Privacy Policy

The data controller is the publisher of SportNestra (a private individual), reachable at support@sportnestra.com. Information about the site's publisher and host is given in the Legal Notice.

To play you can create an account with an e-mail address and a password, or continue with Google or Facebook. Data processed: e-mail address, a display name you choose, password (kept only as an irreversible hash), your picks and their results, the date you accepted the rules, and a session cookie strictly necessary for logging in (30 days). If you use Google or Facebook we only receive your identifier, your name and your confirmed e-mail address.

Purposes: managing your account, recording and correcting your cards, computing results and the ranking (which only shows the name you chose), sending you the account confirmation message, the password reset and, if you agree, the result of your cards. Legal basis: performance of the service you asked for; consent for result e-mails (can be changed at any time in “My account”). No advertising e-mail is sent.

Retention and rights: you can delete your account at any time from the “My account” page: the e-mail address, password and name are erased, your picks stay in the statistics without any identity. An inactive account may be deleted after 24 months. You have rights of access, rectification, erasure and objection (contact: see above). Service e-mails are sent by a sending provider acting on our behalf.

Reading the site requires no account: a free account is only needed to play the “Prediction card” game (see the “Player account” section). Depending on how you use the site, the following processing may take place:

• Server technical logs (IP address, pages requested, browser type): operation and security of the site, handled by the host. Legal basis: legitimate interest.

• View counter per article: an aggregated statistic not linked to an identifiable person.

• Country inferred from your IP address: to show relevant sports scores. The IP address is sent to a third-party geolocation service (ip-api.com) and is not kept by SportNestra for this purpose. Legal basis: legitimate interest.

• Comments: if you post a comment, your pseudonym, your message, the date and your IP address (abuse prevention) are recorded. Legal basis: your voluntary action for the content, legitimate interest for the IP address.

• Content reports and correction requests: your email address and message are used to handle your request. Legal basis: legitimate interest and legal obligations.

• Goal alerts (optional): if you enable them, a technical push-subscription identifier from your browser, your language and your preferences are stored. Legal basis: your consent, which you can withdraw by turning the alerts off or from your browser settings.

• Browser local storage: your preferences (alerts, dismissing a banner) stay on your device and only serve the operation of the site.

• Audience measurement: SportNestra uses Google Analytics to measure traffic (page views, country, device type). Google Analytics uses cookies or similar technologies. Legal basis: your consent where the law requires it.

• Advertising and Meta measurement (Facebook Pixel): SportNestra uses the Meta Pixel to measure the effectiveness of its Facebook and Instagram ads and to reach people interested in the site. The pixel may set cookies and send Meta information about your visit (pages viewed, device). In the European Economic Area, the United Kingdom and Switzerland it stays switched off until you give your consent; elsewhere it is active. Legal basis: your consent where the law requires it.

• Internal reading statistics: each time an article is read, SportNestra records, anonymously, the visitor’s country and device type (mobile, tablet, computer). The country is derived from the IP address, which is not kept; no cookie or identifier is used for this. Legal basis: legitimate interest (measuring traffic). This uses the GeoLite2 database by MaxMind (www.maxmind.com).

• League order based on your interests: on the Predictions page, the league of your country comes first. The country is worked out from your IP address on our own servers (GeoLite2 database, no third-party service); the address is not kept. If you often read a league, a first-party technical cookie (sn_interest, counters of leagues read, 180 days) can move it up. This cookie is set only if you allow it through the consent platform (EEA, United Kingdom, Switzerland) or, elsewhere, if your country is identified; you can delete it at any time in your browser settings. Legal basis: your consent where the law requires it, otherwise legitimate interest.

• Advertising: see the next section.

SportNestra uses Google AdSense to display ads. Google and its advertising partners may use cookies and similar technologies to serve ads, measure their performance and, depending on your choices and applicable law, personalise them based on your browsing.

You can manage Google ad personalisation at adssettings.google.com. To learn how Google uses data, see policies.google.com/privacy and policies.google.com/technologies/partner-sites.

For visitors located in the European Economic Area, the United Kingdom and Switzerland, consent to cookies and ad personalisation is collected through a consent management platform (CMP) certified by Google / IAB TCF, provided via Google Privacy & messaging. When the consent message is displayed, you can accept, refuse or change your choices, and change them again at any time from the privacy settings offered by that message when available.

Refusing consent does not prevent you from using the site; non-personalised ads may then be shown.

SportNestra does not sell or rent your data. The following may access it strictly within the scope of their service: the host (OVH SAS, France), Google (AdSense, Google Analytics), the IP-address geolocation service mentioned above and, for images or sports data hosted by third parties, the servers of those third parties that your browser contacts.

Some providers (notably Google and the geolocation service) may process data outside the European Union. These transfers rely, as applicable, on an adequacy decision, standard contractual clauses or another mechanism provided for by the GDPR.

Data is kept for as long as needed for its purpose: view counters while the article is online; comments while they remain published, unless deletion is requested; contact requests and reports for the time needed to handle them and then for a limited period; alert subscriptions until they are turned off. Google cookie lifetimes are set by Google.

Reasonable technical measures protect the data processed (restricted administration access, encrypted HTTPS connection). As no system is infallible, absolute security cannot be guaranteed.

You have the right of access, rectification, erasure, objection, restriction of processing and, where applicable, portability; you can also withdraw your consent at any time. To exercise them, write to support@sportnestra.com (subject "Personal data"): we normally reply within one month of receiving the request, extendable in the cases provided for by the GDPR.

You have the right to lodge a complaint with the competent data protection authority: in France, the CNIL (cnil.fr); otherwise, the authority of your country of residence.