Privacy policy
Information on data processing for the service currently available, pursuant to GDPR and, where applicable, UK GDPR.
Last update: 31 October 2026
1. Owner and operational contact
The data controller is NEXT GROUP INTERNATIONAL LTD, Company No. 16265840, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Per esercitare i tuoi diritti o chiedere informazioni scrivi a info@sightgroup.org, contact managed by Sight Group SRLS on behalf of Next Group.
Sight Group is the external entity in charge of operational management of contacts, support and privacy requests: it accesses necessary data for these activities and processes them on behalf of the controller, according to their instructions. It does not act as site controller, DPO or EU representative.
2. What data and for what purposes
| Date | Purpose and legal basis |
|---|---|
| IP address, HTTP requests, browser information, errors and technical data managed by the infrastructure. | Provide the site, prevent abuse and diagnose faults: legitimate interest in the security and operation of the service (art. 6.1.f). |
| Name, email, password hashed, age confirmation, versions of terms and privacy policy; country and favourite team, if provided. | Create and manage the account, requested preferences and contractual relationship (art. 6.1.b); document applicable compliance (art. 6.1.c). Viewing the information does not imply consent to marketing. |
| Session identifiers, temporary verification or recovery links, login attempts. | Account authentication and recovery (art. 6.1.b); abuse prevention and security (art. 6.1.f). Passwords are not stored in clear text. |
| Selections saved, timestamp of save, match results, personal stats, followed teams and leagues. | Provide the collection and statistics requested in the account (art. 6.1.b). These are not records of bets or money movements. |
| Daily counters of access and openings of analyses, without recording the content read; support notes, administrative changes and optional feedback on cancellation. | Support, service management and usage verification. Access limited to authorised staff; no sharing with advertising networks or marketing use without consent. |
| Trial period, plan, subscription status, Stripe IDs and transaction references. | Manage access, payments and contractual support (art. 6.1.b); tax, accounting and record-keeping obligations for evidence (art. 6.1.c). |
| Pseudonymous ID derived from email using cryptographic function with server key, trial grant date. | Preventing abusive trial renewal via cancellation and new registration: legitimate interest in preventing service abuse (art. 6.1.f). The log does not store the email in clear text and is not used for advertising. |
| Email and newsletter subscription choice. | Send NEXTSPORT news, content and offers only with voluntary, revocable consent (art. 6.1.a). |
| Email and separate choice on partner offers. | Send, by NEXTSPORT, communications about partner offers only with specific voluntary, revocable consent (art. 6.1.a). This choice does not authorise the transfer of email or other data to partners. |
| Granting and revoking consents, purposes, date and version of the text. | Document choices and compliance with data protection obligations (art. 6.1.c). |
| Privacy choice, related version and date. | Respect and document preferences: compliance with data protection requirements (art. 6.1.c). |
| Analysis identifiers in the collection, stored in the browser. | Remember data collection between visits: optional and revocable consent (art. 6.1.a). |
| Email address and content of communications sent to Sight Group. | Respond to requests: legitimate interest in managing contacts (art. 6.1.f); for privacy rights requests, legal obligations (art. 6.1.c); any pre-contractual requests, art. 6.1.b. |
Navigation requires necessary technical data. Data marked as mandatory in the form is for creating the account; promotional consents, country, and favourite team are optional. Refusing or withdrawing marketing consents does not affect the free trial, subscription, or account features. Data saved in the account is separate from optional reading memory on the individual device.
At checkout, Stripe processes data necessary for payment and billing according to its privacy policy. NEXTSPORT does not retain full card numbers or security codes. No identity documents are requested for standard registration.
3. AI and sports information
Analyses may be automatically generated with OpenAI based on results, statistics, odds and research from public sports sources. The application does not send received emails, cookie choices or visitor session IDs to OpenAI. Research may include names of people mentioned in sports news. Sources include club publications, competitions, result providers and sports information; any correction requests can be sent to the contact above.
Analyses concern sporting events: they are not automated decisions about you with legal or similarly significant effects. We do not profile visitors commercially nor sell their data.
4. Recipients and suppliers
Data may be accessible to the controller, Sight Group for entrusted activities, authorised personnel within job limits and necessary technical providers. The infrastructure uses Vercel for hosting and security, Neon for the database, OpenAI for sports processing and Stripe when you activate a trial with card or manage a subscription. For automatic sending of registration, verification, recovery and subscription management emails, the service uses Resend. Le comunicazioni di assistenza sono trattate anche dal fornitore di posta del recapito indicato.
Data may also be disclosed to authorities when required by law or to protect rights. Sponsor images are served by the site without embedding advertising networks or third-party tracking pixels. Clicking an external link opens the target site, subject to its own privacy notice. Account data is not shared with sponsors.
5. International transfers
The data controller is in the United Kingdom and suppliers may also operate outside the European Economic Area, including the United States. GDPR-subject transfers require a valid adequacy decision or appropriate safeguards such as standard contractual clauses and, when necessary, supplementary measures. You can request privacy contact information about recipients, processing locations, and applicable safeguards concerning your data processing.
6. Account retention and closure
Daily usage counters are kept for 90 days and removed upon account closure. Support notes and operation logs are limited to relationship management, disputes and administrative obligations; cancellation feedback is optional.
- Profile data and personal selections: during the user relationship and until closure or requested deletion, except data to be retained for legal obligations or rights protection.
- Account session: valid for 30 days from creation; revoked on logout of the device. Changing or recovering password revokes previous sessions.
- Password recovery link, when automatic sending is available: usable only once within 30 minutes; email verification link: within 24 hours. If automatic recovery is unavailable, you can contact support.
- Anti-abuse pseudonymous trial ID: 12 months from trial grant, even after account closure; deleted at expiry by periodic cleaning.
- Service email: contents in the sending queue are deleted after sending, expiry or final failure; technical metadata of this queue are removed by periodic cleaning after 30 days and account closure. These times concern the application queue, not copies in email inboxes or provider logs.
- Cookie choice: 6 months, unless changed by you or browser data is deleted.
- Reading collection on device: 30 days from last change; deleted upon revocation and, if expired, at next site access.
- Promotional consents: used until revoked; records of granting and revocation remain as long as necessary to demonstrate compliance with choices and applicable obligations.
- Billing and payment records: for periods required by applicable tax and accounting obligations and, if necessary, for dispute management.
- Technical data, logs and communications: for the time necessary to handle requests, diagnosis, security, legal obligations and rights protection, limiting content and access. Criteria include data nature, case or incident closure and applicable legal terms.
From your profile you can export your data and request closure with password confirmation. The procedure deactivates the account, removes unnecessary profile data, selections, sessions and access links, and revokes promotional consents. Administrative references and any retained consent evidence are not presented as anonymised data.
If a subscription is still active, even during a card trial, automatic closure first requires subscription management. You can always contact info@sightgroup.org to exercise rights without waiting expiration: retention duties only concern data for which they apply. For log times, backups or specific documents you can ask for information at the same contact.
7. Your rights
Where applicable, you may obtain access, copies, correction, deletion, restriction, and data portability; you may object to processing based on legitimate interest. From the profile, you can modify or revoke separate consents for newsletters and partner offers. Revocation does not affect lawful processing already completed and does not prevent security or contract communications. For device preferences, use .
Write to info@sightgroup.org indicating the request and useful information to identify the data. A response is usually provided within one month; in complex cases, the term may be extended according to law, with notification. Any identity verification will be proportionate.
You can file a complaint with the competent supervisory authority, for example at Italian Authority or at theUK ICO, and take legal action. It is not necessary to waive these rights to use the site.
8. Minors and updates
Accounts are intended for adults. If you believe a minor has created an account, report it to operational contact. Do not use contacts to send data on minors or unnecessary health information. Changes to functions and processing will update the privacy notice; optional tools with new purposes will not be authorised from today's collected choices.