Privacy Policy

This site is operated by Ștefan-Cristian Tudorache. Under the GDPR that makes us the data controller for the data described below.

For anything in this policy, including a request about your own data, write to privacy@ballileo.com.

Server access logs.Every request to our server is recorded: your IP address, the date and time, the page or endpoint requested, the browser's user-agent string, and the referring page. This is automatic and standard — a web server cannot answer a request without knowing where to send the reply.

Rate-limit counters. To stop one visitor from overloading the prediction engine, we count recent requests per IP address. These counters live in memory only, expire within minutes to hours, and are lost whenever the service restarts.

Usage analytics.Where enabled, we use privacy-preserving, cookieless analytics that stores no IP addresses and cannot identify you or follow you between sites. It tells us things like “this page was viewed 400 times today”, never who viewed it.

Your country, for the language.When you open an address that does not say which language you want (such as the home page), we use the country Cloudflare derives from your IP address to pick the site's language for you. It is used for that one decision, at that moment, and is not stored or logged.

What we do not collect: no accounts, no names, no email addresses, no passwords, no payment details, no location data beyond what an IP address implies, and no advertising or cross-site identifiers.

We rely on legitimate interests (GDPR Article 6(1)(f)): operating the site, keeping it available, detecting and preventing abuse, and understanding in aggregate how it is used so we can improve it.

We have weighed that against your privacy. The data is minimal, it is not used to build a profile of you, it is not combined with anything else, it is never sold, and it is deleted quickly. You can object to this processing at any time — see section 08.

Access logs: at most 30 days, after which they are rotated away and permanently deleted.

Rate-limit counters: minutes to hours, in memory only.

Analytics: retained as aggregate counts, which contain no personal data and cannot be traced back to a visitor.

We use a small number of service providers, all of whom process data on our instructions:

• Hetzner Online GmbH — our server hosting, located in Germany. Your requests reach their infrastructure and appear in the logs described above.
• Cloudflare — content delivery and protection against attacks. Traffic passes through their network before reaching us, so they process IP addresses to filter malicious requests.
• Sentry — error monitoring, where enabled. When something on the site fails, a report of the error is sent so we can fix it. It is configured not to include IP addresses, cookies or request contents, so these reports describe the fault rather than the person who hit it.

Our analytics runs on our own server rather than a third-party service, so usage data is not shared with anyone. We do not use advertising networks, and we never sell or rent your data.

Team badges, player photographs and country flags come from API-Football, but your browser does not fetch them from there. Our server downloads each picture once, makes a smaller copy and sends you that copy. API-Football therefore does not see your IP address or which pictures you looked at.

Everything on the site, including those pictures and our fonts, is served from our own servers, so simply viewing a page does not hand your IP address to any other company.

We set no cookies for analytics, advertising or tracking, and we do not use browser fingerprinting.

If you choose Light or Dark in the theme setting, your browser remembers that choice in its local storage, on your device. It is never sent to us. If you leave the setting on System, nothing is stored and the site follows your device.

If you choose a language, with the language setting or with the suggestion the site may show you, your browser keeps that choice in a small cookie named ballileo_langfor up to a year, so the site opens in your language next time. It holds only the language (“ro” or “en”), it is set only when you make that choice, and you can remove it at any time by clearing this site's cookies in your browser. It is a preference you asked us to remember, which is why it needs no consent banner.

Cloudflare may set a strictly necessary security cookie to tell human visitors from bots. Cookies of that kind are exempt from the consent requirement, which is why this site shows no cookie banner.

If that ever changes — for example if we introduce advertising — we will ask for your consent first, before any such cookie is set.

Under the GDPR you may request access to your personal data, its correction or erasure, a restriction of how we use it, a copy in portable form, and you may object to processing based on legitimate interests.

In practice we hold very little: log entries linked to an IP address for up to 30 days. Because there are no accounts, we cannot look you up by name — so if you make a request, tell us the IP address and the approximate time, or we will have no way to find the records.

Write to privacy@ballileo.com. If you believe we have handled your data improperly you may complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), or to the authority in your own EU country.

This site is not directed at children. Because the subject matter sits close to sports betting, it is intended for people aged 18 or over. We do not knowingly collect data from children.

If we change how we handle data, we will update this page and the “last updated” date at the top. Significant changes will be announced on the site rather than made quietly.

See also our Terms of Use and How it works.