Last updated: 1 September 2026
Smart Scan System publishes sports information about U20 footballers and stores the bare minimum in your browser to work. This page covers both: what player data we process and what is stored on your device.
Smart Scan System is a product of Smart Sports System SLU (Spanish tax ID B88791975), the data controller. For any privacy matter, including exercising your rights, write to info@s3-football.com.
The app publishes information about U20 players who get minutes in professional competitions: name, date of birth, nationality, photo and team, along with their match statistics (minutes, goals, assists, cards and position). It comes from API-Football (api-sports.io), our data provider. It covers senior professional football only: we do not cover youth categories, and we collect no contact, health or location data, nor any special category under Article 9 GDPR.
The legal basis is legitimate interest (Art. 6(1)(f) GDPR) in reporting on and analysing professional sporting activity, a field of public prominence where this data is already widely published. Processing is limited to strictly sporting information: we build no profiles with legal effects and take no automated decisions about the individuals concerned. Data is kept for as long as the service is running.
By its very nature the service covers very young footballers, and some may be minors. We publish only strictly sporting data from senior professional matches, already published by the competitions they play in. If you are the player, their club or their representative and want an entry reviewed or removed, write to us and we will handle it as a priority.
If you subscribe, we process your email address, the name and profile picture you choose to give, and your session's technical data. Clerk handles them and is who stores your password: we never see it. The legal basis is performance of the contract you enter into when subscribing (GDPR art. 6(1)(b)).
The players you star and the filters you save as defaults are stored in our database, tied to your account, so they follow you across devices. They are only player identifiers and filtering preferences. They are deleted when your account is.
Payment is processed by Stripe, which also acts as merchant of record: it makes the sale, issues the invoice and is liable for the VAT. For that payment data Stripe is a controller in its own right, not our processor, and its own privacy policy applies. Your card details are entered on their gateway and never reach our servers: we neither see nor store them at any point. For each purchase we keep the email, the amount, the date, the period bought and the transaction id, because we need them to grant your access and to meet our tax obligations (GDPR arts. 6(1)(b) and 6(1)(c)).
Clerk and Stripe are providers established in the United States, so your account and payment data may be processed outside the European Economic Area. Those transfers rely on the safeguards in Chapter V of the GDPR (the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework).
Your account data, for as long as the subscription is active and a reasonable period afterwards in case you come back. Invoices and payment records, for the period Spanish tax and commercial law requires, which runs up to six years and which we cannot shorten even if you ask for erasure.
Anyone whose data appears here may request access, rectification, erasure, objection and restriction of processing by writing to info@s3-football.com. We also correct inaccurate data coming from the source. If you are not satisfied with our response, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your local supervisory authority.
We use no ads and no cross-site tracking, and we do not sell data. Only the following is stored in your browser:
When you sign in, Clerk creates its sign-in cookies and we issue our own, s3scan_session: it is signed, lasts 8 hours and holds your user id, your email address, the address of your profile picture and a session identifier. It exists so that we need not ask Clerk on every page you open. That session identifier is also kept in our database, because your account can only have one session open at a time: when you sign in somewhere else, the earlier one is closed. Alongside it we keep the time of your last activity, so the session can be closed after 15 minutes without use. All of them are strictly necessary for a service you asked for, so they need no consent — which is why this site shows you no cookie banner. They go when you sign out.
s3_lang cookie: remembers the language you choose (ES/EN). Created when you use the language switcher. Until it exists, we show the site in Spanish or English based on the language your browser asks for; that preference is only read, never stored.
To know how many people visit the site we use Cloudflare Web Analytics, which measures without cookies and without identifiers that follow you between visits or across sites: it only produces aggregate counts (page views, country, device type). No profile of you is built, and your browsing cannot be reconstructed.
The site is hosted on Railway and the database on Neon; as infrastructure providers they process technical connection data (such as your IP address) to run and protect the service. Sign-up and sign-in are handled by Clerk, and payments by Stripe. Photos and crests are served directly from API-Football's servers, so your browser connects to them when loading those images. All of them process data on our behalf and on our instructions. We do not sell or hand your data to anyone else.
You can clear what your browser stores at any time by wiping this site's data; that will also sign you out. To delete the whole account, write to us.