Pelusa privacy policy

What data the Pelusa portal processes, why, where and for how long. With the proper name of each thing, taken from what the code actually does.

Who processes your data

Pelusa is a portal by Germán Ezequiel Laso Andino, trading under the name ProfBlu. He is the controller of whatever this portal may process about you.

Owner: Germán Ezequiel Laso Andino, libero professionista.
Partita IVA: 04702090988. Codice fiscale: LSNGMN88S04Z600M.
Professional activity not registered in the Registro delle Imprese (no REA number).
Contact address: Via della Sega 1, 38080 Verdesina, Porte di Rendena (TN), Italy.
Email for anything about your data: privacidad@profblu.com.

No data protection officer has been appointed: the law does not require one for an activity of this size. Write to the contact address and the person responsible answers.

What Pelusa is, and what you need to read it

Pelusa is a public football archive: live and past matches, a calendar, competitions, standings and records, the pages of teams, players, coaches, referees and stadiums, "Today in history", a comparison tool, a search box and a forecast that estimates how matches may end.

You need no account to read Pelusa and we ask you for no data. Today the portal does not offer signing in: the entry is built for the platform's central account, but it is switched off on purpose, and there is no form asking you for anything.

If you only visit the portal

Almost nothing happens, and it is worth saying so precisely.

The portal sets no cookies, carries no advertising pixels and, when a page opens, asks nothing from third-party servers: the code, the fonts, the icons and the data come from the same origin as the page.
Today we do not count visits. There is no measurement program on the portal, neither ours nor anyone else's. The platform rule is that, when visits are measured, they are measured with our own program on our own server and without cookies; if Pelusa starts measuring, this text will say so, with the date.
The web server logs the requests it receives —IP address, date and time, resource requested and browser—, like any server. They are used to operate the service and detect abuse, and are not cross-referenced with anything. They are kept for [retention period of the portal's web server logs].
The API looks at your IP address to stop abuse: it accepts no more than a few hundred requests per minute from the same address. That count lives in memory for one minute and is then discarded; it is not stored in any database.
If the server fails, the error is logged so it can be fixed: the error type, its message, the technical trace and the request path. It carries no identity of yours, because there is none.
What your browser stores on its own —the language you chose, the light or dark theme, which columns you left visible in a table— is described, with the exact name of each item, in the cookie policy. None of it travels to the server.

The stadium map, only if you ask for it

A stadium page can show an OpenStreetMap map. It does not load when the page opens: you see a notice saying who your browser will connect to and a button, "Load the map". Only if you press it does your browser request the map from the servers of the OpenStreetMap Foundation and, in doing so, send them your IP address and the data any web request carries. The portal requests the map without telling them which page you came from, and the decision to load it is not stored anywhere: every stadium page asks again. What the OpenStreetMap Foundation does with that request is explained in its own privacy policy (https://wiki.osmfoundation.org/wiki/Privacy_Policy). Below the map there is always a link to open it on their site, which is another way to see it without loading anything here.

Map data is © OpenStreetMap contributors, under the ODbL licence, and the attribution is shown with or without the map.

Text generated by artificial intelligence

Some pieces of Pelusa are written by a language model, not by a person. Regulation (EU) 2024/1689 (Article 50) requires text generated with artificial intelligence and published to inform the public to be declared as such, and that is what we do:

Which pieces. The "Chant of the day" and the "Surprising fact" on the API's front page; the comments of "El Loco" about a match (chronicle, tactics, fact and reaction); and the trivia and the description of the supporters in a team's detail. When the service has no model key, some of those pieces come from a hand-written template and are then not marked as generated.
Who generates it. A Claude model by Anthropic (Anthropic, PBC, United States), which the server calls through its API. What is sent to it is data from the sports archive —teams, results, statistics, player names as public figures—, never any data about who visits the portal: your browser does not talk to Anthropic.
How it is marked. Each generated piece carries in the public API the flag aiGenerated: true and the sentence to be shown next to the text: "Text generated by artificial intelligence; not reviewed by the editorial team" (in Spanish). Today the portal's screens do not show these pieces; when they do, they will carry that notice.

