Privacy Policy

01Scope and who is responsible

This policy applies to the Futbol Frenzy website, web app, account services, marketing communications and any mobile app that links to it. It does not govern websites or services operated independently by leagues, clubs, social networks, sign-in providers or other third parties.

“Personal data” or “personal information” means information that identifies, relates to or can reasonably be linked with a person or household. Data that has been aggregated or deidentified so that it cannot reasonably identify you is not personal data under many laws.

02Personal data we collect

Information you give us

• Account and waitlist data: email address, display name, password hash and salt, account identifiers, verification status, account creation date, waitlist status and source, and versioned records of email notices and marketing choices.
• Game and social data: squads, player selections, watchlists, scores, rankings, awards, competition and mini-league memberships, friend relationships, invitations and inbox activity.
• Communications: messages, support requests, feedback and any information you choose to include when contacting us.
• Preferences: email choices, cookie choices, display settings and other account settings.

We do not store your plain-text password. It is transformed using a one-way password hashing process. Please do not send sensitive personal data—such as health, government-ID, precise financial or biometric information—through display names, support messages or other free-text fields.

Information from sign-in providers

If you continue with Google, we receive a stable Google account identifier, email address, email-verification status, name and profile image if included in the identity token. If you use Sign in with Apple, we may receive an Apple account identifier, email address and name, depending on Apple’s settings and what you choose to share. We use these details to create, link and secure your Futbol Frenzy account; we do not receive your Google or Apple password.

Information collected automatically

• Session and security data: session tokens, login events, form-protection results, IP-derived security buckets, request metadata and records needed to detect abuse, fraud or unauthorised access.
• Device and usage data: page or route visited, referring page, general device type, browser, operating system, approximate country or city, timestamps and app performance or error information.
• Advertising data, only with consent: browser or cookie identifiers, page visits, referrals and conversion events sent through the Meta Pixel or X website tag when those tools are enabled.

We collect some of this information directly and some through the providers listed below. The exact data available can depend on your device, browser, network, privacy settings and whether you have consented to optional marketing technologies.

03How and why we use personal data

Where we rely on legitimate interests, we consider the impact on your rights and do not use that basis where our interests are overridden by your rights. Where consent is the basis, you may withdraw it at any time without affecting processing that was lawful before withdrawal.

We do not use solely automated decisions that produce legal or similarly significant effects about you. Automated fantasy scoring, rankings, fraud signals and game recommendations affect game presentation or account security, not your legal rights.

04Cookies, local storage, analytics and advertising

Cookies are small browser files; local storage is a similar browser technology. We use essential technologies to operate and secure accounts. Optional advertising tags do not load until you accept them through the consent banner. You can reject them with equal prominence, or reopen Cookie Preferences from the site footer or account settings.

Rejecting or later disabling marketing prevents our site from loading the Meta and X tags in that browser going forward. Because tags loaded after an earlier acceptance cannot be unloaded from a page already open, refresh after changing your choice. You can also clear cookies, use browser controls and use provider-level advertising settings. Blocking essential technologies can prevent login, security checks or saved preferences from working.

We do not sell personal information for money. Use of advertising tags may be considered “sharing,” targeted advertising or a sale under certain US state laws even without money changing hands. Rejecting or disabling Marketing is our browser-level method for opting out of that activity. You may also email us to exercise any applicable opt-out right.

05Who receives personal data

We disclose data only as needed to run the service, follow your instructions, comply with law or protect rights and security. Key recipients are:

We may also disclose information:

• to professional advisers, auditors, insurers and contractors under appropriate confidentiality duties;
• when required by law, court order or a valid government request, or when reasonably necessary to protect rights, safety and security;
• in connection with a merger, financing, acquisition, reorganisation, bankruptcy or sale of all or part of the business, subject to appropriate protections; or
• to another party when you direct us or give consent.

Other managers may see information designed to be public within the game, such as your display name, team, points, rank, awards and mini-league participation. Do not use a display name you would not want shown to other users.

06International data transfers

Futbol Frenzy is based in the United States. Personal data may be processed in the United States and other countries where we or our providers operate, which may have different data- protection laws from your country. Where required, we use recognised safeguards such as contractual protections, approved standard contractual clauses or an applicable adequacy or data-privacy framework. You may contact us for more information about applicable safeguards.

07Retention and account deletion

We keep personal data only as long as reasonably needed for the purposes above, including to provide an active account, meet legal obligations, resolve disputes, enforce agreements and protect the service. Retention depends on the type of data and why it is held.

• Active account and game data is generally kept while your account remains open.
• Browser sessions expire after 30 days unless ended sooner. Password-reset tokens expire after one hour and email-verification tokens after 24 hours.
• Email preferences and evidence of consent or unsubscribe may be retained as needed to honour and demonstrate your choice.
• Security logs, rate-limit records and support messages are retained for a limited period appropriate to fraud prevention, troubleshooting and legal needs.
• Backups may retain deleted data for a limited recovery cycle before being overwritten, and we may retain minimal records where law or a legal claim requires it.

You can delete your account from account settings. Our active database deletion is designed to remove the account, profile, sessions, tokens, squads, relationships, scores, awards, owned leagues, memberships and standings linked to you. Some content may be anonymised rather than deleted where it must remain to preserve the integrity of another user’s records or aggregated results.

08Security

We use technical and organisational measures designed for the nature of the service, including hashed passwords, HTTP-only session cookies, server-side database access, access controls, row-level database protections, rate limits, bot detection and encrypted transport. No online system is perfectly secure, so we cannot guarantee absolute security. Use a unique password, protect your sign-in provider and contact us immediately if you suspect misuse.

09Your choices

• Account: update your display name and relevant settings in the service, or delete the account from account settings.
• Waitlist and marketing email: joining the waitlist requests its confirmation and access emails. Leave the optional Team Sheet box unticked if you do not also want product news and offers. Account holders can change that preference in settings, and every marketing email provides an unsubscribe route. Essential account and security messages may still be sent.
• Marketing tags: choose Reject in the consent banner or reopen Cookie Preferences from the footer or account settings.
• Browser controls: delete or block cookies and local storage through your browser. Some essential features may stop working.
• Sign-in provider: review or revoke Futbol Frenzy access through your Google or Apple account settings. Revocation does not itself delete your Futbol Frenzy account.

10Your privacy rights

Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of or deletion of personal data; receive a portable copy; restrict or object to processing; withdraw consent; opt out of sale, sharing or targeted advertising; limit certain sensitive-data uses; and appeal a denied request. You will not be discriminated against for exercising a privacy right.

To exercise a right, email support@futbolfrenzy.app with “Privacy Request” in the subject. Describe the request and the account email involved. We may ask for proportionate verification and may refuse or limit a request where law permits. An authorised agent may submit a request where applicable, but we may need proof of authority and direct verification from you.

11Children

Futbol Frenzy is intended only for people aged 18 or older. We do not knowingly collect personal data from children. If you believe a person under 18 has created an account or sent us personal data, contact us and we will investigate and take appropriate deletion steps.

12Changes to this policy

We may update this policy as the service, providers or law changes. We will post the updated version at https://futbolfrenzy.app/privacy.html and revise the date above. If a change materially affects your rights, we will provide additional notice through the service, by email or both before it takes effect where required.

13Contact us

For privacy questions, complaints or rights requests, contact Futbol Frenzy at support@futbolfrenzy.app.

If you are in a jurisdiction with a data-protection authority, you may also complain to that authority. We would appreciate the opportunity to address your concern first.