Privacy Policy

This Privacy Policy describes how DURBAY OTOMOTİV MİMARLIK İNŞAAT TİCARET LİMİTED ŞİRKETİ ("we", "us") handles your information in the Rotascore mobile application and on rotascore.com.

Information We Collect

• Account information. If you choose to sign in (with Apple or Google), we receive your name, email address and a unique user ID through Firebase Authentication. Creating an account is optional.
• Favorites and preferences. Teams, leagues, players and matches you follow, and your notification preferences, so we can sync them across your devices when you are signed in.
• Device push token. A token issued by Apple/Google so we can deliver the notifications you request (for example goal alerts).
• Approximate location (country). We derive your country from your IP address to show you a relevant default feed (for example local leagues). We never collect your precise location.
• Usage and diagnostics data. Anonymous interaction events, crash logs and performance data (via Google Firebase Analytics and Crashlytics) that help us fix bugs and improve the app. When website analytics is active on rotascore.com, Google Analytics also processes page paths, referring pages, browser/device information, approximate location (country or region) derived from your IP address and interaction data. This data is not linked to your Rotascore account. App analytics is controlled in Settings → About → Privacy; website analytics and advertising are controlled through “Privacy choices” on the website (see Cookies & Similar Technologies).
• Website advertising data. When website advertising is active on rotascore.com, the Meta Pixel (Meta) and the TikTok Pixel (TikTok) may process your IP address, browser/device information, the addresses of the pages you view and the page that referred you, clicks on our App Store and Google Play buttons, and cookie or pixel identifiers. We use this to measure our advertising campaigns and to show more relevant ads, including on Meta and TikTok services. Meta and TikTok may combine this data with other information they hold about you and use it for their own purposes as independent controllers under their own privacy policies. This data is not linked to your Rotascore account.
• App-install attribution. When app analytics is enabled, Kochava processes app-install and session data, device and app information, approximate location derived from IP address, and campaign/referrer information to help us measure which ads lead to installs. We do not send your Rotascore account ID to Kochava. You can turn app analytics off in Settings → About → Privacy. On iOS, permission for cross-app tracking is managed separately by Apple's ATT prompt.
• Advertising and device data. Google Mobile Ads (Google AdMob) and its advertising partners, which are listed in the in-app privacy message, may process your IP address and country-level location, user/device or advertising identifiers, advertising data, product interactions, ad impressions/clicks, crash data, and diagnostic or performance data to deliver, measure and protect ads. Depending on your region and choices, ads may be personalized or limited/non-personalized. On iOS, access to the advertising identifier for cross-app tracking is requested separately through Apple's App Tracking Transparency (ATT) prompt.
• Purchases and subscriptions. If you buy Rotascore Pro in the app, the Apple App Store or Google Play processes the payment, and our subscription provider RevenueCat receives purchase and subscription information (product, transaction, subscription status and expiry) together with an app user ID — your Rotascore account ID if you are signed in, otherwise an anonymous RevenueCat ID — and low-sensitivity app information (app language, selected content country and app version). We use this to verify your purchase, switch off ads for Pro, restore purchases across your devices and provide purchase support. We do not receive your payment card details.
• Support requests. If you submit the in-app Support form, we receive the contact email, category and message you enter, your account ID, app and operating-system version, platform and language, and up to five screenshots you optionally select. Opening the form does not send this data. We do not ask for passwords, verification codes, payment-card details or identity documents.
• Match chat. If you use match chat in the app, we process your nickname, account ID, the messages you send and when you send them, the reports and blocks you make, and moderation records (removed messages, mutes and bans). Message text is checked by an automated moderation provider and may be reviewed by moderators. Translation of chat messages happens on your device. Messages are deleted when the room closes, 24 hours after the match ends; see the Chat Rules for how moderation works and how long moderation records are kept.

What We Do NOT Do

• We do not sell your personal data.
• We do not require you to allow cross-app tracking to use Rotascore; if you decline, the app continues to work.
• We do not collect your precise location or contacts.

