Privacy notice

Controller and contact details

Data collected

The list contains your email address, selected language, signup time, consent-copy version and request status. Your address is not stored in browser localStorage.

Hosting may process IP addresses, browser and request details, timestamps and technical logs to deliver and protect the website. The form does not add these details to the subscriber list.

The form uses Vercel BotID Basic to check automated requests using browser and request signals. This check is for security, not advertising, and runs before the email is saved.

Purpose and legal basis

Your email is collected solely to send one notification when FootyXO launches. Signing up does not subscribe you to ongoing newsletters, advertising or third-party communications. The legal basis is consent (GDPR Article 6(1)(a)), expressed by voluntarily submitting the form after reading this notice.

Technical processing strictly necessary for security and operation relies on the legitimate interest in protecting the website (Article 6(1)(f)), subject to individuals' rights. Providing an email is optional: you can browse without it, but cannot receive the notification.

Retention

List data is kept until FootyXO launches, to send the requested notification, and removed from the operational list once sending is complete. You may request deletion and withdraw consent before launch.

This list deadline does not determine retention of technical logs, backups or any information strictly required by law. Their retention periods and criteria must be checked in provider settings before the final notice is published.

Providers and recipients

Vercel hosts the website and executes requests; Supabase hosts the subscriber database. Access is limited to the controller and providers necessary for the service, according to their respective roles and applicable agreements. Email addresses are not sold or published.

An email delivery provider has not yet been selected or enabled. This notice must be updated before addresses are shared with an additional provider. Social links lead to external services with their own privacy notices.

International transfers

An EU database location does not rule out processing outside the European Economic Area by providers or subprocessors. Countries, applicable agreements and GDPR Chapter V safeguards, such as adequacy decisions or standard contractual clauses where relevant, must be verified before publication. We do not claim all processing stays in the EU.

Your rights and withdrawal

Contact the controller by email to request access, rectification, erasure, restriction and, where applicable, portability or objection. You may withdraw consent at any time without affecting the lawfulness of prior processing. Requests are handled within GDPR deadlines, normally one month.

You may complain to the Italian Data Protection Authority or the competent supervisory authority. No automated decisions with legal or similarly significant effects, or profiling, are used for the launch notification.

Browser preferences

The website stores language and theme preferences locally to remember your choices. You can remove them through browser settings. No advertising tools are integrated.

Visit statistics

We use Vercel Web Analytics for aggregate statistics on home and privacy page visits: page views, referrals, country and browser or device type. We do not send email addresses, form contents or custom events. Page view URLs have query parameters and fragments removed before transmission.

The service does not use third-party cookies for these statistics. Our component does not load Analytics when the browser signals Do Not Track or Global Privacy Control. Collection only runs in production builds with the service enabled on Vercel. Statistics are separate from the launch notification list and are not automatically deleted with it.