Privacy Policy
This notice explains how MatchSignal processes personal data and how you can exercise your rights under the General Data Protection Regulation (GDPR). Forray Gyöngyi determines the purposes and means of the processing described here and is the data controller.
Data we process
- Consent preference data stored in your browser, including the analytics choice and timestamp.
- Contact-form data: name, email address, message and anti-abuse fields; the server also uses the requesting IP address for short-lived rate limiting.
- With consent, GA4 device, browser, referral, page-view and usage data, plus coarse location derived by Google.
- Advertising and consent signals that Google may process when AdSense or a Google consent service is available.
- Affiliate-click event data sent to GA4 only with analytics consent: partner name, sport, market and placement; full tracking URLs and personal details are not sent in that event.
- Technical request, security and server-log data processed by the hosting infrastructure.
Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Remember privacy choices and provide the requested site | Consent preference and necessary technical data | Legitimate interests (GDPR Art. 6(1)(f)) in secure, usable operation; storage strictly necessary to honour a requested choice |
| Answer contact requests | Name, email, message | Steps requested before a possible contract (Art. 6(1)(b)) where applicable; otherwise legitimate interests (Art. 6(1)(f)) in responding |
| Prevent abuse and protect the service | IP address, request and security data | Legitimate interests (Art. 6(1)(f)) |
| Measure site use with GA4 | Analytics/device/browser/usage data | Consent (Art. 6(1)(a)) |
| Deliver and measure Google advertising | Advertising identifiers, device/browser data and consent signals | Consent (Art. 6(1)(a)) where required; any contextual delivery must follow applicable law and available consent signals |
| Measure affiliate referrals | Referral parameters at the destination; consent-gated GA4 click event on MatchSignal | Legitimate interests in commercial attribution at the destination, subject to third-party terms; consent for MatchSignal GA4 measurement |
Strictly necessary browser storage
MatchSignal stores the key matchsignal_consent in localStorage so your analytics choice can be applied on later visits. This preference contains an analytics boolean, an advertising value fixed to false in the MatchSignal fallback, and a timestamp. It remains until you change it or clear site data. Language is taken from the URL and is not currently stored by MatchSignal.
Contact form
Submitting the contact form is optional. The form sends your name, email address and message through MatchSignal's Vercel-hosted endpoint to Resend for email delivery to the operator. An IP address is used in an in-memory one-minute rate-limit window. Do not include sensitive data that is unnecessary for your request.
Google Analytics 4
GA4 loads only after an available consent authority permits analytics. It may process page URLs, referral source, device/browser information, interaction events and coarse location. GA4 is not described as anonymous. Google Analytics does not log or store individual IP addresses; IP data may be used transiently to derive geolocation before being discarded under Google's regional processing documentation. This behavior is built into GA4 and is not presented as a MatchSignal-enabled privacy setting.
Google advertising and affiliate links
The AdSense script is included on the site and may process consent signals, device/browser data, advertising identifiers and cookies as permitted by applicable law and the available choices. Personalized Google advertising in the EEA, UK and Switzerland requires a Google-certified CMP integrated with the IAB Transparency and Consent Framework. Affiliate destination URLs contain referral parameters. A destination partner may set its own storage or receive normal request data when you follow a link; review that partner's notice before using its service.
Processors and recipients
Groq and The Odds API support content-generation and bookmaker-market data workflows, but repository evidence does not show contact-form or identifiable visitor data being sent to them, so they are not listed here as processors of visitor personal data.
- Vercel, Inc.: hosting, delivery, security and server infrastructure.
- Resend, Inc.: delivery of contact-form email.
- Google: Google Analytics 4, AdSense and related consent services where available.
- Sportsbook or informational affiliate partners: only when you choose to follow their external link; their own privacy terms apply.
International transfers
Some providers may process data outside Hungary or the European Economic Area. Where GDPR transfer rules apply, transfers must rely on an applicable adequacy decision, Standard Contractual Clauses, or another lawful safeguard offered for the relevant processing. Provider documentation and terms contain the current transfer details.
Retention
- Consent preference: until you change it or clear browser storage.
- Contact requests: for the time needed to answer and manage follow-up, normally no longer than 24 months, unless a longer period is necessary for a legal claim or statutory duty.
- Rate-limit record: approximately one minute in the active server instance.
- Hosting/security logs: according to Vercel's configured retention and what is necessary for security and incident handling.
- GA4 and advertising data: according to the retention controls and policies configured or applied by Google; MatchSignal reviews those criteria rather than promising a universal cookie lifetime.
Security
MatchSignal uses access controls, transport security, input validation, rate limiting and managed hosting safeguards appropriate to the nature of the service. No internet transmission or storage system is completely secure.
Your rights
To exercise a right, contact privacy@matchsignal.pro. Identity verification may be required where reasonably necessary.
- Information about processing and access to your personal data.
- Rectification of inaccurate data.
- Erasure and restriction where the legal conditions apply.
- Data portability for applicable consent- or contract-based automated processing.
- Objection to processing based on legitimate interests.
- Withdrawal of consent at any time, without affecting earlier lawful processing.
- A complaint to a competent supervisory authority.
Complaint to NAIH
You may complain to the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9-11, Hungary; postal address: 1363 Budapest, Pf. 9.; email: ugyfelszolgalat@naih.hu. You may also contact the supervisory authority where you live or work.
Required data and automated decisions
Contact-form data is optional, but the required fields are needed if you want a reply through that channel. Refusing analytics or advertising consent does not prevent access to core content. MatchSignal's sports prediction system produces informational content about sporting events. It does not make decisions about an identifiable website visitor that produce legal or similarly significant effects within GDPR Article 22.
Contact
Privacy questions and rights requests: privacy@matchsignal.pro. General questions: contact@matchsignal.pro. Legal notices: legal@matchsignal.pro.
Operator information
- Name
- Forray Gyöngyi
- Legal status
- Sole proprietor / individual entrepreneur
- Address
- 7633 Pécs, Esztergár Lajos utca 9/B, Hungary
- Hungarian Tax Number
- 74264166-1-22
- Sole Proprietor Registration Number
- 57756666
- Registry
- Hungarian National Tax and Customs Administration (NAV) / Hungarian Individual Entrepreneurs Registry
- Roles
- Website maintainer and technical operator; commercial and affiliate activity operator; data controller where MatchSignal determines processing purposes
- Contact
- contact@matchsignal.pro · legal@matchsignal.pro · privacy@matchsignal.pro
Last updated: 20 August 2026