ScoreTrend.net Privacy Policy

1. Introduction and scope

This privacy policy explains which personal data we process, for what purposes, on what legal basis, for how long, and what rights you have as a user.

It applies to all ScoreTrend services (the "Services"):

• the website www.scoretrend.net;
• the subdomains, including plans.scoretrend.net (subscriptions), scanner.scoretrend.net, asianodds.scoretrend.net, alerts.scoretrend.net and betsolver.scoretrend.net;
• the ScoreTrend mobile app for iOS (Apple App Store) and Android (Google Play);
• the alerts sent via Telegram.

This policy is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR"), Legislative Decree 196/2003 (the "Italian Privacy Code") as amended by Legislative Decree 101/2018, and the rules on cookies (art. 122 of the Italian Privacy Code and the Guidelines of the Italian Data Protection Authority (Garante per la protezione dei dati personali) of 10 June 2021). For cookies, please also refer to the Cookie Policy.

2. Data controller

The data controller is Gianluca Landi, sole proprietorship "Betting Exchange di Gianluca Landi".

• VAT number: 01460210113
• Registered office: Via Aurelia Nord 220, 19021 Arcola (SP), Italy
• Email: [email protected]
• Phone: +39 3476996988

The same controller is listed as the developer ("Gianluca Landi") of the ScoreTrend app on the App Store and Google Play.

No Data Protection Officer (DPO) has been appointed, as the conditions set out in art. 37 GDPR do not apply. For any question about the processing or to exercise your rights, write to [email protected].

3. Data we process

We process only the data necessary for the Services. We do not process special categories of data (art. 9 GDPR) or data relating to criminal convictions (art. 10 GDPR).

3.1 Data provided by the user

• Registration and subscription (on plans.scoretrend.net): first name, last name, username, email address, phone number, billing address and country of residence. Customers resident in Italy also provide their Italian tax code (codice fiscale), which is required to issue the electronic invoice; customers resident outside Italy are not asked for it.
• Telegram ID (for alerts only): the Telegram chat identifier and, for tennis alerts, the Telegram username. The user enters it in their account on the website in order to receive on Telegram alerts about the events they have chosen, for example goals in matches according to the criteria they have set. The history of strategy alerts remains in the account, available to the user for their own analysis, until they delete it; the history of goal and event notifications is deleted after 90 days.
• Content saved in the service: favourite matches, teams and players, alerts, strategies, presets, lists of leagues and tournaments, notification settings.
• Communications: messages sent by email, through contact forms or to customer support.
• Messages to the Trent assistant: see section 3.4.

3.2 Payment data

Payments are made through PayPal and, for cards, through Stripe. Card or PayPal account details are entered by the user directly on these providers' systems. We do not receive or store card numbers, security codes or payment credentials. From the providers we receive only the transaction confirmation, the status and amount of the payment and the method used.

3.3 Data collected automatically

• Login sessions: at each login we store the IP address, device and browser type (user agent) and session identifier, for account security (active sessions, closing sessions, detection of unusual logins).
• Request log: every request to ScoreTrend's servers (website, app and API), including without an account, is logged with the IP address in hashed form (not in clear text), the username if the user is logged in, the function requested with its parameters, and the technical headers of the request.
• Web server logs: IP address, date and time, page requested and browser. IP addresses found to be abusive are kept in a blocklist.
• Data saved without an account: if the user uses the website or the app without an account, favourites, notification settings, the push notification token and a random identifier generated by the browser or the app are saved on our servers.
• Ad clicks: to count clicks we record a reduced, non-reversible fingerprint derived from the IP address and browser.
• Browsing statistics: collected through Google Analytics (only with consent) and Cloudflare Web Analytics (cookieless), as described in section 8.

3.4 Trent assistant

Trent is an automated assistant developed by us, currently suspended and in the process of being reactivated. It answers user messages using exclusively the answers and content prepared internally by ScoreTrend. The text of the messages is saved with a random browser session identifier that is not linked to the account. Please do not enter personal data in the chat.

