Privacy Policy
Last updated: November 5, 2026
This policy explains what personal data FootyBoss collects, why, who sees it, how long we keep it and what you can do about it. The controller is Roman Larin.
Who is responsible
Roman Larin, Ukraine. Privacy questions and requests: hello@footyboss.net.
What we collect
- Account: email, password (stored only as a hash), sign-in method (email or Google), language, the confirmation that you are 18 or older and accepted the terms, and the time you registered and last signed in.
- Game: your club, players, lineup, matches, market and league activity, coins and gems, and the history of your purchases and rewards.
- Payments: invoices, amounts, the USDT transaction details the gateway reports to us. We never see your wallet keys.
- Safety: IP address at sign-up, at sign-in and on bids and market deals (including its approximate country, to apply the Belgium rule), device identifier and technical headers, used to detect multiple accounts, fraud and abuse and to apply rate limits.
- Reports you send us: the text, the optional email (we do not verify it) and, if you were signed in, your account.
- With your consent: analytics about how the site is used (see cookies below), and a push subscription if you turn notifications on.
Why we use it
- To run the game and your account, which is the contract between us (legal basis: performance of a contract).
- To take and credit payments, keep financial records and meet legal duties (legal obligation).
- To keep the game fair and secure: fraud, multi-accounting, abuse (legitimate interest).
- To send you service emails: confirmation, password reset, receipts (contract), and optional news such as a season summary or a "we miss you" note (legitimate interest, with an unsubscribe link in every one).
- To measure and improve the site with analytics, only after you consent (consent).
Push notifications and emails
Push notifications are off until you turn them on in your profile, where you can switch each type on or off. Remove the subscription in the browser or in your profile to stop them.
Optional emails have an unsubscribe link that works in one click. Service emails about your account and payments are still sent.
How long we keep it and deleting your account
We keep account and game data while your account exists. When you delete your account in your profile, your account data is deleted, and your wallet history goes with it. Our automatic database backups are kept for 7 days, so deleted data can stay in them for up to 7 days. Server logs hold little personal data (for example an account id, or the address of an email that could not be sent) and are overwritten as new entries come in.
Reports you sent and the logs of administrator actions are kept for safety and anti-fraud for as long as we need them for that, for example to settle a dispute or to recognise repeated abuse; there is no fixed deletion date, and they are not removed automatically when you delete your account. Payment records (the invoice, the amount, the transaction and the email address of the account) stay after you delete your account, for accounting; we keep them at least as long as the law requires.
We store the IP address and device identifier of your sign-up and of your last sign-in, and of your bids and market deals, for anti-fraud. When you delete your account, the sign-up and sign-in ones and those of your bids are deleted with it, and those on your market deals are cleared from the deal records, which stay without your identity.
Your daily activity history (which days you were active) is used for statistics. When you delete your account it is detached from you and kept under a random identifier, so the totals stay right but nothing links them to you.
When an administrator deletes an account, the log of administrator actions keeps the email address of that account for as long as the log itself is kept (see above).
Your rights
Depending on where you live, you can ask to see your data, correct it, delete it, restrict or object to its use, receive a copy in a common format, and withdraw consent at any time. Write to hello@footyboss.net; we answer within the time the law gives us.
If you think we handle your data wrongly, you can complain to the data protection authority where you live or work. We would be glad to hear from you first.
Age: 18+
FootyBoss is not for people under 18, and we do not knowingly collect their data. If you think a minor has an account, tell us through /report or at hello@footyboss.net and we will delete it.
Security
Passwords are hashed, connections are encrypted, and access to production data is limited. No system is perfectly safe; if a breach affects you, we will tell you and the authorities as the law requires.
Changes to this policy
We will update this page when our practice changes. The date at the top shows the last change; we will tell you about important changes in the game or by email.