Privacy

Football Contracts is a free, non-commercial hobby project run by Hans Andersson, a private individual in Sweden, who is responsible for your personal data under the GDPR. You can reach him through the contact form.

• Your email address — to log you in, activate your account, reset your password, and send the notifications you have switched on.
• Your password, but only as a one-way hash. Nobody, including us, can read it back.
• Your username, which is public on the leaderboard. Your email never is.
• What you do in the game — your bids, coupons, credit history, notification settings and favourite teams.
• Messages you send through the contact form, with the reply address you give.

We do not use cookies, analytics or advertising trackers. Your browser keeps one item in local storage — the token that keeps you logged in — and it is removed when you log out. Our servers keep short-lived technical logs (such as IP addresses of requests) for running the site and stopping abuse.

Your account data is needed to provide the game you signed up for (GDPR article 6.1.b). Technical logs and the contact-form throttle rest on our legitimate interest in keeping the site working and free of abuse (article 6.1.f). Notification emails beyond what your account strictly needs can be switched off at any time.

• Railway hosts the site and its database. The servers are in the EU, in Amsterdam, the Netherlands.
• Resend delivers our emails, so it handles your email address and the content of the mails we send you. Resend is based in the United States.
• API-Football supplies match results and team crests. We send it no personal data, but your browser loads the crest images directly from its servers, which means they see your IP address.

Your account and game data are stored in the EU. Resend is the exception: as a US company, it handles your email address and the mails we send you outside the EU/EEA. Both Railway and Resend act on our behalf under their data processing terms. We never sell your data or share it with anyone else.

For as long as you have an account. When you delete it, your account, bids, credit history, settings and favourites are erased at once. Coupons you held stay in the game without an owner, and contact-form messages lose their link to you.

You can see most of your data on your dashboard and correct your username in settings, where you can also delete your account yourself. For a copy of everything we hold, or anything else about your data, use the contact form.

If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY).