Privacy PolicyEffective Date: August 8, 2026Web + iOS App
This policy explains what data we collect, why we collect it, and how SLBenfica.net and the SL Benfica Net iOS app protect and process your information.
Privacy summary
We collect only the information needed to run accounts, social features, notifications, and security. We do not sell personal information.
Data We Collect
- Account: username, email address, password (stored hashed), and any profile details you add.
- Content you submit: forum posts, comments, match-day chat messages, private messages, predictions, player ratings, polls and votes, and any images you upload.
- Fan map: the city you choose to display. We do not collect device GPS location — browser geolocation is switched off site-wide by our Permissions-Policy header.
- Technical: IP address, browser and device information, and app version. Your IP address is recorded alongside sign-in attempts, votes, ratings and moderation records so we can prevent duplicate voting and abuse.
- Sign-in tokens: if you choose “remember me”, a persistent login token is stored on your device and against your account.
- Notifications: device push tokens and delivery metadata, used to send notifications you have enabled.
How We Use Data
- Operate, secure, and improve platform features.
- Authenticate accounts and prevent abuse or fraud.
- Deliver notifications and essential service communications.
- Comply with legal obligations and enforce platform policies.
Cookies and Similar Storage
- Session cookie: keeps you signed in while you browse. Required for the site to work.
- remember_token: set only if you choose “remember me”, so you stay signed in between visits.
- site_theme: remembers your light/dark preference.
- Offline cache: the site is installable as an app and stores pages and images on your device so it works offline. Clearing site data removes it.
- We do not use advertising or tracking cookies. You can clear or block cookies in your browser, but sign-in will not work without the session cookie.
How Data Is Shared
- We do not sell personal information, and we do not share it for advertising.
- Apple — delivers push notifications to the iOS app. Your device token is sent to Apple to route each notification.
- Giphy — powers GIF search in the feed. When you search for a GIF, the search term and your IP address reach Giphy.
- Content delivery networks (jsDelivr, cdnjs) — serve shared code and fonts. Your IP address is visible to them when your browser loads those files.
- Our hosting and email providers — store the database and send account email such as sign-in and notification messages.
- We may disclose information when legally required or to protect users and platform integrity.
What we do not do
- No advertising, ad networks, or ad tracking.
- No third-party analytics or tracking SDKs — we do not run Google Analytics or similar.
- No sale or rental of personal information.
- No device location tracking. Browser geolocation is disabled site-wide.
- No profiling or automated decision-making that produces legal effects.
Controller Contact
Applies To
SLBenfica.net web services and SL Benfica Net iOS app.
Last Updated
August 8, 2026
App Store and iOS-Specific Privacy
- The SL Benfica Net app is distributed through the Apple App Store and may be subject to Apple platform terms.
- Apple may process certain technical and transaction data under Apple policies when you download or use the app.
- Push notifications are delivered through Apple Push Notification service. We send Apple your device token and the notification content so it can be routed to your device.
Legal Bases for Processing
- Contract: to create accounts, deliver features, and provide support.
- Legitimate interests: to secure services, prevent abuse, and improve reliability.
- Consent: where required for optional communications or device-level permissions.
- Legal obligation: where processing is required by applicable law.
Data Retention
- We retain data only as long as needed for services, legal obligations, dispute resolution, and security.
- Retention periods vary by data type and legal requirements.
| Data Type | Typical Purpose | Retention Approach |
|---|---|---|
| Account details | Authentication and profile management | Kept while account is active, then reviewed for deletion or legal retention needs |
| User content | Community and platform functionality | Stored while content remains published or needed for moderation/audit |
| Sign-in attempts and activity logs | Fraud prevention, rate limiting, and incident response | Retained for limited periods based on operational and legal requirements |
| Push token records | Notification delivery | Removed when the token becomes invalid, you turn notifications off, or you delete the app |
| Sign-in tokens | Keeping you signed in between visits | Removed when you sign out, the token expires, or you delete your account |
Data Security
- We use reasonable technical and organizational safeguards to protect personal data.
- No online system is completely secure, and absolute security cannot be guaranteed.
International Transfers and Safeguards
- Where data is processed outside your jurisdiction, we apply appropriate legal and contractual safeguards when required.
- Infrastructure and service providers are selected with security and compliance requirements in mind.
Your Choices and Rights
- You can update account information and preferences where available.
- You may submit privacy requests through our support contact, subject to applicable law.
- You can manage push permissions in browser or device settings.
Privacy Request Categories
- Access to personal data held about your account.
- Correction of inaccurate or incomplete personal information.
- Deletion requests, subject to legal/security retention requirements.
- Objection or restriction requests where supported by law.
Children's Privacy
Our services are not directed to children under the age required by applicable local law. If we learn that data was collected unlawfully from a child, we will take appropriate action.
International Processing
Your data may be processed in locations where our infrastructure or service providers operate, subject to applicable safeguards.
Security Incidents
If a data security incident occurs, we will investigate, mitigate impact, and provide legally required notifications where applicable.
Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of Portugal. Related disputes are subject to the competent courts of Lisbon, Portugal, unless mandatory law provides otherwise.
Changes to This Policy
- We may revise this policy from time to time.
- Changes are effective when published, unless a later effective date is stated.
Contact
Privacy questions or requests: admin@slbenfica.net.