Privacy

We collect as little as we can. No advertising, no tracking, and no account needed. This page says exactly what is processed when you use the site, the AI desk and, if you choose to make one, an account: why, for how long, and what you can do about it.

Who is responsible

Pitchside Lab is run by Global Web Innovation Ltd, a company registered in England & Wales, company number 13396743, registered office 203 West Street, Fareham, Hampshire, PO16 0EN, United Kingdom. It is the data controller. Contact: hello@pitchsidelab.com.

When you visit

Like every web server, ours keeps an access log: the address that asked (your IP address), the page, the time and the browser. It is used to find faults and stop abuse, kept for up to 30 days, and shared with no one. Legal basis: our legitimate interest in running a secure site.

Your starred matches, alert choices and other settings are kept in your own browser. They reach us only if you turn on match alerts (below). The full list is on the Cookies and storage page.

When you use the AI desk

The desk is an AI system: answers are written by an AI model, not a person.

• Your question is sent to our server and on to OpenAI, our AI provider, to be checked for abuse and answered. We do not keep the text of questions or answers. OpenAI may keep them for up to 30 days to monitor for abuse, and does not use them to train its models. Please do not put personal or sensitive details in a question.
• A random device label, created in your browser, counts your free questions for the day. It is used for nothing else: no analytics, no advertising, no profile. The daily counts are deleted after 30 days.
• Your IP address is never stored by the desk. A one-way code made from it, which changes every day, stops one connection taking unlimited free questions.
• Abuse: messages are checked automatically. Repeated abusive messages close the desk to that device until the next day. If you think that happened to you wrongly, email us and a person will look at it.

Legal basis: our legitimate interest in answering the question you asked, and in keeping the service fair and safe. The conversation itself is kept only in your browser tab and disappears when you close it.

If you turn on match alerts

When you tap Turn on alerts and allow them, we keep the push address your browser gives us (it comes from your browser’s push service: Google, Apple, Mozilla or Microsoft), its two encryption keys, your alert choices and the numbers of the matches you star. Nothing else: no name, no email, no account. We use them only to send the alerts you chose. Legal basis: your consent, which you give by turning alerts on. They are deleted when you tap Turn off, when you block notifications for this site, or when your browser’s push service tells us the address no longer works.

If you make an account

Accounts are optional: the site and 3 free questions a day need none. This section says what happens when you make one or buy a pass.

• Your email address, to sign you in and to send what the account needs: sign-in links, receipts, a reminder before a pass ends (passes never renew), and notices if your email changes or your account is deleted. Signing in is by a one-time link that works for 15 minutes; there is no password.
• Signing in: links and sessions are stored only as one-way codes, so a copy of our records signs no one in. You stay signed in on that device for a year, renewed each time you visit, until you sign out (or sign out everywhere from your account page). The cookie it uses is on the Cookies and storage page. When you ask for a link you tick that you agree to the Terms of use; we keep the date you last did so with the account.
• Product news by email: off unless you turn it on, and you can turn it off at any time.
• If you buy a pass or a question pack: each order (our reference, Whop’s payment reference, the amount, the dates and any refund), how many of its questions you have used and the AI match analyses you asked for with it (the match, and what each used of the pass’s allowance), the date your pass runs to, and when you confirmed you are 18 or over and asked for it to start at once; and, if you chose to answer, how you found us. Card details go only to Whop; we never see them.
• Your questions are not kept, with or without an account. A pass holder’s daily count is kept with the account, and deleted after 30 days like everyone else’s.
• If you delete your account: your email, sessions, sign-in links and passes are deleted at once. The record of paid orders (our reference, Whop’s reference, the amount and the VAT) is kept without your email for six years, as the rules on accounts require, and for nothing else.

Legal basis: providing the account and the pass you asked for (contract); keeping the record of your 18+ and immediate-start confirmation, which consumer law requires before we can charge for the days used if you cancel within 14 days (legal obligation); telling your old address about a change of email, to protect your account (legitimate interest); product news (your consent, which you can withdraw on the Account page).

How long: while you have an account. When you delete it, your email, settings and sessions are erased at once. Payment records are kept for six years, as UK tax law requires, by Whop and by us; ours no longer carry your email once the account is deleted.

Who we share with

• OpenAI (United States): AI answers and abuse checks, under a data processing agreement with standard contractual clauses and the UK addendum.
• Our hosting provider: stores the site and its logs on our behalf.
• Whop (Whop, Inc., United States; when the pass goes on sale): runs the checkout, takes the payment as merchant of record, keeps your card details, tells us when a payment is made and pays refunds. Whop also uses payment data for its own fraud prevention and legal duties, under Whop’s privacy policy.
• Our email provider (Titan, through Hostinger): sends sign-in links and account emails from our hello@pitchsidelab.com mailbox, and receives the emails you send us.
• Your browser’s push service (Google, Apple, Mozilla or Microsoft, depending on your browser), if you turn on match alerts: delivers each alert to your device. The alert’s content is encrypted for your device.

Where a provider is outside the UK, your data is protected by the UK’s adequacy regulations or the UK-US data bridge where they apply, or otherwise by standard contractual clauses with the UK addendum. We sell nothing and share nothing for advertising.

Players and officials

The site shows public sporting information about professional players, managers and referees: names, line-ups, results and match statistics, supplied by our data provider API-Football. Legal basis: our legitimate interest in reporting and analysing public sport. If this is you and you want something corrected or have an objection, email us.

Your rights

You can ask to see, correct or delete your data, to restrict or object to its use, or to receive a copy. It is free. Email hello@pitchsidelab.com and we answer within one month.

With an account you can also do it yourself on the Account page: download your data, change your email, turn product news on or off, cancel a pass within 14 days, sign out on every device, or delete the account. Without an account, we may need the device label from your browser to find anything about you.

Complaints

Email hello@pitchsidelab.com with the subject “Data protection complaint”. We acknowledge within 30 days and answer without undue delay. You can also complain to the Information Commissioner’s Office at ico.org.uk, or, if you live in the EU, to your national data protection authority.

Age

This site is for people aged 18 or over. We do not knowingly collect data about anyone younger, and delete it if we find any.

Changes

Last updated 17 October 2026. If what we collect changes, this page changes first.