Chapter 1
About this policy
1.1Who we are
Football Fuss™ is developed and operated by an independent developer under the Sports Fuss™ name ("Football Fuss", "we", "us" or "our"). We are the controller of the personal information described in this policy. This means that we determine how and why that information is used, and we are responsible for protecting it and for answering any request you make about it.
Football Fuss is a small, independently run service. We have not appointed a Data Protection Officer, as the law does not require one for a service of this nature. Privacy questions and requests are handled directly by the developer responsible for the Services.
Any question about this policy may be sent to support@sportsfuss.com.
1.2Scope of this policy
This policy applies to your use of the Football Fuss mobile application for Android and iOS (the "App"), the Football Fuss website (the "Website"), and the account, notification, email, feedback and support features associated with them (together, the "Services"). It applies whether or not you create an optional Football Fuss account (an "Account").
"Personal information" means any information that identifies you or could reasonably be used to identify you, either on its own or in combination with other information. UK data-protection law refers to this as "personal data". Information that has been anonymised so that it can no longer be linked to you is not personal information.
This policy does not apply to third-party websites, applications or services that the Services link to or display, such as club websites, news publishers, YouTube or Google Maps. Those services are governed by their own privacy policies, which we encourage you to read before providing them with any information.
1.3Summary
The remainder of this policy contains the full detail. In summary:
- Fixtures, scores, tables, statistics and news can be viewed without creating an Account.
- An Account is optional. It holds your sign-in details, your favourite club and the competitions and matches you follow, so that they can be synchronised across devices.
- Notifications are optional and can be used without an Account.
- We send marketing emails, such as news of new features and releases, only if you opt in, and you can unsubscribe at any time.
- We use Firebase Analytics only with your consent. We use Firebase Crashlytics to receive crash reports, which you can switch off.
- We do not sell personal information.
- We do not request your precise location, contacts or photographs, and we never handle payment details.
- Advertising is shown only in the Android App, and your advertising privacy choices can be changed there at any time.
- You may delete your Account and its synchronised data at any time, either in the App or through the Website, and the deletion takes effect immediately.
Chapter 2
Information we collect
We collect personal information in three ways: when you provide it to us, automatically when you use the Services, and from third parties. We collect only the information required for the purposes described in chapter 3, and we design each feature to work with as little personal information as possible.
2.1Information you provide
Account information. An Account is created when you choose to sign in with Google, with Apple, or with an email address and password. When you do, we receive and store:
- your email address. If you sign in with Apple and choose to hide your email address, we receive a private relay address created by Apple instead;
- your name, as provided by your sign-in provider;
- your profile picture, if your sign-in provider supplies one. Google supplies a link to your Google profile picture; Apple does not supply a picture, and neither does an email-and-password Account;
- a unique account identifier issued by Firebase Authentication; and
- the dates on which your Account was created and linked, and the date on which it was last used.
Your profile picture is displayed only to you, within your Account screens in the App and on the Website. It is loaded from your sign-in provider and we do not store a copy of it on our servers.
We never receive or store your Google or Apple password. If you create an Account with an email address and password, the password is held by Firebase Authentication in a securely hashed form and is never visible to us.
Agreements and marketing choices. When you create an Account, you are asked to confirm that you have read our Terms of Use and this Privacy Policy. Separately, and optionally, you may tick a box to receive marketing emails (see section 4.3). We record which versions of the Terms of Use and this Privacy Policy you confirmed, whether you opted in to marketing, and when. If you created an Account before these choices were introduced, you will be asked the next time you sign in.
Age confirmation. Betting odds and match predictions are shown only to Account holders who confirm that they are 18 or over. If you choose to see them, we record that you confirmed and when. We do not ask for your date of birth, and we do not receive your age from Google or Apple. You may withdraw the confirmation at any time, which hides odds again.
Favourites and follows. If you have an Account, we store your favourite club and the competitions and matches you follow, together with the dates on which they were last changed, so that they can be synchronised between your devices. When you unfollow a competition or match, a record of that change is kept with your Account so that your other devices can apply it too.
Notification preferences. We store which types of alert you have enabled: kick-off, line-ups, goals, full-time results and highlights.
Feedback. You may send feedback through the App or the Website. Feedback consists of a rating from one to five, a written message of up to 2,000 characters, or both, together with the context described in section 2.2. Feedback is designed to be anonymous: the Services reject feedback messages that contain an email address or telephone number. If you would like a reply, please use the contact form or email us instead.