4. ScoreTrend mobile app for iOS and Android

The app can also be used without an account. Users who log in use the same account as on the website. The app does not ask the user to enter personal data: registration, subscription, billing details and Telegram ID are managed on the website only.

4.1 Data processed by the app

• Login: the app sends the email (or username) and password to our servers to log in. The email, username, name and plan received from the server are stored on the device in the system's secure storage (iOS Keychain / Android Keystore) to maintain the session. The password is not stored on the device. On logout this data is deleted from the device.
• Login sessions and request log: as described in section 3.3.
• Favourites, alerts, strategies, presets and notification settings: saved on our servers, linked to the account or, without an account, to a random identifier generated by the app. On login, favourites saved without an account are transferred to the account.
• Display preferences (theme, language, filters): remain on the device only.
• Updates: on startup the app checks api.scoretrend.net for available updates, sending the platform, app version and identifier of the installed update.
• Team logos: we receive them from an external sports data provider and store them on our servers, and the app loads them from there; your device does not contact the provider.

4.2 Push notifications

If the user allows notifications, the app registers on our servers the device's notification token, the app's random identifier, the platform and the device type, in order to send alerts about favourite matches according to the preferences chosen. Notifications are delivered via Google Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS), which receive the token and the text of the notification. Notifications can be turned off from the app's Notifications screen or from the phone settings. On logout the token is unlinked from the account. The history of goal and event notifications is deleted after 90 days; the history of strategy alerts remains in the account until the user deletes it.

4.3 Biometric unlock

If the user enables fingerprint or face unlock, verification is carried out entirely by the operating system. The app receives only the result (success or failure): no biometric data is read, stored or transmitted.

4.4 Apple and Google

The app is downloaded from Apple's App Store and Google's Google Play. For downloads, store accounts, reviews and data collected by the operating system, Apple and Google act as independent controllers under their own privacy policies (Apple, Google). From App Store Connect and Google Play Console we receive only aggregate statistics (downloads, installs, versions) and, if the user allows it in the phone settings, crash reports without identifying data.

4.5 What the app does not do

The app does not show advertising, does not sell anything (plans are purchased on plans.scoretrend.net), does not use advertising identifiers or cookies, does not access location, contacts, photos, files or microphone, does not use third-party analytics or diagnostics SDKs, and does not track the user across other companies' apps or websites. It is intended for adults only, who confirm this on first launch.

5. Purposes and legal bases

Each processing operation has a specific purpose and a legal basis under art. 6 GDPR.

Our legitimate interest has been balanced against users' rights: the data used is kept to a minimum, the IP address in the request log is stored only as a hash, and nothing is used for advertising or disclosed to third parties.

6. Whether providing data is mandatory, and automated decision-making

Data required for a subscription. First name, last name, email, phone number, billing address and, for Italian residents, Italian tax code (codice fiscale) are necessary to register, issue the invoice and activate the subscription. Without this data it is not possible to subscribe.

Telegram ID. This is required only to receive alerts on Telegram. Without a Telegram ID the alert service cannot be activated; the other Services remain available.

Optional data. Allowing push notifications, consenting to analytics cookies and using the Trent assistant are optional. Declining them does not prevent use of the Services.

Technical data. Login data, the request log and logs are essential for the operation and security of the Services.

No automated decision-making. We do not make decisions based solely on automated processing that produce legal effects concerning the user or similarly significantly affect them (art. 22 GDPR), and we do not carry out profiling. Alerts and notifications depend solely on the criteria set by the user.

7. Emails about our services

We may send customers who have registered emails about new features, updates and offers relating to the ScoreTrend Services and to the controller's similar services (BettingExchange.net and Sport Trading Academy). We use only the name and email address provided at registration, as permitted by art. 130 c.4 of the Italian Privacy Code.

• Every email contains an unsubscribe link; alternatively, simply write to [email protected].
• Objecting is free of charge and does not affect your subscription or service communications (invoices, renewal dates, account security).
• We do not send communications on behalf of third parties and we do not share email addresses with anyone.

