Privacy policy

Last updated: 6 November 2026

This policy covers this website and the Matchday Ticket Overview browser extension. Both are built to handle as little data as possible.

1. Controller

Nico Tillmann
Im Wiesengrund 24
48356 Nordwalde
Germany
Email: niisgo@icloud.com

2. This website

Hosting and delivery

The website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary data: IP address, date and time, page requested, amount of data transferred, referrer, and browser and operating system details.

Purpose and legal basis: The data is processed to deliver the site and protect it from attacks. The legal basis is Art. 6(1)(f) GDPR, the legitimate interest being secure and stable operation.

Recipients: Cloudflare acts as a processor (Art. 28 GDPR).

Transfers to the USA: Processing in the USA is possible. Cloudflare relies on the EU-US Data Privacy Framework (European Commission adequacy decision, Art. 45 GDPR) and additionally on EU Standard Contractual Clauses (Art. 46 GDPR).

Retention: Data is kept only as long as needed for operation and security. Details are in Cloudflare's privacy policy.

Cookies and browser storage

This website sets no cookies of its own and stores nothing in your browser. There are no analytics, no ads and no embedded third-party content. Fonts and images are served from its own server. If Cloudflare sets a technically necessary security cookie in an individual case to fend off attacks, this is based on § 25(2) no. 2 TDDDG. No consent is required, so there is no cookie banner.

Club search

The search runs entirely in your browser. Your search term is not sent to the server as long as JavaScript is enabled.

Links to the stores

The buttons lead to the Chrome Web Store (Google) and Firefox Add-ons (Mozilla). Their privacy policies apply only once you click.

Contact by email

If you write to me, I process your details to reply (Art. 6(1)(f) GDPR, or (b) where a contract is concerned). The message is deleted once it has been dealt with and no retention duty applies.

3. The browser extension

The extension does not collect, store or transmit any personal data. It reads, locally in your browser only, data that the ticket page already loads or shows:

• the number of available seats and standing places,
• the club crests,
• the match date and time.

This information is only shown in an overlay on the same page. In some shops the extension remembers crest addresses and the match date in the shop's session storage (sessionStorage), which is cleared when the tab is closed. The overlay language follows your browser's language setting.

• No transmission: No data is sent to the developer or to third parties. The extension runs no servers of its own.
• No tracking: No analytics, no cookies, no ads.
• No remote code: All code is included in the extension package.

Permissions

The extension requests access to all websites because it supports hundreds of club shops on their own domains, and every new domain would otherwise disable it for all users until they re-accept. It only becomes active on the domains bundled in the package. On every other site the script only checks the address and stops immediately. The extension makes no requests of its own.

4. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You may also complain to a data protection authority (Art. 77 GDPR). There is no automated decision-making or profiling. You are not obliged to provide data, but the site cannot be delivered without technical connection data.

5. Changes

This policy is updated when the website, the extension or the law changes. The date above shows the latest version.