Last updated: 29 October 2026. This policy covers the website foursandsixes.com. The Fours & Sixes app (Android and Web App) will have its own privacy policy, published here before the app launches.
1. Who is responsible
For privacy questions about Fours & Sixes, contact us:
Email: support@foursandsixes.com
For any privacy question, write to the email address above.
2. The short version
- No advertising or tracking cookies on this website.
- Visitor statistics come from our own Matomo installation, without cookies, with IP addresses anonymised. The data stays on our server and is never shared.
- On the homepage, when a German version is available, and wherever the pricing widget appears, our website estimates the visitor’s country from the IP address received with the request. Supported markets receive one assigned display currency. There is no currency selector. A known country without a local target price sees EUR reference pricing; if the country cannot be determined, no price is shown. Visitors estimated to be in Germany may see an optional link to the German homepage. English remains the default and there is no automatic redirect.
- No Google Analytics, no Facebook pixel, no Google Fonts (our fonts are on our own server), and no embedded videos or maps.
- If you join the waitlist, we use your email address only to tell you when Fours & Sixes launches.
3. Hosting and server log files
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, on servers in Frankfurt am Main, Germany. We have a data processing agreement with Hostinger (Art. 28 GDPR). Our domain is registered with Namecheap, Inc. (USA), which only provides the DNS service that points the address to our server.
Every time you open a page, the server automatically records technical information: your IP address, the date and time, the page requested, the referring page, your browser and operating system. The connection to this website is encrypted (HTTPS/TLS). We need this to deliver the website and to keep it secure, for example against attacks. The legal basis is our legitimate interest in a secure, working website (Art. 6 (1) (f) GDPR). Log files are kept for a short period for security purposes and then deleted.
When a pricing widget loads, or when the German-language suggestion is enabled on the homepage, your browser requests a per-visitor result from our website. We use the IP address received with that request to estimate your country. The lookup uses a country database stored on our server; the lookup code does not send your IP address to the database provider, store it for this purpose or return your IP address or a country-code field to your browser. For supported markets, the endpoint returns only that market’s assigned display currency and target prices. A known country without a local target price receives EUR reference prices; if the country cannot be determined, no price is shown. For Germany, the endpoint also returns a language hint that can show an optional link to the German homepage. The prompt does not redirect you, English remains the default, and your explicit language choice is remembered in this browser for 180 days. There is no currency selector. The displayed amounts are target prices for the marketing widget; they do not set checkout currency, checkout amount or purchase eligibility. The location lookup itself creates no cookie or saved location/currency preference. The legal basis is our legitimate interest in presenting pricing information in a useful display currency (Art. 6 (1) (f) GDPR). This lookup creates no separate application record, but the request may appear in the technical/security logs described above. You may object by emailing us using the contact details in section 1.
4. Security (Wordfence)
We use the Wordfence security plugin to protect the website against attacks and misuse. It processes your IP address and request data to detect and block malicious traffic. Wordfence is provided by Defiant, Inc., USA. To keep its threat database current, Wordfence may check IP addresses against Defiant’s servers. Where data is transferred to the USA, this is based on appropriate safeguards (the EU-U.S. Data Privacy Framework or EU Standard Contractual Clauses). The legal basis is our legitimate interest in protecting the website (Art. 6 (1) (f) GDPR).
5. Cookies and the cookie banner
This website does not use cookies for advertising or tracking. Our cookie banner (SureCookie) stores your choice in a small cookie and records the choice, with the time and technical data such as your IP address, so we can show that we respected it. Consent records are deleted after 12 months. The legal basis is our legal obligation to be able to prove consent (Art. 6 (1) (c) and Art. 7 (1) GDPR), because this storage is strictly necessary for the banner to work. You can change your choice at any time: delete the cookie for foursandsixes.com in your browser and the banner will appear again.
