Ofsayd Privacy Policy

1. Who is responsible

The Ofsayd app is developed by the Ofsayd team, who also processes the data. Questions and requests: the “Feedback” section in the app or the request form on our website.

Ofsayd and SportX (sportxuz.com) are two apps with the same owner. They share one server and one account database: an account created in Ofsayd also signs in to SportX, and an account deleted in Ofsayd is deleted in SportX too.

2. What we collect

• Sign-in (optional). The app works without signing in; Derbi needs an account. With Google: your name, email, profile photo and Google account ID. With Telegram: your Telegram ID, name and profile photo. We never see your password.
• Profile: the name and photo you choose, language, favourite teams and fighters, notification settings.
• Device: a device ID (a one-way hash of ANDROID_ID), phone model, Android version, app version, language, app install time and a notification token (Firebase Cloud Messaging).
• Usage statistics: when and for how long the app is open and which sections are viewed — to improve the app.
• Derbi: club and league names (you write them and other players see them), your squad, duel results and points, reports you send and clubs you block.
• Feedback: the text you write and, if you choose, an email or phone number for our reply.
• Search queries — to improve search, not linked to your account.
• Crash reports: when the app crashes or freezes — device model, Android version and where the error happened (Sentry). They do not contain your name or email.
• Server logs: IP address, time and address of the request — for security and troubleshooting.

We do not collect: location, contacts, your files and photos (except a profile photo you pick), SMS, microphone, advertising ID or payment data.

3. Why we use it

• to sign you in and protect your account;
• to save favourites and settings and sync them between devices;
• to send match and news notifications — only if you turn them on;
• to run the Derbi game: duels, leagues, tables;
• to detect abuse and moderate content;
• to fix bugs and improve the app;
• to answer your feedback.

We do not sell your data or use it for advertising. The app has no ads.

4. Who we share it with

Data is processed on our behalf only by companies that help run the service:

• Google — Google sign-in and notification delivery (Firebase Cloud Messaging);
• Telegram — Telegram sign-in;
• Sentry — crash reports;
• Cloudflare — protects and speeds up website and app requests (your IP address passes through it);
• our server hosting provider — database and files.

Your Derbi club and league names, crest and results are visible to other Derbi players. We may disclose data when required by law (a court or competent authority request).

5. Derbi and moderation

Club and league names pass an automatic filter and are checked by a moderator. Reports are reviewed within 24 hours. A name that breaks the rules is hidden or replaced. Rules: terms of use.

6. How long we keep it

• Account data — until you delete the account.
• Deleted account — name, photo, email and phone are erased immediately; the remaining records are fully deleted after 30 days.
• Device data and statistics without sign-in — linked to the device ID, not to your name.
• Security log (staff actions) — 90 days.
• Server logs and backups — up to 30 days.
• Crash reports (Sentry) — up to 90 days.

7. Deleting your account

In the app: Profile → “Delete account” at the bottom. Without the app: account deletion page.

Immediately: you can no longer sign in, all sessions are closed, and your name, photo, email and phone are erased. After 30 days the remaining records are deleted for good. It cannot be undone: signing in again with the same Google or Telegram account creates a new, empty account.

What stays: past Derbi duel results and points — shown as “Deleted club”, without your identity (so your opponents’ tables stay correct).

The account is shared with SportX, so your SportX account is deleted too.

8. Security

All data between the app, the website and the server is sent encrypted (HTTPS). The sign-in token is kept in the app’s private storage on your phone.

9. Children

Ofsayd is meant for users aged 18 and over. We do not knowingly collect data from children; if we learn of such an account, we delete it.

10. Your rights

To get a copy of your data, correct it or delete it, write to the “Feedback” section in the app or the request form on our website. You can turn notifications off in the app settings at any time.

11. Changes

If this policy changes, we will publish it on this page with a new date.