1. Who is responsible
LudeStats is operated by Demetris Demetriou through LudeHQ in Larnaca, Cyprus. For privacy questions or to exercise your rights, email contact@ludehq.com.
2. What LudeStats processes
- Technical request data. The hosting and security infrastructure may process your IP address, request time, requested path, browser or user-agent information, response status, and referrer to deliver and protect the service.
- Browser-only choices. Your display settings, current bet-builder selections, and up to ten saved slips are stored in local storage on your device. LudeStats does not send those saved choices to its server. You can clear them in Settings or through your browser.
- Feature requests. Search terms and a fixture identifier are processed when you search or request an AI bet-builder result. The service does not require your name, email, precise location, or gambling account details for these features.
- Access credentials. If the private application area is protected with HTTP Basic Authentication, the credentials are checked in memory. LudeStats does not place them in its application database.
LudeStats does not create user profiles, accept bets, process payments, or use advertising or behavioural analytics cookies.
3. Why this data is used
Technical data is processed to provide, secure, troubleshoot, and improve the reliability of LudeStats. The legal basis is the legitimate interests in operating a secure, functional informational service under Article 6(1)(f) GDPR. Information may also be retained where necessary to comply with a legal obligation under Article 6(1)(c).
Browser-only storage is necessary for the features you choose. It is not used to recognise you across websites or for advertising.
4. Service providers and external sources
LudeStats uses hosting and infrastructure suppliers to deliver the site. Football fixtures and images are obtained server-side from sources such as ESPN and FotMob, and headlines from BBC Sport, The Guardian, and Sky Sports. Images shown inside LudeStats are requested through the LudeStats server so those sources do not need to receive your browser request merely to display the page. If you follow an external news link, that publisher applies its own privacy terms.
OpenRouter is used to generate some AI-assisted football analysis. The request is built from fixture and sports-statistics context; LudeStats is not designed to include your identity, saved slip, IP address, or contact details in that AI prompt.
Where a supplier processes data outside the European Economic Area, LudeHQ requires an appropriate GDPR transfer mechanism and safeguards before personal data is placed in scope.
5. Retention
- Browser-only choices remain until you clear or reset them.
- LudeStats does not keep search terms in its application database.
- Web access logs are rotated daily and retained for up to 14 days. A specific security incident or legal duty may require relevant evidence to be isolated and kept longer, with the reason documented.
- AI results contain sports data rather than user profiles. Failed job details and operational job logs are automatically removed after 90 days.
6. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Email contact@ludehq.com. LudeHQ may need limited information to verify the request and normally responds within one month.
You may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus.
7. Security and changes
LudeStats uses HTTPS, access controls, restrictive browser security headers, data minimisation, and server-side image fetching. No internet service can guarantee absolute security. Material changes to this notice will be shown here with a new effective date.