xG.Football (https://xg.football) is a football statistics and predictions website. This policy explains what data we receive from visitors and users, why we need it and how you can control it. For any question, write to [email protected].
What data we collect
We collect only what the site needs to work:
- Account: email, name, password hash, language, time zone and notification settings.
- What you add yourself: favourite teams and competitions, votes in the odds block, comments, survey answers and feedback messages.
- Premium subscription: subscription status and period reported by Whop or Patreon. We never receive or store card details; payments are processed by those services.
- Telegram: if you connect our alerts bot, we store your chat ID to send you messages.
- Visits: the days you used the site and the time of your last visit. These records are kept for 180 days.
- Sign-up source: where you first came from (UTM tags, referring site, first page) and your Google Analytics client ID.
- Technical data: IP address, browser and requested pages in the logs of our server and of the Cloudflare network.
How we use it
- To give you access to your account, favourites, settings and Premium.
- To send emails you agreed to: address confirmation, service messages and newsletters. You can unsubscribe with the link in every email or in your account settings.
- To send Telegram alerts and digests if you switched them on.
- To understand which pages and channels bring visitors and to improve the site.
- To protect the site from abuse and to answer your requests.
We do not sell personal data and do not share it with advertisers.
Cookies and analytics
- Session and form protection (CSRF) token, so that sign-in and forms work.
- xg_ft — the first source that brought you to the site, kept for 90 days.
- Google Analytics 4 (_ga and related cookies) — visit statistics. For signed-in users we send an internal account ID and account type, never email or name.
- Our emails contain an open pixel and click tracking, so we know which emails are useful.
You can delete or block cookies in your browser settings; signing in does not work without the session cookie.
Services that process data
- Cloudflare — site delivery and protection.
- Google Analytics — visit statistics.
- Amazon SES — sending emails.
- Whop and Patreon — Premium payments.
- Telegram — bot messages, if you connected the bot.
Each service has its own privacy policy. Bookmaker links lead to third-party sites: we only count clicks and do not pass your data to them.
Social networks
We publish our own content to our own accounts on Telegram, Threads, X, Instagram, Pinterest and Reddit, including automatically through the official APIs of these platforms. For this we use access to our own accounts only, and we do not receive or store data of other users of these platforms.
How long we keep data
- Account data — for as long as the account exists.
- An account whose email is not confirmed in time is deleted automatically.
- Visit records — 180 days.
- Server logs — for the limited time needed for security and troubleshooting.
Your rights
You can correct your data in your profile, switch off emails in your settings and delete your account yourself on the Profile page. Deleting the account removes the personal data linked to it; aggregated statistics that do not identify you remain.
To get a copy of your data, correct it, restrict its processing or ask a question, write to [email protected]. We reply within 30 days.
Age
The site is intended for people aged 18 and over. We do not knowingly collect data from minors.
Changes
If we change this policy, the new version will appear on this page with a new update date.