When you choose English or German in the language prompt or homepage language switcher, we store that language and an expiry time in local storage in your browser for 180 days, to avoid repeatedly asking you. Closing the prompt without choosing stores only a dismissal flag in session storage for the current tab session. These values contain no IP address or country and are not sent to our server. They do not change your assigned pricing currency. You can switch language using the homepage language link, or clear this website’s stored data in your browser to reset the remembered choice. If browser storage is blocked, we cannot remember your choice across page loads.
6. Visitor statistics (Matomo)
We use Matomo, an open-source analytics tool, installed on our own server (analytics.foursandsixes.com). Visitor statistics are sent to this self-hosted Matomo installation, which we operate; they are not sent to an external analytics provider. We have configured it for privacy:
- No cookies are set and no information is stored on your device.
- Your IP address is shortened by two bytes (e.g. 192.168.xxx.xxx) before it is stored, so you cannot be identified.
- Query parameters are removed from referring addresses.
- Raw visit data is deleted automatically after 180 days. Only aggregated statistics (for example, number of visits per page) are kept.
- Visitors who are logged in to the website (our team) are not counted.
We use these statistics to understand which pages are useful and to improve the website. The legal basis is our legitimate interest in an audience measurement that respects privacy (Art. 6 (1) (f) GDPR). You can object at any time with the switch below. Your choice is then remembered in your browser (a small opt-out cookie, set only at your request), so your visits are not counted.
7. Waitlist
If you join the waitlist, we collect your email address and, if you choose to tell us, whether you are a scorer, player, organiser, club or fan. Your email address is needed to join; your role is optional. We use this only to tell you when Fours & Sixes launches and, if you tell us your role, to understand who is interested. The legal basis is your consent (Art. 6 (1) (a) GDPR).
We use the double opt-in procedure. After you sign up, we send you one email with a confirmation link. You are only added to the waitlist when you click it and confirm. If you do not confirm within 30 days, your sign-up is deleted automatically.
To be able to prove your consent (Art. 7 (1) GDPR), we store the time of sign-up with your IP address, browser and device type and the page you signed up on, and the time and IP address of your confirmation. The legal basis is our legal obligation and our legitimate interest in that proof (Art. 6 (1) (c) and (f) GDPR).
Your entry is stored in our website database (on Hostinger’s servers). We receive a notification at our own mailbox, which is also hosted by Hostinger. We delete your entry when you ask us to, or at the latest 12 months after the app launches. You can withdraw your consent at any time with the unsubscribe link in every email we send to the waitlist, or by emailing support@foursandsixes.com. Unsubscribing deletes your sign-up data. We also store whether the sign-up was made in English or German so that confirmation and unsubscribe information can be provided in that language.
8. Contact form and email
If you contact us through the contact form or by email, we process the details you give us (for example name, email address and your message) to answer your request. The contact form also stores the time of sending, your IP address, your browser and device type, to protect against misuse. The legal basis is the handling of your request (Art. 6 (1) (b) GDPR) or our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR). Form messages are stored in our website database and our mailbox, both hosted by Hostinger. We delete them when your request is resolved, unless the law requires us to keep them for longer.
9. No automated decisions
We do not make decisions about you with legal or similarly significant effects based solely on automated processing (Art. 22 GDPR). The pricing widget assigns one display currency and target price set from a country estimate. On the homepage, visitors estimated to be in Germany may receive an optional suggestion to view the German version. Neither function redirects you or determines checkout currency, purchase eligibility or account access.
10. Links to other websites
Our pages link to other services, such as Google Play. No data is sent to these services until you click a link. After that, their own privacy policies apply.
11. Your rights
Under the GDPR, you have the right to:
- access the data we hold about you (Art. 15)
- have it corrected (Art. 16) or deleted (Art. 17)
- restrict how we process it (Art. 18)
- receive it in a portable format (Art. 20)
- object to processing based on our legitimate interest (Art. 21)
- withdraw your consent at any time, with effect for the future (Art. 7 (3))
Just email support@foursandsixes.com. You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR), for example the authority in the EU country where you live.
12. Changes
We will update this policy when the website or the law changes, and when the app launches. The date at the top shows the latest version.