If you create a FootDraft account, we may process your email address, nickname or username, hashed password, account ID, account creation date, last login date, account status and information needed for account security. We do not store your password in plain text. The password is stored only as a protected cryptographic hash, and session tokens are hashed and expiring.
In connection with your use of FootDraft, we may process gameplay data such as selected formations, created squads, selected player cards, match results, private match history, game statistics, rankings or leaderboards, Elo, tiers/leagues, weekly race data, game settings, progress data and information related to bug reports or issues. Game data is processed so that FootDraft can work, save results, enable competition and develop gameplay mechanics.
If FootDraft includes a leaderboard, ranking, Elo, leagues/tiers, weekly race or public profile, some data may be visible to other users, such as your nickname, result, ranking position, Elo, tier or basic game statistics. Match history is private and visible only to the logged-in account owner. Do not use as your nickname any data that you do not want to disclose publicly, such as your full name, email address, phone number or other private data.
When you use FootDraft, we may automatically process technical data such as IP address, date and time of connection, requests sent to the server, browser information, device and operating system information, session identifiers, error logs and data needed to protect against abuse, spam, bots, cheats and attacks.
If you contact us by email, we may process your email address, message content, data provided in the report and correspondence history. This includes bug reports, account questions, account deletion requests, Terms violation reports, privacy requests and intellectual property notices.
FootDraft stores some data locally in your browser, for example through a functional session cookie, local storage, session storage or similar technologies. This may include data needed for login and session maintenance, game settings, technical data needed for the game to work properly, local season/career mode data and data allowing an interrupted match to be resumed. Local data helps the game run smoothly and remember basic settings. Details are described in the Cookies and Local Storage Policy.
We may process data to create and manage accounts, enable login, provide the game, save results and statistics, operate leaderboards, maintain game security, detect and prevent cheating, bots and abuse, diagnose errors, develop the game, handle user contact, process user requests, handle legal notices, defend against claims, pursue claims and comply with legal obligations.
Where GDPR or similar laws apply, data may be processed on the basis of performance of a contract, the Operator's legitimate interest, user consent or a legal obligation. Performance of a contract covers providing the game, account management, login and result saving. Legitimate interest covers game security, abuse prevention, cheat detection, bug handling, protection of the Operator's rights, correspondence and game development. Consent may be required in the future for certain cookies, analytics, personalized advertising or marketing communications.
At this stage, FootDraft does not contain ads, payments, premium features, microtransactions, subscriptions, paid virtual currency or paid digital items. We do not process user payment data and we do not conduct behavioral advertising based on profiling. The Operator may in the future introduce advertising, voluntary support, premium features, paid digital items or other forms of monetization. Before launching such features, the Privacy Policy, Terms and, if necessary, Cookies Policy will be updated.
To operate FootDraft, we use or may use technical service providers: Hetzner as hosting / VPS server provider, Cloudflare as proxy, CDN, TLS, technical protection and basic traffic statistics provider, Resend as system email provider, GitHub as storage for encrypted backups and technical tools used to maintain the project. User account data is stored in a self-hosted SQLite database on the Operator's Hetzner VPS. At this stage, we do not use an external database or login provider such as Supabase, Firebase or Google Login. Resend handles system emails, in particular account verification and password reset. The system email sender is FootDraft <[email protected]>. Encrypted database backups may be stored in a private GitHub repository; backups are encrypted before upload. At this stage, we do not transfer data to advertising partners because the game does not contain advertising, and we do not use analytics tools such as Google Analytics, Sentry, PostHog or Meta Pixel.
Some technical service providers, in particular Cloudflare, Resend or GitHub, may process data in countries outside the European Economic Area, for example in the United States. If such transfer occurs, it should take place on the basis of appropriate safeguards required by law, such as standard contractual clauses or other appropriate mechanisms.
Account data is kept for as long as the account is active. Game data may be kept for as long as necessary for the operation of the game and user account. Technical data and server logs are kept for the period needed for security, error diagnostics, abuse prevention and game maintenance. Correspondence may be kept for the time needed to handle the matter and then for the period needed to defend against claims or comply with legal obligations. After account deletion, some data may be deleted, anonymized or retained for a limited time where necessary for security, legal, technical, ranking, statistical or anti-abuse reasons.
The user may request account deletion by writing to [email protected] or by using a self-service account deletion feature if it is available in the game. Account deletion may result in loss of access to the account, match history, saved squads, results, statistics, ranking position and other data connected with the account. Some data may be retained for a limited time if necessary for game security, abuse prevention, handling reports, defending against claims or complying with legal obligations. For public data such as leaderboard entries, the Operator may remove, anonymize or disconnect the data from the user account depending on technical possibilities and the nature of the feature.
Where data protection laws apply, the user may have the right to access, rectify, delete, restrict processing of, transfer and object to processing of their data, withdraw consent where data is processed on the basis of consent and lodge a complaint with the competent data protection authority. To exercise these rights, contact us at [email protected].
We use reasonable technical and organizational measures to protect user data. Passwords are stored as hashes, not in plain text. Session tokens are hashed and expire. Access to data should be limited to persons and services that need it to operate FootDraft. Despite security measures, no method of transmitting or storing data on the internet is completely secure. If you suspect unauthorized access to your account, contact us at [email protected].
FootDraft is not directed to children under 16. Users under 16 may use the Service only with the consent and under the supervision of a parent or legal guardian. If you are a parent or guardian and believe that a child has created an account or provided data without the required consent, contact us at [email protected]. In justified cases, we may delete an account or data of a person who does not meet the age requirements set out in the Terms.
FootDraft is an unofficial, independent fan-made game and is not affiliated with, sponsored by, approved by or endorsed by EA Sports, Electronic Arts, FIFA, FIFPRO, UEFA, leagues, clubs, federations, competition organizers or players. Player names and team abbreviations or identifiers may appear in the game only to identify game context and support gameplay mechanics. FootDraft does not use official crests, logos, kits, shirts, player photos or player likenesses. All ratings, evaluations, statistics and simulations are part of FootDraft's original system. If you are a rights-holder or represent an entity whose rights may be affected by game elements, you may contact us at [email protected].
We may update this Privacy Policy, in particular if the way the game works changes, we add new features or new types of data, change service providers, introduce advertising, payments, premium features or analytics, laws change or we need to clarify privacy rules. We will inform users of material changes in a visible way in the game or on the website.
For matters related to privacy, personal data, account, data deletion or this Privacy Policy, you can contact us at: Email: [email protected], Operator / Data Controller: Alexander Organ. The Operator's correspondence address may be made available where required by law or upon a justified request of an authorized entity.
This Privacy Policy applies to the free beta version of FootDraft. Before introducing advertising, payments, premium features, additional analytics, marketing communications or a material change of infrastructure, this document should be updated.