← Back to home

Privacy Policy

Last updated: March 19, 2026


Futbolpals.com ("we," "us," or "our") operates the Futbolpals.com website and platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. By accessing or using the Service you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

  • Account information: email address, password, nickname (required), first name, last name, country code, and preferred language.
  • Profile information: avatar image (uploaded or selected from presets), default playing position, and preferred landing page.
  • Contact information: phone number in E.164 format (optional, used for WhatsApp notifications when enabled).
  • Event and activity data: events you create or attend, RSVP responses, game results, player statistics, team assignments, and terms and conditions you author for your events.
  • Social features: your saved friends list (email addresses and user IDs of friends you add).
  • Communications: messages you send through the platform, including WhatsApp messages processed via our integration.

1.2 Information Collected Automatically

  • Cookies and local storage: authentication session tokens, language preference, UI state. See our Cookie Policy for details.
  • Usage data: we do not currently use third-party analytics or tracking services. If we add analytics in the future we will update this policy and notify you.

1.3 Information from Third Parties

  • OAuth providers: if you sign in with Google, we receive your email address and basic profile information from Google.

2. How We Use Your Information

We use your information to:

  • Create and manage your account.
  • Operate the Service, including event creation, RSVP management, team generation, and statistics tracking.
  • Send transactional communications such as event invitations, RSVP confirmations, password reset emails, and account notifications.
  • Provide optional features such as AI-powered team generation and WhatsApp notifications.
  • Verify your identity and prevent fraud (e.g., CAPTCHA during signup).
  • Enforce our Terms of Service and comply with legal obligations.
  • Improve and develop the Service.

3. Third-Party Service Providers

We share your information with the following categories of service providers, solely for the purposes described in this policy:

ProviderPurposeData shared
SupabaseDatabase, authentication, file storageAll account and event data
ResendTransactional email deliveryEmail address, message content
Meta (WhatsApp Cloud API)WhatsApp notifications (when enabled)Phone number, message content
OpenAIAI-powered team generation (optional feature)Player nicknames, positions, anonymized stats
CloudflareCAPTCHA verification (Turnstile)Browser interaction data during signup
DiceBearAvatar preset generationNo personal data (avatar style parameters only)

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (e.g., resolving disputes, enforcing our agreements).

Event data (results, statistics, team records) may be retained in anonymized form after account deletion to maintain the integrity of historical records for other participants.

5. Data Security

We implement industry-standard technical and organizational measures to protect your personal information, including encryption in transit (TLS/HTTPS), secure authentication, and row-level security policies on our database. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. International Data Transfers

Our Service and its third-party providers are primarily based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers. Where required by law, we rely on Standard Contractual Clauses or other appropriate safeguards for international data transfers.

7. Your Rights

7.1 General Rights

Regardless of your location, you may:

  • Access and update your personal information through your profile settings.
  • Request a copy of your personal data.
  • Request deletion of your account and associated data.
  • Withdraw consent for optional data processing (e.g., WhatsApp notifications).

7.2 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation, including:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

Our legal bases for processing are: performance of a contract (providing the Service), legitimate interests (improving the Service, preventing fraud), consent (optional features like WhatsApp notifications), and compliance with legal obligations.

You also have the right to lodge a complaint with your local data protection supervisory authority.

7.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose.
  • Request deletion of your personal information.
  • Opt out of the sale or sharing of your personal information. We do not sell or share your personal information as defined by the CCPA/CPRA.
  • Non-discrimination for exercising your privacy rights.

8. Children and Minors

The Free tier of the Service is intended for users who are at least 16 years of age. We do not knowingly collect personal information from children under 16 through the Free tier. If we become aware that a user under 16 has created a Free tier account, we will take steps to delete the account and associated data.

The Pro and Business tiers support organized youth activities such as kids' leagues and tournaments. For users under 16 on these tiers, we require verifiable parental or guardian consent before collecting or processing any personal information. Parents and guardians may review, modify, or request deletion of their child's data at any time by contacting us.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date. For material changes, we will provide notice through the Service (e.g., an in-app banner) or via email to the address associated with your account at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: contact@futbolpals.com