data to data brokers, or perform automated decision-making with legal effects.
3. Third-party services we rely on
BolaMatch is built on top of several third-party platforms. Each operates under its own privacy policy. By using the Service you also accept the practices of these providers in respect of the data described below.
| Provider | Purpose | Data they may receive |
|---|---|---|
| Cloudflare, Inc. | CDN, edge hosting, country-level geolocation | IP address, request metadata, country code |
| Vercel Inc. | Serverless API proxy that fetches match data on our behalf | IP address, request metadata (request body contains only league codes and dates) |
| Google LLC (Google Tag Manager, Google Analytics) | Usage analytics | Cookies, advertising/device identifiers, pseudonymous user ID, page-view and event data |
| football-data.org | Source of fixture, score, and broadcast data | Only our server's IP via the Vercel proxy — football-data.org does not directly see end-user IPs |
| Google Fonts | Web font hosting | IP address and user-agent (per request) |
Links to provider privacy policies: Cloudflare, Vercel, Google, football-data.org.
4. Cookies and similar technologies
BolaMatch itself does not set first-party cookies for application state. However, Google Analytics (loaded via Google Tag Manager) sets the following cookies in your browser:
_ga— distinguishes unique users; expires after 2 years._ga_<container-id>— used to persist session state; expires after 2 years._gid— distinguishes users for 24 hours.
You can prevent cookies from being set by blocking third-party scripts in your browser settings, by installing a privacy-oriented browser extension, or by using your operating system's "limit ad tracking" settings (in our mobile app version).
5. Data retention
- Server logs (Cloudflare, Vercel): up to 30 days, after which they are aggregated or deleted by the providers.
- Google Analytics data: default retention period of 14 months, after which it is automatically deleted.
- We do not run an application database that stores user data, so we have no long-term storage of personal information ourselves.
6. Sharing and disclosure
We do not sell, rent, or trade your information. We may disclose information in the following limited circumstances:
- Service providers: the third parties listed in section 3, strictly to operate the Service.
- Legal compliance: when required by valid legal process or to protect rights, safety, or property.
- Business transfers: in connection with a merger, acquisition, or sale of all or part of our assets, in which case the acquirer assumes the obligations of this policy.
7. International data transfers
Our service providers operate globally and may process your information in countries other than your country of residence, including the United States and the European Union. Where applicable, we rely on the providers' Standard Contractual Clauses or equivalent transfer mechanisms.
8. Your privacy rights
Depending on where you live, you may have the following rights under laws such as the EU GDPR, UK Data Protection Act, California CCPA/CPRA, Indonesia's Personal Data Protection Law (UU PDP), Vietnam's Decree 13/2023 on Personal Data Protection, Thailand's PDPA, and the Philippines' Data Privacy Act:
- Right to access the personal information we hold about you.
- Right to rectification of inaccurate information.
- Right to deletion ("right to be forgotten").
- Right to restrict or object to processing.
- Right to data portability in a structured, commonly-used format.
- Right to withdraw consent where processing is based on consent.
- Right to lodge a complaint with your local data protection authority.
Because we do not maintain user accounts, exercising most of these rights involves blocking analytics cookies in your browser. To make a formal request, contact us at [email protected] and we will respond within the time limits set by applicable law (typically 30 days).
9. Children's privacy
The Service is not directed to children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.
10. Security
The Service is served exclusively over HTTPS with HTTP Strict Transport Security enabled. We do not store payment information. We implement reasonable technical and organizational measures to protect the limited information we process, but no internet transmission is 100% secure.
11. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be highlighted in the in-app changelog or via an in-app notice. Your continued use of the Service after an update constitutes acceptance of the revised policy.
12. Contact us
If you have questions, requests, or complaints about this Privacy Policy or our data practices, contact us at:
BolaMatch Inc
Email: [email protected]
This Privacy Policy is governed by the laws of the Republic of the Philippines, without regard to its conflict-of-law principles.