Privacy Policy

Last updated: Dec. 22, 2025

Contact: support@matchesio.com
Privacy: info@matchesio.com
Last updated: Dec. 22, 2025

This Privacy Policy explains how the owner of the website Matchesio (“we”, “us”) processes personal data when you use the website and related features (the “Service”).

1) Data Controller

Controller: Website owner (individual)
Country of establishment: Italy
Contact email: info@matchesio.com

2) Data we process

  • Usage and security data: page path, timestamps, referrer, user-agent, and country derived from GeoIP (IP is used transiently for country resolution and is not stored in analytics identifiers).
  • Subscription tokens: calendar/feed tokens used in ICS URLs and cookies to deliver your feeds and manage subscriptions.
  • Feed operational logs: requests to tokenized ICS URLs may appear in server/admin logs for reliability and abuse prevention.
  • Consent and preferences: consent status and preference keys stored in cookies and localStorage (see the Cookie Policy).
  • Communications: name/email/message content if you contact us.

3) Purposes and legal bases

  • Provide the Service (contract performance or legitimate interests, depending on context).
  • Remember preferences and functional tokens (legitimate interests).
  • Security, abuse prevention, and diagnostics (legitimate interests).
  • Analytics (GA4) (consent).
  • Internal usage/activity tracking as part of the Analytics category (consent).
  • Advertising category consent state management (consent).
  • Legal compliance (legal obligation where applicable).

4) Analytics, Advertising, and consent

Our runtime consent model uses three categories: Necessary, Analytics, and Advertising. Necessary is always active. In regulated regions (EEA, UK, and Switzerland), and when region detection is uncertain, Analytics and Advertising require explicit opt-in and are not auto-consented. In non-regulated regions, the site may apply an initial automatic consent state for Analytics and Advertising. You can manage or withdraw consent at any time via Cookie settings in the footer.

We use Google Analytics 4 (GA4) only when analytics consent is granted. Internal activity tracking is governed by the Analytics category. The Advertising category currently stores consent state for controlled future use; this repository step does not activate dedicated advertising scripts. We do not sell personal data.

5) Sharing and processors

We use infrastructure and hosting providers to run the Service. If you opt in to analytics, Google Analytics (Google Ireland Limited and/or Google LLC) processes analytics data as our processor.

6) International transfers

Some providers (e.g., Google) may process data outside your country. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and applicable frameworks.

7) Retention

  • Access logs: typically up to 180 days (configurable) for security and troubleshooting.
  • Internal activity logs: typically up to 180 days (configurable), and only collected with consent.
  • Consent records: stored in localStorage and cookies until you clear them or they expire (default consent cookie lifetime: 180 days, configurable). Analytics and Advertising have dedicated consent keys; a legacy activity consent key may still be present for compatibility.
  • Subscription tokens: kept for as long as subscriptions are active and for operational reasons (e.g., token rotation and retired feeds).
  • Analytics data: retained according to GA4 settings (typically up to 14 months, configurable in GA4).

8) Your rights

Depending on your jurisdiction, you may have rights of access, rectification, deletion, restriction, portability, and objection, and the right to withdraw consent where applicable.

EU users may also lodge a complaint with a supervisory authority. You can withdraw consent anytime via Cookie settings.

To exercise your rights, contact: info@matchesio.com

9) Changes

We may update this policy. The “Last updated” date indicates the latest revision.