How We Use Information

• To provide live scores, statistics and the features you use;
• To deliver the notifications you opt in to;
• To sync your favorites across devices (signed-in users);
• To personalize your default content by country;
• To diagnose crashes and improve performance and quality;
• To investigate and respond to support requests you submit;
• To verify purchases and provide Pro features;
• To fund the free service by delivering, measuring and preventing fraud in advertising, subject to your consent and privacy choices.

Legal Bases for Processing (GDPR)

Where the EU/UK GDPR applies, we process your personal data on the following bases: your consent (for personalized advertising, advertising cookies/identifiers, analytics and diagnostics where consent is required, and for optional push notifications); performance of a contract (to provide account sign-in, cross-device sync, subscriptions you purchase, support you request and the features you request); and our legitimate interests in operating, securing, debugging and improving Rotascore and in delivering limited/contextual advertising and preventing ad fraud where permitted, balanced against your rights and freedoms. You may withdraw consent or object at any time as described under "Your Rights".

Service Providers

We use a small number of providers to operate and fund the app and website: Google Firebase (authentication, push notifications, app analytics, crash reporting — Firebase privacy), Google Tag Manager and Google Analytics (website measurement, governed by Google Consent Mode as described under Cookies & Similar Technologies — Google privacy), Meta Pixel (website advertising measurement — Meta privacy policy), TikTok Pixel (website advertising measurement — TikTok privacy policy (EEA/UK/CH), other regions), Google AdMob / Google Mobile Ads and User Messaging Platform (advertising, consent collection, measurement and fraud prevention — how Google uses information from partner apps) together with the advertising partners listed in the in-app privacy message, Apple Push Notification service (iOS notifications and Live Activities), RevenueCat (subscription management and purchase verification for Pro — RevenueCat privacy), the Apple App Store and Google Play (payments), and e-mail delivery, automated moderation, network/CDN and hosting providers. Advertising providers may act as independent controllers for their own advertising purposes as described in their policies and in the partner list shown in the in-app privacy message. Where required, Google's User Messaging Platform asks for your advertising choices before ads are requested; you can change them in Settings → About → Privacy, and change iOS tracking permission in iOS Settings. If Rotascore is involved in a merger, acquisition or sale of assets, your data may be transferred as part of that transaction; we will notify you of any change in ownership or use of your data.

We also use Yandex Metrica on the website and AppMetrica in the app for analytics: IP-derived country, traffic sources, device information, pseudonymous identifiers, sessions, page/screen views and product interactions. They follow your existing analytics choices and regional consent rules. We do not send emails, Rotascore account IDs or raw search text; precise location, AppMetrica advertising identifiers and crash collection are disabled. Yandex stores data in the European Union and Russia (Yandex privacy). Click, scroll and form-interaction statistics and masked session recordings of public pages start only after you explicitly allow analytics; entered text and private content, including account, sign-in, search and chat content, are excluded or masked.

International Data Transfers

Our providers may process data on servers outside your country, including in the United States and the European Union. From the EEA or the UK to a country without an adequacy decision, we rely on appropriate safeguards — principally the European Commission's Standard Contractual Clauses and the equivalent measures under the UK GDPR. From Turkey, transfers follow Article 9 of the KVKK (an adequacy decision, an appropriate safeguard such as the Board's standard contract or, only occasionally, one of the exceptions in Article 9(6)); see the KVKK Privacy Notice and the Explicit Consent Text.

Cookies & Similar Technologies

rotascore.com uses essential browser storage (cookies and local storage) for sign-in, security, and your language, theme, favourites and privacy choices. It is always on because the website cannot work without it. Our Cookie Policy lists each cookie and similar technology by name, provider, purpose and duration.

Optional categories. Under “Privacy choices” on the website you control two optional categories separately: Analytics — Google Analytics, loaded through Google Tag Manager (for example the _ga cookies), and Yandex Metrica; and Advertising — the Meta Pixel (for example the _fbp cookie), the TikTok Pixel (for example the _ttp cookie) and Google advertising storage.

EEA, United Kingdom and Switzerland. If you visit from the European Economic Area, the United Kingdom or Switzerland — or if we cannot determine your region — analytics and advertising stay off until you allow them. We show a consent panel where you can accept all, reject all or choose each category. Until you choose, Google Consent Mode keeps analytics and advertising storage set to “denied” (no analytics or advertising cookies are written and no measurement is sent), and the Meta Pixel is not loaded. Google Tag Manager itself loads on every page to apply these settings. We determine your region from the country that our network provider (Cloudflare) derives from your IP address; we only keep a yes/no flag for the current browser session.

