Privacy Policy

Who we are

Kora Radar provides football scores, fixtures, standings, statistics and news in Arabic, English and Italian.

Data controller: Kora Radar, operator of koraradar.com

Privacy contact: [email protected]

What we collect, and why

Browsing without an account

Football content is not personal data. We process your IP address transiently to deliver responses and limit abuse. Where an IP is stored with a sign-in session, we mask it first, so it identifies a network range rather than a device.

If you create an account

• Email address — for sign-in and account recovery. Encrypted at rest; sign-in matches on a separate one-way index, never your plaintext email.
• Password — stored only as an Argon2id hash with a server-side pepper. We cannot recover it.
• Display name — shown to you in the app, stored as you enter it.
• Preferred language — so we can serve the app in Arabic, English or Italian.

If you sign in with Google or Facebook

We receive the provider's account identifier and, if you allow it, your email. Provider access tokens are used once to read your identity and then discarded. We never post anything to your social accounts and never read your contacts, posts or friends.

Favourites

The teams, competitions and matches you follow, so we can surface them first. Visible only to you.

Notifications

If you opt in, we store the technical subscription details your browser or device issues so we can deliver alerts. You can revoke this at any time in your app, browser or system settings.

Security logs

We keep bounded-retention logs of sign-in and password-reset events to investigate abuse and protect accounts. These are deleted automatically after 14 days.

What we never collect

• No precise or GPS location
• No payment or financial data — there is no billing in the product
• No health, biometric, religious or other special-category data
• No advertising identifiers or cross-site tracking profiles

Who we share it with

We do not sell or rent personal data. We share it only with the providers that run the service on our instructions, with Google or Facebook if you choose social sign-in, and with legal authorities where we are required to respond.

• Amazon Web Services — application hosting and database
• Cloudflare — CDN, DNS and security filtering
• Our transactional email provider — verification and password-reset emails
• Apple, Google and Web Push — only if you enable notifications

Where your data is stored

We host Kora Radar with established cloud infrastructure providers, and protect your data in transit and at rest wherever it is processed.

How long we keep it

• Account data: for as long as your account exists. If an account stays inactive for 90 days, we may delete or anonymise it.
• On deletion: we anonymise your account, scrubbing your personal fields and freeing your email so it can be registered again.
• Sessions: expire automatically; signing out revokes them.
• Security logs: retained for 14 days, then deleted automatically.

Your rights

You may have the right to access, correct, delete, export, restrict or object to processing of your personal data, and to withdraw consent. In the app you can already view and edit your profile, change your favourites, turn notifications off, and delete your account.

For anything else, contact [email protected]. We respond within 30 days.

How we protect it

• Email addresses encrypted at rest; sign-in resolves through a separate one-way index
• Passwords hashed with Argon2id plus a server-side pepper
• Session tokens stored only as hashes, with automatic revocation if one is replayed
• HTTPS everywhere; databases on private networks with no public endpoints
• Personal data masked in logs

Children

Kora Radar's content is football scores, fixtures, standings and news, and is suitable for a general audience including children. Anyone can read it without an account, so children can use Kora Radar without giving us any personal data at all.

Account creation is intended for users who can validly agree to our terms. Where local law sets a minimum age for consent to data processing, that age applies. We do not knowingly collect personal data from a child below that age.

Mobile apps

The iOS and Android apps read the same public football API as the website. Reading scores, fixtures, standings and news needs no account and no personal data.

The apps request no location, contacts, camera, microphone or photo permissions. Notifications are opt-in through your device's own prompt and revocable in system settings.

Changes

We will update this page and the date above when our practices change, and give prominent notice of material changes.