Privacy policy

Last updated 25 October 2026
This policy explains what personal information StatCaddie collects when you use the website, why, and what you can do about it. We keep it to a minimum: you can use every stats page without an account, and we don’t use advertising or tracking cookies.

Who we are

StatCaddie (statcaddie.co.uk and statcaddie.expo.app) is an independent football stats website based in the United Kingdom. We are the “controller” of the personal information described here, which means we decide how it’s used and we’re responsible for it under UK data protection law (the UK GDPR and the Data Protection Act 2018).
To ask about this policy or your information, email statcaddie@gmail.com or use our feedback page (choose “Other”).

What we collect

When you browse. Like every website, our hosting provider receives your IP address and basic details of your browser and device so it can send you the pages and keep the site secure. We don’t use advertising or social media trackers.
How the site is used. To learn what’s useful and what to improve during the beta, we count which pages are opened, how long they’re on screen, which tools and options are used (for example Bet builder sections, Match Filters stats and searches), how fast pages load and any errors. Each visit gets a random number that lives only while the page is open; nothing is stored on your device, and the counts don’t include your IP address, your device or which account you use, only whether you were signed in (if you are, your account is checked only so the StatCaddie team’s own visits can be left out). We also use Cloudflare Web Analytics, which counts visits, the website that sent you, and your type of device and browser, without cookies and without following you to other sites.
If you create an account.
  • •
    Your email address and password. Your password is stored scrambled (hashed), so nobody, including us, can read it.
  • •
    Your plan (everyone is on the free plan during the beta) and when you joined. We ask you to confirm you’re 18 or over, but we don’t store your age or date of birth.
  • •
    If you sign in with Google or Facebook (or Apple, when it’s added): your email address and the basic profile details that company shares, usually your name and profile picture. We never see your password for those accounts.
  • •
    Sign-in records (when you signed in and the IP address used), kept by our sign-in provider to protect your account.
  • •
    Anything you save, such as your saved Match Filters.
If you send feedback. Your message and what it’s about, the page you sent it from, your browser and screen width (to help us reproduce problems), your email address only if you type one in for a reply, and a link to your account if you’re signed in.
Choices kept in your browser. Some choices (such as your Bet Builder picks and the season picker) are stored in your own browser, not sent to us. See our cookie notice.

Why we use it, and our legal basis

  • •
    To run your account (sign you in, save your filters, send emails to confirm your address or reset your password): this is needed to provide the service you asked for (contract).
  • •
    To read and answer feedback, fix problems and keep the site secure (for example, stopping spam and attacks): our legitimate interest in running a working, safe website.
  • •
    To count how the site is used (see above), so we can improve it: our legitimate interest in making StatCaddie useful. These figures are only ever looked at as totals.
We don’t sell your information, use it for advertising, or make automated decisions about you. We only send emails about your account. If we ever want to send news or offers, we’ll ask first, and every such email will have an unsubscribe link.

Who we share it with

Only the companies that run parts of StatCaddie for us, each acting on our instructions:
  • •
    Supabase (database, sign-in and account emails). Your account and feedback are stored in its London data centre.
  • •
    Expo (website hosting, served through Cloudflare’s network), which handles your IP address and browser details when you load a page.
  • •
    Cloudflare (Web Analytics), which counts visits as described above.
  • •
    Google or Facebook, only if you choose to sign in with them. Their own privacy policies apply to what they collect.
We may also share information if the law requires it, for example with the police under a valid request.

Information leaving the UK

Some of these companies are based in the United States or use worldwide networks, so information can be handled outside the UK. When it is, it’s protected by the safeguards UK law requires, such as the UK–US “data bridge” or the UK’s standard contract terms.

How long we keep it

  • •
    Your account and what you’ve saved: until you delete your account.
  • •
    Feedback: for up to 2 years, then deleted. If you delete your account, your feedback is kept for that time but no longer linked to you.
  • •
    Usage counts: 12 months, then deleted. They aren’t linked to you or your account.
  • •
    Sign-in and hosting records: for the short period our providers keep them for security.

Deleting your account and data

You can delete your account at any time: sign in, open your account page and choose Delete account. This removes your account, your email address and your saved filters straight away (records of past sign-ins are kept only for the short security period above). It works the same whether you signed up with email, Google or Facebook.
If you can’t sign in, or want anything else removed (such as a feedback message), email statcaddie@gmail.com or use our feedback page (choose “Other”). We’ll reply within one month.

Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to object to or limit how we use it, and to have it sent to you or another company in a common format. These rights are free to use, and we’ll answer within one month.
If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.

Over 18s only

StatCaddie is for people aged 18 or over. We don’t knowingly collect information about anyone younger. If we learn that an account belongs to someone under 18, we’ll delete it.

Keeping it safe

Everything is sent over encrypted (HTTPS) connections, passwords are hashed, and the database only lets each person see their own account. No system is perfectly secure, but if something ever went wrong that put you at risk, we’d tell you and the ICO as the law requires.

Changes to this policy

We’ll update this page when what we collect or who we use changes, and change the date at the top. If a change matters, we’ll also tell account holders by email or on the site before it takes effect.
Also see: Terms of use · Cookie notice