Skip to main content

Privacy policy

1. Who we are

MatchPoints Sports Analytics Limited is the controller for the personal data described here. It is a private company limited by shares, registered in Ireland under company number 823485, with its registered office at Apartment 20, Block A, One, Lime Street, Dublin 2, D02 W728, Ireland. You can reach us about any privacy matter through your MatchPoints account or through the data request form described in section 6.

2. The data we process

We process two kinds of personal data:

  • Account data you provide: your name, email, phone if you add it, your role, your country, and for brands and agencies your organization name, website, and your role there. This supports sign-in, verification, and the marketplace features you use.
  • Athlete profile data drawn from public sources: name, tour, ranking, results, and the Match Point Index we compute from them. This is the same category of information that public tennis rankings and results already make available.

3. Lawful basis

For account data, we process it to perform our agreement with you and to run and secure the service. For athlete profile data built from public sources, our lawful basis is our legitimate interest, and the legitimate interest of brands and agencies, in analyzing publicly available competition results to identify breakthrough potential. We limit this to professional, career-relevant information already in the public domain, and we balance it against the rights of the athlete, including the removal right in section 6.

4. Anonymization and access

Athlete identities, index values, and bands are shown only to viewers whose role and approval grant access, and only for athletes in scope for them. Visitors and pending accounts see a bucketed, anonymized view with no identities or index values. These controls are enforced in the database, not only in the interface, so access cannot be widened by manipulating the client.

5. Cookies and analytics

We use two kinds of cookies and similar storage in your browser (such as local storage): essential ones, and analytics ones only with your permission. We do not use advertising or cross-site tracking cookies, and we do not sell personal data.

  • Essential. These keep you signed in, support and secure sign-up, sign-in, password resets and invitations, remember your cookie choice, and keep visits by MatchPoints staff and test accounts out of our statistics. The service needs them to work, so they are always on and we set them without asking. Some last only until you close your browser; the longest, which keeps you signed in, lasts up to 400 days while you use the service and is removed when you sign out.
  • Analytics. We use these only with your permission, which you give or refuse in the cookie banner. They help us understand how MatchPoints is used so that we can improve it and fix problems: the pages you open, what you click, the steps you complete and the campaign or website that brought you to us. This may include recordings of how pages are used, with anything you type hidden. For this we use PostHog, hosted in the EU (Frankfurt), which acts on our behalf and keeps a random identifier for your browser so that visits connect over time. While you are signed in, we link this usage to your account using your account identifier, email address and role. Analytics cookies last up to 6 months.

Until you choose, PostHog does not run in your browser and nothing is stored on your device for analytics. Instead, our servers send PostHog, in the EU, a record of each page you open. A record holds only the kind of page (for example “an athlete profile”, never which athlete), whether the page loaded in full or changed within the site, which of our web addresses you used, and the time PostHog received it. It carries no identifier, cookie or IP address, and we do not use these records to identify you or to connect them to your later visits. Our lawful basis is our legitimate interest in knowing which pages and steps are used and where visitors stop, for example during sign-up or onboarding. We send no such records when your browser sends a Do Not Track or Global Privacy Control signal, for search engines and other automated visitors, or for MatchPoints staff and test accounts.

Until you choose, we also count how often key steps are completed, such as finishing sign-up or adding an athlete to a watchlist. These counts stay in our own database as one number per step and hour, with no identifier, cookie or IP address, and we delete them after 12 months. PostHog receives only daily totals and never a total below five: rarer steps are added together, and a combined total below five is not sent. The same lawful basis and the same exceptions apply.

If you reject analytics, we treat that as an objection to these records and counts as well: PostHog does not run in your browser, our servers send it nothing about your visits, and we do not count your steps.

You can change or withdraw your choice at any time from “Cookie settings” at the bottom of every page. Withdrawing stops analytics at once and deletes what PostHog stored in your browser. If you decline, we ask again the next time you visit. If you accept, we keep that choice for up to 6 months, or ask sooner when what we ask about changes. We keep a record of each choice (the date, the policy version, accept or reject, the random identifier of the choice and your account, if you were signed in or, after an Accept, once you sign in on that browser) to show that we asked.

6. Your rights and athlete requests

You have the right to access, correct, restrict, object to, and request erasure of your personal data, and to data portability where it applies. An athlete whose profile is built from public sources can object to it, ask us to make their score private, or ask us to correct or erase it at any time, whether or not they hold an account, using the data request form. We act on a valid request without undue delay. You also have the right to lodge a complaint with your local data protection authority.

If you are an athlete whose profile we built from public sources, the Athlete Data Notice sets out in full what we hold about you, where it comes from, who sees it, how the Match Point Index is derived, how to object, and what stays public. Closing your account does not remove a profile built from public sources.

7. Retention

We keep account data for as long as your account is active and for a short period afterwards to meet legal and security obligations, then delete it. Athlete profile data is retained while it remains relevant to the platform and is removed when it is no longer needed or when we uphold an erasure request.

PostHog deletes session replays after 30 days and other analytics events, including the page records described in section 5, after 12 months. We keep the record of a cookie choice for as long as we rely on it and for up to three years afterwards.

8. Changes

We may update this policy as the service develops. Material changes will be communicated through the platform.