Last updated: August 2026
MatchdayAI (“we”, “us”) is committed to protecting your personal data. This Policy explains what we collect, how we use it, and your rights.
We do not sell, rent, or share your personal data with third parties for marketing.
Your data is stored in a PostgreSQL database on secured servers. Passwords are never stored in plain text — they are hashed using a strong cryptographic function before storage. Session tokens are randomly generated and invalidated on sign-out.
If you choose “Sign in with Google”, Google will share your name, email, and profile picture with us as part of the OAuth 2.0 flow. We do not receive or store your Google password. You can revoke access at any time via Google Account Permissions.
We use a single session cookie (md_session) for authentication. It is httpOnly, secure in production, and expires after 30 days — this cookie is required and not optional.
Where enabled, we also use Google Analytics to understand how the site is used. Google Analytics — and the cookies it sets — only loads if you accept the cookie banner shown on your first visit; declining, or simply not responding, means no analytics cookies are ever set. We do not use advertising cookies or trackers.
We may update this Policy periodically. Significant changes will be communicated via the Platform. Continued use constitutes acceptance.