8. Cookies, consent, statistics and advertising on the website

Technical cookies necessary for the website to function do not require consent. Google Analytics and Google AdSense run only after the user has given consent. The full list of cookies is in the Cookie Policy.

8.1 Consent management: Clickio

The cookie banner is managed with Clickio Consent, a Google-certified platform registered in IAB Europe's Transparency & Consent Framework, provided by ALZ Software Ltd (t/a Clickio), 128 City Road, London EC1V 2NX, United Kingdom (Clickio privacy policy). Clickio records the user's choices (consent string, date and time, banner version) and communicates them to the website's tools via Google Consent Mode v2.

Consent can be changed or withdrawn at any time via the "Privacy settings" link at the bottom of every page or from the website's Settings page, Privacy tab. The banner is shown again after about 13 months or when the settings change.

8.2 Google Analytics

We use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to count page views and understand how the websites are used.

• Google Analytics tags are configured to fire only after consent to the statistics category (analytics_storage). Without consent, no Analytics cookie is set.
• Google Analytics 4 does not log or store the full IP address.
• We have disabled data sharing with Google for advertising purposes and do not use Google Signals.
• Data is retained for 14 months and then deleted by Google.
• Google's privacy policy: policies.google.com/privacy.

8.3 Cloudflare Web Analytics

We also use Cloudflare Web Analytics, provided by Cloudflare, Inc., for aggregate traffic statistics (page views, referrers, performance). It does not use cookies, does not store data in the browser and does not create visitor profiles, so it does not require consent.

8.4 Internal website statistics

With the consent given through the banner, the website also records its own statistics: pages visited, referring page, visit duration, time zone, screen resolution, browser and a technical device fingerprint, together with the IP address (truncated before storage) and the username if the user is logged in. These are used for internal statistics and security.

8.5 Advertising on the website

The website shows advertising; the app does not (see section 4.5).

Clever Advertising odds banner. The website header displays a banner with bookmaker odds provided by Clever Advertising. To display it, Clever Advertising receives from the browser the IP address, country and region, device type, browser, operating system, date and time, and may use the cookies described in its cookie policy. Clever Advertising states that it cannot identify visitors from this data and that it stores it on servers in the European Economic Area. It processes the data as an independent controller under its own privacy policy. Clever Advertising manages its own cookies directly and is responsible for them under its own privacy policy.

Google AdSense. We may display ads through Google AdSense, provided by Google Ireland Limited, which processes data as an independent controller. When active, AdSense uses cookies and identifiers to serve and measure ads and, only with the user's consent, for personalised ads; without consent it shows non-personalised or limited ads. More information: how Google uses information from sites that use its services. Google ad preferences can also be managed in My Ad Center.

Bookmaker cards. Some pages show cards comparing offers from ADM-licensed (Italian Customs and Monopolies Agency) bookmakers (for example Betfair, Betflag, William Hill). The images are loaded from our servers and send no data to the bookmakers until the user clicks. The link contains only a code identifying ScoreTrend as the referring site, not the user. After clicking, the user is on the bookmaker's website, which processes their data as an independent controller under its own privacy policy, available on the bookmaker's website. To count clicks we use the non-reversible fingerprint described in section 3.3.

9. Recipients of data

We do not sell, rent or disclose personal data to anyone. Data is shared only with the following parties, and only to the extent each of them needs.

Processors (art. 28 GDPR) process data on our behalf and in accordance with our instructions. Independent controllers process data for their own purposes and under their own privacy policies.

Data may also be disclosed to judicial and police authorities, the Italian Revenue Agency (Agenzia delle Entrate) and the Italian Data Protection Authority (Garante per la protezione dei dati personali) where required by law. Only the controller's authorised and instructed personnel have access to the processing (art. 29 GDPR). An up-to-date list of processors can be requested at [email protected].

