Privacy Policy

1. Scope and controller

This Privacy Policy explains how Sorare Probabilities (also referred to as “SoProb”, “we”, “us”, or “our”) processes information through the Sorare Probabilities browser extension. It applies to the extension’s interaction with soprob.com, sorare.com, and api.sorare.com.

For privacy questions or requests, contact me at info@soprob.com.

2. Information the extension processes

Authentication information

When you connect the extension to your SoProb account, the extension receives a one-time authorization code and exchanges it for an opaque access token. The access token and its expiration time are stored in Chrome extension storage. Short-lived PKCE authorization state is stored in Chrome session storage. The extension does not receive or store your SoProb or Sorare password.

For user-initiated Daily Mission selections, the extension reads Sorare’s CSRF token from the Sorare cookie store. That token is sent only to Sorare’s API as part of the requested Sorare operation. It is not sent to SoProb or any other third party, is not modified, and is not persistently stored by the extension. Lineup imports are performed through Sorare’s visible lineup interface and do not read the CSRF token directly.

Website content

On supported Sorare football pages, the extension processes the identifiers needed to match the visible cards and fixtures with SoProb data. These may include visible player names, card image URLs, card and player slugs, game IDs, team and opponent identifiers, fixture information, gameweek numbers, leaderboard slugs, game modes, and series IDs. The necessary identifiers are sent to SoProb to retrieve protected projections or saved lineups. They are not used to build a general browsing history.

Technical and service information

SoProb may process the extension ID, token status, subscription eligibility, request time, response status, and limited diagnostic information needed to authenticate requests, protect the service, prevent abuse, and troubleshoot failures. Like most internet services, hosting infrastructure may temporarily record an IP address and basic request metadata in security or operational logs.

Information I do not collect through the extension

The extension does not collect passwords, payment card details, health information, precise location, personal communications, general web history, keystrokes, mouse movements, or activity on unrelated websites.

3. How information is used

I process information only to provide and protect the extension’s user-facing features:

• connect the extension to the correct SoProb account;
• verify account and subscription eligibility;
• display starting, win, clean-sheet, team expected-goals, goal-or-assist, set-piece-role, and projected-score information on Sorare cards;
• retrieve lineups saved by the user on SoProb;
• perform lineup imports and Daily Mission selections explicitly requested by the user;
• maintain security, prevent abuse, diagnose errors, and provide support; and
• comply with applicable legal obligations.

I do not use extension data for personalized advertising, creditworthiness, lending, unrelated profiling, or selling user data.

4. Browser permissions

storage

Stores the opaque SoProb access token, its expiration time, and short-lived authorization state in the browser.

cookies

Reads Sorare’s CSRF token only when required for a user-initiated Daily Mission operation. The extension does not modify Sorare cookies.

soprob.com

Connects the account and requests protected projection and saved-lineup data.

sorare.com and www.sorare.com

Displays the overlays and recognizes supported Sorare football cards and pages.

api.sorare.com

Sends fixed, user-initiated Sorare operations for Daily Mission picks.

5. Remote code

The extension does not download or execute remotely hosted JavaScript, WebAssembly, or other executable code. It communicates with remote APIs only to exchange data required for its features. All executable extension code is included in the extension package.

6. Sharing and transfers

I do not sell user data. Information is shared only as needed for the following purposes:

• Sorare: Sorare receives only the authenticated requests the user explicitly initiates, such as adding mission picks or importing a lineup.
• Service providers: Hosting, database, security, and infrastructure providers may process limited information on my behalf solely to operate and protect SoProb.
• Legal and security requirements: Information may be disclosed when reasonably necessary to comply with law, enforce my rights, or protect users and the service from abuse.

I do not transfer extension data to advertising networks, data brokers, or unrelated third parties.

7. Retention

The access token remains in Chrome extension storage until it expires, you disconnect the account, or you remove the extension. Short-lived authorization state is removed after the connection completes or expires. Projection responses are cached in memory for a short period and are cleared when the extension service worker stops or the account connection changes.

Server-side account and saved-lineup data is retained while needed to provide the SoProb account and service, satisfy user requests, maintain security, resolve disputes, and meet legal obligations. Operational logs are retained only for the period reasonably necessary for their security and troubleshooting purpose.

8. Security

Data is transmitted over HTTPS. Access tokens are scoped to the extension and checked against the active SoProb account and eligibility on protected requests. The extension accepts external messages only from the declared SoProb origin and uses fixed Sorare operations rather than accepting arbitrary queries from websites.

No internet service can guarantee absolute security. Please contact me promptly if you believe your account or extension connection has been compromised.

9. Your choices and rights

You can stop extension processing at any time by:

• using “Disconnect” in the extension popup;
• removing the extension from Chrome;
• logging out of Sorare to end authenticated Sorare operations; or
• contacting me to request access, correction, deletion, restriction, or export where applicable.

I may need to verify your identity before completing an account-related privacy request. Some information may be retained when required by law or necessary to protect the service and its users.

10. Chrome Web Store Limited Use

Sorare Probabilities’ use and transfer of information received from Google APIs and Chrome extension APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Information is used only to provide or improve the extension’s single purpose, protect the service, comply with law, or complete another use expressly permitted by that policy.

11. Children

The extension is not directed to children and is not intended for anyone below the minimum age required to use the connected services in their jurisdiction. I do not knowingly collect personal information from children through the extension.

12. Changes to this policy

I may update this policy when the extension, my practices, or applicable requirements change. The effective date at the top identifies the latest version. Material changes will be communicated through an appropriate service or extension notice when required.

13. Contact

Questions or privacy requests can be sent to info@soprob.com.