Privacy notice

This notice describes what Socostars actually does with data today. It describes the current build of the site, not a planned one.

1. No accounts, no profiles

The app has no sign-up, no login, and no user database. We do not collect names, email addresses, or passwords.

2. Data stored on your device

Two preferences are saved in your browser's localStorage so the interface remembers them between visits:

• socostars.watchlist — the matches and clubs you star.
• socostars.coverage — which of the indexed leagues you have enabled.

These values never leave your browser and can be cleared at any time from your browser settings.

3. Cookies

The application itself sets no cookies. If, in future, advertising or analytics are enabled, this notice must be updated first and any consent requirement handled before those tools load.

4. Third-party requests

To display fixtures, results, tables, rosters and news, the site requests data from the providers below. Our own server makes the provider calls and caches the answers, so in most cases the provider sees this site's server rather than your browser:

• football-data.org (v4) — the primary source for fixtures, kickoff times, full-time scores, standings, each club's registered squad and the recorded scorer table. The API token is held in this site's server environment and is never sent to the browser; requests are made through our own serverless route and edge-cached.
• API-Football (v3.football.api-sports.io) — fixtures, registered squads, injuries and head-to-head where football-data.org does not cover the competition. Its key is likewise held server-side only.
• News publishers — the news centre, the dashboard news flash and every club page read publishers' own public feeds (BBC Sport, Sky Sports, The Guardian, ESPN) and the Google News index through this site's own /api/news route. Only the publisher's headline, its published description, its timestamp and a link back to its article are shown and cached; articles are never copied, rewritten or republished, and a source that does not answer is shown as unavailable rather than filled in. The GDELT public index is off by default and can be enabled by the operator as an extra source.
• openfootball football.json league data (served from GitHub's raw content host)
• ESPN public soccer scoreboards
• Wikipedia / Wikimedia APIs — including each club's published current-squad list, which is requested through this site's own serverless route so your browser never contacts Wikipedia directly
• TheSportsDB public API
• a Transfermarkt-derived public dataset (served from GitHub's raw content host)
• football-data.co.uk — the free results, match-statistics and expected-goals CSV archive (fetched at build time by this site's own build step; no request is made from your browser, and no odds columns are imported)

Each card in the interface names the provider it came from. We do not re-publish those feeds beyond the browser session, except for generated files that are cached on our own host so a page loads instantly.

5. Hosting

The site is served by Vercel, which keeps standard access logs (including IP address, timestamp and requested URL) for security and operations. Those logs are controlled by Vercel, not by this application.

6. Your rights

Because we hold no personal data about you, there is nothing for us to export or delete on request. Clearing your browser storage removes everything this app has saved. If you are in a jurisdiction with additional statutory rights, contact the operator of this deployment using the contact route below.

7. Changes

Any material change to how data is handled will be reflected on this page, with the date above updated.