— Legal

Privacy Policy

Effective / last updated: June 14, 2026

This Privacy Policy explains how TuringStats (“we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit our website, use our iOS application, or otherwise interact with our services (collectively, the “Services”). By using the Services, you acknowledge this policy. If you do not agree, please discontinue use.

1. Who we are

TuringStats operates an informational AI football forecasting platform. For privacy-related requests, contact us at [email protected] or via our contact form. Postal correspondence: New York, NY, USA.

2. Scope

This policy applies to:

The TuringStats website and related subdomains;
Our iOS mobile application;
Communications you send to us (e.g. contact form submissions).

It does not apply to third-party websites, sportsbooks, or app stores linked from our Services. Those parties have their own privacy policies.

3. Information we collect

3.1 Information you provide directly

When you contact us, we may collect:

Name, email address, subject line, and message body;
Any additional information you choose to include.

3.2 Crowd vote / audience features (web)

On match pages you may vote on a 1X2 outcome before kickoff without creating an account. We store a one-way hashed device fingerprint derived in your browser (from a locally stored random seed plus coarse browser signals) so we can count one vote per browser per match and let you change your pick until kickoff. We do not require your name or email for this feature.

3.3 Automatically collected technical data

Like most websites, we automatically receive certain technical information, such as:

IP address (which may be considered personal data in some jurisdictions);
Browser type, device type, operating system, and language preferences;
Referring/exit pages, approximate geographic region derived from IP, and timestamps;
Session identifiers stored in cookies (see Section 5).

3.4 Analytics and advertising data

We use Google Analytics (measurement ID G-9T81FPZFDY) and Google Ads / conversion tags (AW-775250251) to understand traffic, improve the product, and measure advertising performance. Google may set its own cookies and collect identifiers according to Google’s Privacy Policy.

If we display third-party advertisements (including Google AdSense or similar networks), those partners may use cookies, web beacons, or similar technologies to deliver and measure ads, prevent fraud, and personalize ad delivery where permitted by law. You can learn more about how Google uses data in advertising at Google Ads & data and manage preferences at Google Ads Settings.

3.5 Mobile application

The iOS app may collect usage diagnostics, crash data, and device identifiers as described in the App Store listing and Apple’s platform policies. Network requests from the app call our public API to render forecasts and blog content.

4. How we use information

We use collected information to:

Operate, maintain, and secure the Services;
Publish forecasts, leaderboards, and editorial content;
Respond to support, legal, and partnership inquiries;
Measure audience size, feature usage, and marketing effectiveness;
Detect abuse, spam, and automated scraping;
Comply with legal obligations and enforce our Terms of Use.

We do not sell your personal information for money. Where advertising partners process data, they do so under their contracts and policies as independent or joint controllers/processors as applicable.

5. Cookies and similar technologies

We use cookies and local storage for:

Essential operation — session security (CSRF protection on forms), load balancing, and basic preferences;
Audience voting — a random seed in localStorage to generate a stable anonymous device key in your browser;
Cookie consent — remembering that you accepted our cookie notice;
Analytics & ads — Google tags described above.

On first visit, we show a cookie banner. Clicking “Accept” stores your choice in localStorage and allows analytics/ad tags to run. You can withdraw consent by clearing site data in your browser or using industry opt-out tools linked in Section 9.

6. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on:

Legitimate interests — site security, fraud prevention, aggregated analytics, and improving our editorial product, balanced against your rights;
Consent — non-essential cookies/ad personalization where required;
Contract — responding to requests you initiate (e.g. contact form);
Legal obligation — retaining certain logs or responding to lawful requests.

7. How we share information

We may share information with:

Service providers — hosting, database, email delivery, football data APIs, AI inference gateways (e.g. OpenRouter), and analytics/ad platforms that process data on our instructions;
Professional advisers — lawyers or accountants under confidentiality when needed;
Authorities — when required by law, court order, or to protect rights and safety.

We require processors to protect data and use it only for the services they provide to us.

8. International transfers

We may process data in the United States and other countries where our providers operate. When transferring personal data from the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses where applicable.

9. Retention

We keep information only as long as necessary:

Contact messages — typically up to 24 months unless a longer period is needed for legal claims;
Server logs — rolling windows (often 30–90 days) unless investigating security incidents;
Audience votes — for the life of the fixture record plus a reasonable archival window for aggregates;
Analytics — per Google’s default retention settings, configurable in our analytics admin console.

10. Security

We use administrative, technical, and organizational measures (HTTPS, access controls, rate limiting, and hardened hosting practices). No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

11. Your rights and choices

Depending on your location, you may have the right to:

Access, correct, or delete personal data we hold about you;
Object to or restrict certain processing;
Withdraw consent for consent-based processing;
Port data you provided in a structured format;
Lodge a complaint with your local supervisory authority.

California residents may have additional rights under the CCPA/CPRA (know, delete, correct, opt out of “sale”/“sharing” for cross-context behavioral advertising). To exercise rights, email [email protected] with enough detail for us to verify your request.

Browser controls:

Block or delete cookies in browser settings;
Google Analytics opt-out: browser add-on;
NAI / DAA consumer opt-outs for interest-based ads in the US.

12. Children

The Services are not directed to children under 16 (or the age required in your country). We do not knowingly collect personal data from children. Contact us if you believe a child provided data and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “last updated” date at the top will change, and material updates may be highlighted on the site. Continued use after changes means you accept the revised policy.