Magic Number offers an optional Google sign-in so a reader can keep team and league favorites across devices. This notice says what we keep, what we discard, and how to delete an account.

Last updated August 3, 2026. We added this account section to describe Google sign-in, favorites, deletion, and recovery copies.

Google is the identity provider for Magic Number accounts. When you choose to sign in, we store a Google account identifier, your verified Google email address, your display name, and account and sign-in timestamps. We use them to recognize your account, show which account is signed in, and keep it secure. We do not store your Google password, access token, ID token, authorization code, profile picture, or other optional Google profile claims.

We store the teams and leagues you favorite so we can sync those choices to your account and use them in account features such as a personalized home page. We also keep an opaque session credential as a hash, with a 30-day idle expiry and a 90-day maximum lifetime. Account data and favorites remain until you remove a favorite or delete the account.

Cloudflare hosts the account service and its D1 database. Google and Cloudflare receive the information needed to provide those services; Magic Number does not sell account information.

You can delete your account from the account page after confirming the choice. We then remove the live account, its sessions, and its favorites from the serving database and expire the current session.

Deletion does not make historical recovery copies disappear immediately. Cloudflare D1 point-in-time recovery may retain database copies for up to 30 days, depending on the Cloudflare plan. We also make a daily encrypted backup of the account database. Those backups are kept as 14 daily, 8 weekly, and 12 monthly recovery points. They are not available through the account service. If we restore an account database, we reapply deletion records before it can serve readers, so a deleted account is not restored to live use.

Deleting an account clears account-derived data in the browser you use for deletion. We cannot clear favorites or site data in another browser or on another device. To remove those local copies, use your browser's controls to clear site data for Magic Number.

We keep our own record of how this site is used, collected by software we run rather than by an analytics company. Opening a page records the page you opened, the name of the site that linked you to it, how long you stayed, how far down you read, how many times you clicked or pressed a key on it, and any search you run. A search records the words themselves only when they name a club or competition the site already lists; anything else is recorded as how long the query was and how many results it returned. If you use a share or download control on a page, that records which one you used.

These records carry a random identifier stored in a cookie on your device, so we can tell one visit from another and see whether readers come back. It is a string of random characters and holds nothing about you or your device. We set it without asking you first, and this site shows no consent banner. Clearing this site's data in your browser, or refusing its cookies, removes it, and a fresh one is issued the next time you visit; we replace it ourselves after 400 days. A second identifier, which your browser discards when you close the tab, groups the pages of a single visit together.

What we throw away rather than store: your IP address, the full identifying string your browser sends, the full web address of the page that linked you, and the full web address of the page you are reading, including anything after a question mark in it. We keep which page it was, the country and a coarse device type the request already carries, and the name of the linking site without the rest of its address. The discarding happens as the record arrives, not later.

This record stays ours. We read it to see which forecasts get read, to fix the parts of the site that do not work, and to improve the pages and controls readers use. It is not sold, and it is not shared with an advertising network, a data broker, or another site. We keep it for 400 days and then delete it.

This site does not use advertising cookies or third-party analytics.

Account data is never joined to the random identifier stored in a cookie, or our first-party event record. Those systems do not receive your Google account identifier, email address, display name, session identifier, favorites, or a signed-in flag. Deleting an account does not delete anonymous analytics records because they contain no account key.

Your browser may keep a display preference on your device so the site can remember a light or dark theme; that preference is not sent to us.

If you email [email protected], we use the message and address only to respond or follow up on that request. Do not send sensitive information.

We will update this notice before collecting anything beyond what it describes, or before putting information about visitors to another use.