Data about footballers, coaches and referees

The archive contains data about people who are public figures in football: name, date of birth, nationality, position, team, career, statistics, cards and, when the provider supplies one, a photograph. It comes from SportMonks (sportmonks.com), a sports data provider that collects it from what competitions publish. It is not obtained from the people themselves (Article 14 GDPR) and is processed on the basis of legitimate interest in informing about professional sport, which is information already public.

If you are one of those people and want a piece of data corrected, or you object to appearing, write to privacidad@profblu.com: we review it and, while it is being resolved, we can restrict its publication. What comes from the provider we correct in our copy and pass on to them.

The forecast

The forecast is a statistical estimate computed from the archive's data —results, published market odds and team statistics—. It uses no data about who visits the portal and profiles nobody. It is informational: it is not advice of any kind and it is not a betting recommendation. Pelusa does not offer betting, and the betting features that exist in its code are switched off and not shown.

Pelusa has no accounts of its own: when sign-in is switched on, it will be with the platform's central account (login.profblu.com). The platform is responsible for that account —email, name, password, sessions— and describes it in its privacy policy. The only thing Pelusa would store about your account is the teams you mark as favourites, linked to your account identifier, for as long as the account exists; and your browser would store what keeps you signed in, described in the cookie policy. When this changes, this text will say so beforehand.

Why, and on what basis

Serving you the portal —pages, data, files—: because it is what you ask for when you open it (legitimate interest in answering the request, and performance of what you yourself ask for).
The server logs and the abuse brake: legitimate interest in a service that works and is secure.
The data about public figures in football: legitimate interest in informing about professional sport, with the objection and correction described above.
The map: your express request, each time you press "Load the map".
AI-generated text: processes no data of yours.

We do no profiling, no advertising, no automated decisions that affect you, and we neither sell nor pass data to third parties for commercial purposes. This is not a statement of intent: nothing in the code does any of that.

Where it is processed, and who else sees it

The portal and its API run on Hetzner servers in Germany, within the European Economic Area. Database backups are encrypted and rotate after 35 days; that database holds the sports archive, not data about visitors.

Outside the EEA only two third parties are involved, and in both cases without data of yours: Anthropic (United States) receives sports archive data to generate the texts described above, and SportMonks delivers data to us and receives none. The OpenStreetMap Foundation (United Kingdom) only receives your browser's request if you load the map.

For how long

The web server logs: [retention period of the portal's web server logs].
The per-IP request count of the abuse brake: one minute.
The server's error logs: as long as the application's log cycle lasts; they carry nobody's identity.
Nothing else about you: the portal stores nothing of yours in its database.

Your rights

You can exercise the rights the General Data Protection Regulation gives you: access, rectification, erasure, portability, objection, restriction and withdrawing your consent without affecting what was done before. Write to privacidad@profblu.com. We answer within the legal deadline, one month at most.

You can complain to a supervisory authority: in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it); in Spain, the Agencia Española de Protección de Datos (www.aepd.es); in Argentina, the Agencia de Acceso a la Información Pública (www.argentina.gob.ar/aaip); or the authority of the country where you live.

Minors

Pelusa can be read without an account and does not ask your age. It contains no betting and does not link to bookmakers; the forecast is information, not a game. If accounts are ever switched on, the platform's minimum age will apply, fourteen years, with the authorisation of whoever holds parental responsibility or guardianship.

Security

Communications are encrypted (TLS). The portal and the API send headers that stop another site from framing them or guessing a file's type, and that limit what your browser tells about where you came from when you leave for another site. If we detect a breach that affects you, we will tell you, and the supervisory authority within the 72 hours the law sets.

A note about the demonstration copies

The same version of Pelusa serves pelusa.profblu.com, which is the real portal, and the demonstration copies under demo.prosecco.group and demo.profblu.com, which are rebuilt and reseeded with test data. What this text says applies to all of them; where a rule changes by environment, it says so.

Changes

If we change what we do with data, we change this text and move the revision date at the top.