Privacy

The short version

Two things, and only two. Your email address, if you type it into a form. And a count of which pages get read, which contains nothing that identifies you and which you can switch off in one click. There are no cookies at all, no advertising trackers, and no third-party analytics scripts.

Email, if you subscribe

We store your email address, the page or form you subscribed from, and the date. The source is recorded so we can tell which content is worth writing more of.

Analytics, and why there is no cookie banner

We count which pages get read so we know what to write next. There is no cookie banner because there are no cookies, and because nothing collected identifies you. You can switch the counting off in one click using Do not count my visit at the bottom of any page, and if your browser sends a Global Privacy Control or Do Not Track signal we obey it automatically without you doing anything.

Each record contains:

• the page you viewed, and how long the tab was actually in front of you
• which links you clicked, where those leave the site or are a call to action
• the website that referred you, as a domain name only
• your country, and whether you are on mobile, tablet or desktop
• a random session identifier, described below

Just as importantly, here is what is not recorded: no cookies of any kind, no IP address, no browser fingerprint, no full user-agent string, no name, and no identifier that survives your visit or follows you to another website.

The session identifier is a random number generated in your browser and held in session storage, which your browser erases when you close the tab. It exists so we can tell that three page views were one visit rather than three people. It cannot be used to recognise you if you come back, and it is never linked to your email address even if you subscribe.

Because no cookies are used, no device storage is read for tracking purposes, and no personal data is collected, the lawful basis is our legitimate interest in understanding which articles are worth writing. You can object at any time with the opt-out above. Analytics records are kept for 14 months and then deleted.

Server logs

Our host processes standard server logs (IP address, user agent, requested URL) for security and abuse prevention, on the basis of legitimate interest. Those logs are not combined with your email address or with the analytics described above.

Why, and on what basis

Your email is used to send the newsletter you asked for, and nothing else. The lawful basis is your consent, which you can withdraw at any time. We do not sell, rent or share the list.

Where it is stored

Subscriber records are held in Supabase (PostgreSQL). The site is hosted by Netlify. Both may process data outside your country; both operate under standard contractual clauses for transfers out of the EEA and UK.

How long

Until you unsubscribe, plus a short period to honour the unsubscribe. Every email carries a one-click unsubscribe link.

Your rights

You can ask for a copy of what we hold about you, have it corrected, or have it deleted outright. Write to the address below and we will action it. If you are in the EEA or UK you also have the right to complain to your data protection authority.

Who runs this site

Total Football is operated by NAURRA AI LTD, a company registered in Cyprus, number HE 493756, at 10 Kyriakou Matsi, LILIANA COURT, 4th Floor, Nicosia 1082, Cyprus. NAURRA AI LTD is the data controller for everything described above.

Contact

For anything on this page, including access and deletion requests, email athanasios@naurra.ai.