Privacy policy

Who we are

Wiz27 Sports is operated by Wisam Sholy (OBT Agency). For anything about this policy or your data, write to develop@obuzt.com.

What stays on your device

Your choices are saved on your own device and, unless you sign in to an account (below), are not sent to us: the clubs you follow, the competitions you pin, your matches filter, light or dark theme, odds and notification settings, and your language.

If you add your Fantasy Premier League team number, it is kept on your device too. The number is public: FPL publishes every team under it. We never ask for, and never receive, your FPL email or password.

On the website these choices are kept in your browser's local storage, and the language in a cookie named wiz27_lang. Clearing your browser data, or deleting the app, removes them.

If you create an account

An account is optional. It exists so that your clubs, leagues, fantasy team and settings follow you to every device and to the website.

It stores: your email address; your password, only as a salted one-way hash (scrypt), never the password itself; your name; and, only if you choose to give them, your date of birth, country and mobile number. It also stores a copy of the settings listed above (followed clubs, pinned competitions, followed matches, matches filter, collapsed groups, notification, odds and theme settings, language and your FPL team number), so they can be synced.

When you sign in, your device keeps a random session key; our server keeps only a hash of it. Signing out removes the key from your device and ends the session on the server.

We use this data only to run your account and sync your settings. We never sell it and never share it for advertising.

You can delete your account at any time, in the app or on the website (You → Account → Delete account). Deleting it removes your profile, your synced settings and your sessions from our server at once; the settings on your device stay until you clear them.

What our server receives

To show your fantasy team, the team number is sent to our server, which reads that team's public data from FPL and returns it. We do not store it.

Your timezone is sent with the matches list so that "today" means your today; it is not stored.

Like any website, our server sees your IP address with each request. It is used only in memory, to stop one device from overloading the service, and is not written to our database. Our hosting provider keeps routine request logs for a short time.

Notifications

If you turn notifications on, we store what is needed to send them: the push address your browser or phone gives us (on phones, an Apple or Google push token through Expo), the clubs and matches you asked to hear about, your language, and which kinds of event you want. Nothing in it identifies you by name.

To avoid telling you about the same goal twice, we keep a record of which notifications were sent for three days.

Turning notifications off in the app or on the website deletes your subscription from our server. If Apple, Google or your browser tells us the subscription is no longer valid, we delete it too.

On phones, notifications are delivered by Expo (expo.dev) and by Apple Push Notification service or Google Firebase Cloud Messaging, under their own privacy policies.

Other services the app talks to

Match data comes from API-Football and fantasy data from Fantasy Premier League; our server fetches it and none of your data is sent to them. Club crests, player photos and competition logos are loaded by your device directly from API-Football's image servers, which therefore see your IP address, as any image host does.

News headlines link to their publishers (such as the BBC and The Guardian). Opening one takes you to their site, under their policy.

We do not use analytics or tracking tools, and we do not sell or share personal data.

Advertising

The website has places for advertising that are currently switched off. If we switch on Google AdSense, Google may use cookies to show and measure ads; visitors in the EU and UK will be asked for consent first, and this policy will be updated before ads appear.

Betting odds

Odds shown on match pages are information from a bookmaker, for adults (18+). You can hide them in the app's and website's settings. We do not take bets.

Children

Wiz27 Sports is not directed at children under 13, and we do not knowingly collect data from them.

Your rights

Most of your data never leaves your device, and you can delete it there at any time. If you have an account, you can correct your profile on the profile page and delete the account there whenever you like. For the notification subscription on our server, turning notifications off deletes it; you can also email us to have it deleted or to ask what we hold. If you are in the EU or UK you may also complain to your data protection authority.

Changes

If this policy changes, the date at the top changes with it. Material changes will be announced in the app.