SportsFoundry pilot privacy notice
This notice explains how personal information is used when you visit SportsFoundry, create or use a pilot account, create API clients or keys, use the API, or take part in pilot feedback.
Who is responsible for your information?
SportsFoundry is operated by Matters Digital Ltd (company number SC874434), which is the controller for the personal information described in this notice.
Privacy questions and rights requests can be sent by post to: Matters Digital Ltd, 49 Harlequin Court, Hamilton, Scotland, ML3 8SW.
What information we use
- Identity and account information: your identity-provider subject identifier, email address and any display name made available through sign-in.
- Workspace information: organisation/workspace names, memberships and account state.
- API access information: API-client names, scopes, credential identifiers/prefixes, creation/revocation/expiry state and audit events. API secrets are shown once and are not retained in plaintext.
- Usage and security information: request timestamps, request/correlation identifiers, API route/use, quota/rate-limit state, IP/network information used for abuse controls, authentication/security events and operational diagnostics.
- Pilot/support information: feedback, support requests and other information you choose to provide during the developer pilot.
- Browser/session information: necessary authentication/session state and local browser storage used to keep the signed-in developer experience working.
- Optional product-analytics information: if you choose “Allow analytics”, a random browser-session identifier, coarse source category (for example direct, Google, Bing, other search or referral), parameter-free SportsFoundry landing/page paths and bounded funnel events such as opening a contextual example or console. We do not store the full referring URL, page query string, API keys or advertising identifiers for this purpose. After sign-in, the random analytics session may be linked to your SportsFoundry workspace so we can measure whether a discovery visit leads to API-key creation and useful API use.
Please do not put unnecessary personal or sensitive information in workspace names, API-client names or other free-text fields.
Why we use it and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Provide the pilot account, workspaces, API clients, API access, usage information and requested service | Contract / steps taken at your request before entering the pilot arrangement |
| Authenticate users, prevent abuse, protect credentials, investigate incidents, enforce limits and keep reliable audit evidence | Our legitimate interests in operating and securing SportsFoundry and protecting users and the service |
| Measure service reliability, diagnose faults and improve the pilot/product | Our legitimate interests in maintaining and improving the service, using proportionate operational data |
| Measure the optional discovery-to-API acquisition funnel using the browser analytics described above | Your consent. You can refuse without losing access to SportsFoundry. |
| Respond to support, privacy or pilot-feedback requests | Contract where needed to provide the service; otherwise our legitimate interests in supporting and improving the pilot |
| Meet legal, regulatory or lawful authority requirements | Legal obligation, where applicable |
We do not currently rely on consent for ordinary pilot account/API processing. If we later introduce optional marketing or non-essential tracking that requires consent, we will ask separately and make withdrawal straightforward.
Who we share information with
We use service providers that help operate SportsFoundry, including categories such as identity/authentication, cloud hosting/database infrastructure and operational service providers. They process information for the purposes needed to provide and secure the service.
We may also disclose information to professional advisers, regulators, courts or law-enforcement/public authorities where reasonably necessary or legally required.
We do not sell pilot-account personal information to advertisers.
Live Stripe payment processing is not enabled for the developer pilot. Before collecting payment information for live billing, we will update the relevant privacy/commercial information.
International transfers
Some service providers may process information outside the UK. Where UK data-protection law requires transfer safeguards, we use an applicable lawful transfer mechanism, such as an adequacy regulation or appropriate contractual safeguards. We will keep this position under review as pilot service providers change.
How long we keep information
We keep account/workspace and API-access records while needed to provide the pilot and for a limited period afterwards where necessary for security, audit, dispute resolution or legal obligations. Operational/security logs and request-level telemetry are kept only for as long as reasonably needed for security, reliability, troubleshooting and abuse investigation. Optional acquisition analytics are retained only for as long as reasonably needed to evaluate and improve the developer-acquisition journey and are not used for behavioural advertising.
Credential secrets are not retained in plaintext after issue. Revocation/audit metadata may be kept longer than the usable credential so that security and account history remain explainable.
Where a fixed retention period is not appropriate, we use these criteria: whether the account remains active, whether the record is still needed to operate or secure the service, whether a dispute/security investigation is open, and whether law requires further retention.
Your rights
Depending on the circumstances and lawful basis, you may have rights to access, correct, erase, restrict or port your personal information, and to object to certain processing.
You can exercise privacy rights by contacting Matters Digital Ltd at the address above. We may need enough information to verify your identity before acting on a request.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data-protection regulator. See ico.org.uk/make-a-complaint/ for current complaint routes.
Automated controls
SportsFoundry uses automated technical controls such as authentication, rate limiting, quota checks and abuse safeguards. These may allow, throttle or reject API requests. We do not use the current pilot account data for solely automated decisions that produce legal or similarly significant effects on an individual.
Cookies and browser storage
The current pilot uses necessary authentication/session mechanisms and browser session/local storage needed for sign-in and the developer experience. Optional first-party product analytics are off unless you choose Allow analytics. If you allow them, SportsFoundry stores the analytics choice in local browser storage and a random acquisition-session identifier plus coarse source/landing information in session storage. Choosing No thanks prevents those acquisition events from being sent. We do not currently operate behavioural advertising or third-party advertising tracking on the SportsFoundry pilot surface.
You have not made an optional product-analytics choice in this browser.
Changes to this notice
We will review this notice as SportsFoundry changes. If a new use of personal information is materially different, we will update the notice and bring the change to affected users' attention before starting that processing where required.