Privacy policy

Sebastian Miething

Hackstr. 22

70190 Stuttgart

Germany

Email: sebastian@miething.dev

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, Vercel processes technically necessary data (IP address, time, requested address, browser identifier) in server logs to deliver the site and protect it from abuse — our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Vercel is certified under the EU-US Data Privacy Framework; a data processing agreement with standard contractual clauses is in place.

To protect the search from overload we briefly count requests per IP address in memory; nothing is stored.

For a search your browser sends the chosen team and place (coordinates) to our server. You either pick the place in the “Where?” field or — only after you click and allow it in your browser — use your device's location.

Our server queries the Google Places API (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) with those coordinates or your input in the “Where?” field. Your IP address is not passed to Google; the request comes from our server. Legal basis: carrying out the search you asked for (Art. 6(1)(b) and (f) GDPR).

Our server reads the websites of the bars found itself (user agent “MatchspotBot”, see matchspot.app/bot). The bars' public texts and Google reviews are sent to Anthropic PBC (USA) for the assessment; no data about you is included.

The map view uses Google Maps (Google Ireland Limited / Google LLC, USA). It only loads after you click “Load map”; your browser then sends your IP address, among other things, to Google. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Google is certified under the EU-US Data Privacy Framework. Your choice is stored locally in your browser; withdraw it by clearing the site data for matchspot.app. More: policies.google.com/privacy.

If you answer this question we store the answer with the bar, the team or game and a checksum (hash) of IP address and browser identifier. The IP address can't be recovered from it; it only stops one device voting several times. Answers count towards the bars' ratings for 180 days — our legitimate interest in reliable results (Art. 6(1)(f) GDPR).

Storage is with Supabase Inc. in a data centre in Frankfurt am Main (processor). Our assessments of the bars are stored there too — with no link to you.

To understand how Matchspot is used we count ourselves — no cookies, nothing stored on your device, no third party. We record the page viewed, referring site (domain only), country, device type (phone, tablet, computer) and language, plus a few actions: the team searched with the city (never an address or coordinates; “GPS” for location searches), number of bars found, clicks on directions, call and website with list position and percentage, filters, the map, “Is the game on here?” and the beer link.

To count visitors we form a checksum (hash) from IP address, browser identifier and a secret that changes daily. The IP address itself isn't stored, and because the secret changes every day nobody can be followed across days. Data is stored with Supabase in Frankfurt am Main. Legal basis: our legitimate interest in improving the service (Art. 6(1)(f) GDPR).

We don't set cookies. In your browser's local storage we only keep what the site needs for you: light or dark, which questions you've answered, whether you hid the beer note and whether you agreed to the Google map. This is necessary for the features you use (§ 25(2) no. 2 TDDDG). You can delete it in your browser at any time.

Links to Google Maps (directions), bars' websites and social pages and Buy Me a Coffee lead to other providers; their privacy policies apply once you click.

Fixtures come server-side from OpenLigaDB and TheSportsDB, bar listings for city pages from OpenStreetMap. No data about you is sent.

You have the right of access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR), and can withdraw consent at any time. Write to sebastian@miething.dev.

You can also complain to a data protection authority, e.g. the Baden-Württemberg Commissioner for Data Protection and Freedom of Information.

October 2026