Privacy policy

Data controller

The controller is the owner listed below. For anything about your data, write to [email protected].

What data we process and why

Browsing. When you load the site, our server and Cloudflare (which delivers the site to you) process your IP address and technical data to serve the pages and protect them from abuse. Legal basis: legitimate interest in the security of the service.

Clicks to stores. When you press "View offer" you go through our own link (/go/), which records the click: date, product, store, language, page type, approximate country (provided by Cloudflare) and a summary of your browser (for example "Chrome, Android, mobile"). It does not store your IP or any identifier: to filter out bots the IP is only checked in memory, for less than an hour, and never written down. When sending you to the store we add a source code to the link (section, language, country and product) that identifies no one, so we can tell which pages lead to sales. It is used to find out which links work and to remove broken ones.

Analytics (only if you accept). Google Analytics 4 measures visits, page views and clicks to stores. Legal basis: your consent.

Affiliate links (only if you accept). Skimlinks turns links to some stores into affiliate links so that we can earn a commission. Legal basis: your consent.

Price alerts. If you ask for an alert without being signed in, we send you a confirmation email and the alert only turns on when you open its link and press “Confirm alert” (if you don't, the link expires after 7 days). If you are signed in, saving a favorite turns on the alert for that product without confirmation, because your email is already verified. We store your email, the product and the language you used, and once a week we compare the catalog prices for that product; if one drops, we email you. Every alert includes an unsubscribe link (and your email app may offer “Unsubscribe” directly) that deletes your email from that alert. Links carry a random code, never your email. To prevent abuse we count how many confirmation emails go to each address; that counter deletes itself after 24 hours. Legal basis: your consent.

Account. If you sign in with Google or with a link sent to your email, we process your email and, with Google, your name and profile picture. Your favourites travel in your session. Legal basis: performing the service you ask for.

Contact and reports. If you write to us or report a product, we use your message and email to reply. Resend delivers the email.

Cookies and local storage

Necessary (no consent needed): language cookie (football-cult-locale, 1 year), detected-country cookie (football-cult-geo-country, 30 days), session cookie if you sign in, and, in your browser, your cookie choice, country, favourites, comparison list and recently viewed items.

Analytics: Google _ga and _ga_* cookies, only if you accept. Affiliate links: Skimlinks scripts and cookies, only if you accept. Without your permission neither Google Analytics nor Skimlinks is loaded.

You can change your choice at any time with "Cookie settings" in the footer or the button below. If you withdraw a permission, the page reloads and those services stop loading.

Who we share data with

Google (Analytics 4 if you accept, and sign-in), Skimlinks (if you accept), Cloudflare (network and security), Resend (email delivery), a cloud database provider (alerts and account records) and images.weserv.nl (the service that delivers product photos: your browser requests the images from it and it sees your IP).

When you press "View offer" you leave for the store or its affiliate network (Awin, eBay Partner Network, TradeTracker, Rakuten Advertising, Amazon, Soicos or others). From that point their privacy policy and cookies apply. We do not sell your data.

International transfers

Some of these providers are outside the European Economic Area (for example in the US or the UK). They rely on an adequacy decision (such as the EU-US Data Privacy Framework) or on each provider's standard contractual clauses.

How long we keep it

Alerts: until you unsubscribe (or remove the favorite). Contact messages: as long as needed to deal with them. Analytics: the period set in the Google Analytics property. The click log contains no personal data.

Your rights

You can ask for access, rectification, erasure, objection, restriction and portability of your data, and withdraw your consent at any time, by writing to [email protected]. If you believe we are not handling your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to your local authority.

Changes

If anything above changes (for example a new service), we will update this page and its date.