Browser privacy signals. If your browser sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal, we treat analytics and advertising as refused, whatever your region or earlier choices.

Changing your choice. You can change or withdraw your choices at any time under “Privacy choices”. Withdrawing stops further measurement and advertising from that point; cookies already set can be deleted in your browser settings. Withdrawal does not affect processing carried out before it.

Advertising on rotascore.com (Google AdSense)

Ads on rotascore.com are served by Google AdSense, Google's advertising service for websites; they help keep the website free. Ads in the Rotascore app are delivered separately through Google AdMob and its advertising partners, as described above.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to rotascore.com or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to rotascore.com and/or other sites on the Internet.
• Other third-party vendors and ad networks that work with Google AdSense may also use cookies to serve ads on rotascore.com. The cookies involved are listed in our Cookie Policy and in Google's cookie information for its ad products.

Opting out. You can opt out of personalized advertising in Google's Ads Settings (My Ad Center). You can opt out of some third-party vendors' use of cookies for personalized advertising at www.aboutads.info and, in Europe, at www.youronlinechoices.eu. To learn how Google uses this information, see How Google uses information from sites or apps that use our services.

Your consent. Google AdSense is part of the Advertising category under “Privacy choices”. In the European Economic Area, the United Kingdom and Switzerland — or if we cannot determine your region — Google Consent Mode keeps advertising storage and ad personalization set to “denied” until you allow advertising; in other regions they are on by default and you can turn them off at any time. A Global Privacy Control or Do Not Track signal counts as a refusal. When advertising is not allowed, Google may still show non-personalized or limited ads, which are based on context such as the page you are viewing or your general location rather than on your browsing history, and may use limited data to measure those ads and to prevent fraud and abuse.

Data Retention & Deletion

We keep personal data only as long as needed for the purposes described in this policy:

• Account data: while your account is active; deleted when you delete your account (see Account Deletion).
• Chat messages: deleted when the room closes, 24 hours after the match ends. Moderation records are kept only as long as needed (see the Chat Rules).
• Support requests: deleted within 12 months after they are resolved; attachments are deleted sooner. Deleting your account also deletes its linked support requests and attachments in our primary support system. You can request deletion of related e-mail copies by emailing help@rotascore.com.
• Server logs: connection and access records are kept for the period required by Law No. 5651.
• Push tokens: while your device is registered for notifications; deleted when you delete your account.
• Analytics and diagnostics: retained by our providers for their standard periods and then deleted automatically.
• Purchases and subscriptions: records are kept by Apple, Google and RevenueCat as needed for store accounting, fraud prevention, support and legal obligations, under their own retention rules.

Your Rights

Depending on where you live (including under the EU/UK GDPR, US state privacy laws and the Turkish KVKK), you have the right to: access the personal data we hold about you; rectify inaccurate data; erase your data; restrict or object to certain processing; receive your data in a portable, machine-readable format (data portability); withdraw consent; and opt out of the sale/sharing or use of personal data for targeted advertising where applicable. We do not sell personal data for money. If you are signed in, you can download your data and delete your account from the Account page on rotascore.com or in the app. You can also use the in-app advertising privacy choices entry point when shown, the applicable consent/privacy message, or email us at help@rotascore.com. On iOS, you can also deny or revoke tracking permission in iOS Settings. Withdrawing consent does not affect processing carried out before withdrawal. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. We respond to rights requests within the legally required period and free of charge. You may also lodge a complaint with your supervisory authority — in the EU/EEA your national Data Protection Authority, in the UK the Information Commissioner's Office (ICO), and in Turkey the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).

Children

Rotascore is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, please contact us so we can delete it.

Changes

We may update this policy from time to time. We will post the updated version on this page and update the date above. Material changes will be communicated in the app.

Contact

DURBAY OTOMOTİV MİMARLIK İNŞAAT TİCARET LİMİTED ŞİRKETİ

Email: help@rotascore.com