10. Transfers outside the European Union

Our servers are located in Germany, in the European Union. Some providers may process data outside the EU; in these cases the transfer takes place only with the safeguards set out in Chapter V GDPR:

• USA (Cloudflare, Google, Apple): the European Commission's adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework) for certified providers and, in any case, Standard Contractual Clauses approved by the Commission (art. 46 GDPR).
• United Kingdom (Clickio): adequacy decision of the European Commission.
• Telegram: the transfer takes place at the request of the user, who chooses to receive alerts on Telegram, and is necessary to perform the service requested (art. 49.1.b GDPR). Telegram states that it stores European users' data in data centres in the Netherlands.

A copy of the safeguards adopted can be requested at [email protected].

11. Retention periods

We keep data only for the periods indicated below. When they expire, data is deleted or irreversibly anonymised, unless it is needed to defend a legal claim or for a request from an authority.

A deletion request does not result in immediate deletion from backup copies: the data disappears at the end of the rotation cycle and is not used in the meantime.

12. Security

We implement technical and organisational measures appropriate to the risk (art. 32 GDPR), including:

• encrypted HTTPS connections for the website, app and API;
• passwords stored only in encrypted form using hashing algorithms; in the app, session data is kept in the system's secure storage;
• protection against attacks and abuse through Cloudflare, rate limits and blocklists;
• server access via SSH keys and data access restricted to authorised personnel;
• periodic rotating backups;
• IP addresses stored in hashed form in the request log and truncated in statistics.

In the event of a personal data breach that poses a risk to users, we will notify the Italian Data Protection Authority (Garante per la protezione dei dati personali) within 72 hours and, if the risk is high, inform the users concerned (Articles 33 and 34 GDPR).

13. User rights

At any time, users may exercise free of charge the rights under Articles 15-22 GDPR:

• access to their data and a copy of it (art. 15);
• rectification of inaccurate or incomplete data (art. 16);
• erasure (art. 17), except for data we are required by law to retain;
• restriction of processing (art. 18);
• portability of data in a structured format (art. 20): a copy of the profile can be downloaded from plans.scoretrend.net using "Export CSV profile" or "Export XLS profile";
• objection to processing based on legitimate interest and, at any time and without giving reasons, to emails about our services (art. 21);
• withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal (art. 7.3): for cookies via the "Privacy settings" link, for notifications from the phone or browser settings.

How to exercise them. Write to [email protected] from the email address linked to your account. We will reply within one month, which may be extended by two further months in complex cases (art. 12 GDPR). We may ask you to verify that the account is yours, but we will not ask for an identity document unless strictly necessary.

Complaints. If you believe that the processing infringes the GDPR, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Roma, or with the supervisory authority of the country where you live or work (art. 77 GDPR), or bring proceedings before the courts (art. 79 GDPR).

14. Account deletion

There is a single account for the website and the app, and it can be deleted in two ways, described on the page scoretrend.net/delete-account:

1. Yourself, from the account area: log in to your account and use the deletion function.
2. By email: write to [email protected] from the address linked to your account with the subject "Account deletion request".

From the app, the same page can be reached with the "Delete account" button in the account menu.

• The account and associated data are deleted within 30 days, with confirmation by email.
• Only invoices and the data they contain are retained, for 10 years as required by law, together with aggregate statistics that do not identify the user.
• Before deleting your account, we recommend cancelling any subscription on plans.scoretrend.net and downloading a copy of your data.
• Uninstalling the app does not delete the account.

15. Minors and changes to this policy

Minors. The Services, website and app, are reserved for adults (at least 18 years old). We do not knowingly collect data from minors. If you believe a minor has provided us with data, write to [email protected] and we will delete it.

Changes. We may update this policy to reflect changes to the Services or to the law. The date of the last update is shown at the bottom of the page. In the event of material changes, we will notify registered users by email or with a notice on the website and in the app before they take effect.

In case of discrepancies between language versions, the Italian version prevails.

Last updated: 10 October 2026