Contact form. The contact form on the Website asks you to choose a reason for your message (for example, support, a football data correction, or a partnership enquiry), to write your message, and, optionally, to give an email address so that we can reply. If you leave the email address blank, your message is anonymous and we cannot reply to it.
Correspondence. If you email support@sportsfuss.com, enquiries@sportsfuss.com or partnership@sportsfuss.com, or give an email address in the contact form, we receive your email address, your name if your email client includes it, and the content of your message and any attachments.
Please do not include passwords, payment details or sensitive personal information in feedback or correspondence.
2.2Information collected automatically
Technical request information. Each time the App or the Website requests data from our servers, our hosting provider records standard technical information. This includes your IP address, the date and time of the request, the address of the page or data requested, your browser or device type (known as the user agent) and the response status. This information is used to operate and secure the Services.
Search queries. When you search for a club, competition or player, the text you type is sent to our servers so that matching results can be returned. Search queries are not linked to your Account, but, as with any other request, they may appear in technical request information for a short period.
Device and notification information. If you enable notifications, we store:
- a device notification token issued by Firebase Cloud Messaging, which allows alerts to be delivered to your installation of the App;
- your device platform (Android or iOS);
- the dates on which the token was registered and last confirmed; and
- an identifier for your installation of the App. If you are not signed in, this identifier is anonymous, as described in section 4.1.
Notification delivery records. For each alert we send, we record the identifier it was sent to and a reference to the match event concerned (for example, a particular goal in a particular match), so that the same alert is never delivered twice. These records contain no names or contact details.
Feedback context. When you submit feedback, the App or Website also sends: the type of feedback; the version of the App; your device platform; your language setting; and, where relevant, the screen, club or match to which the feedback relates. If you are signed in, your account identifier is attached so that the issue can be investigated in context. We may add an internal status and notes to feedback and contact messages while we handle them.
Usage analytics (with your consent). If you agree, Firebase Analytics collects information about how the App is used, so that we can understand which features are useful and where the App can be improved. This includes the screens you view, the features you use, when you open the App and for how long, the App version, your device model, operating system version, language setting and approximate country (derived from your IP address), and an identifier that Firebase generates for your installation of the App. We do not send your name, email address or account identifier to Firebase Analytics, and we do not use it for advertising. Analytics stays off unless you agree to it, and you can change your mind at any time in the App's settings.
Crash reports. If the App crashes or encounters a serious error, Firebase Crashlytics sends us a crash report. A crash report includes the technical details of the error, the App version, your device model and operating system version, the device's state at the time (such as available memory and storage, and screen orientation), and an identifier that Crashlytics generates for your installation of the App. Crash reports do not include your name or email address. You can switch crash reporting off in the App's settings.
Advertising information (Android only). The Google Mobile Ads software in the Android App may collect your IP address, device and advertising identifiers (including the Android Advertising ID), information about your device and the App, your interactions with advertisements, and diagnostic information. Further detail is given in chapter 5.
Information stored on your device. The App stores your preferences, favourites, follows and cached football data on your device so that it opens quickly and works when your connection is poor. This information remains on your device and is not sent to us unless you synchronise it to an Account.
The Website does not use analytics tools of any kind.
2.3Information from third parties
- Sign-in providers. When you sign in with Google or Apple, that provider shares your email address, name, a unique identifier and, in Google's case, a link to your profile picture with us through Firebase Authentication. We do not receive access to your contacts, files or any other data held in that account.
- Google advertising consent. In the Android App, Google's User Messaging Platform makes your advertising consent choices available to the App so that the advertisements shown respect those choices.
- Football-data providers and news publishers. We obtain fixtures, results, statistics and news from third-party sources. This information concerns football and the people involved in it, as described in section 2.4, and does not contain information about users of the Services.
2.4Information about footballers and other public figures
Football Fuss publishes football information that includes personal information about players, managers, referees and other individuals involved in professional football. This may include names, photographs, nationality, age, playing position, squad number, appearances, match events (such as goals, substitutions and disciplinary cards), performance ratings, statistics and news coverage.
This information is obtained from licensed football-data providers, news publishers' feeds and other public sources, and relates to the public, professional sporting activity of the individuals concerned. We process it on the basis of our legitimate interests in providing football information and news, as set out in chapter 3. We do not publish private contact details or information about individuals' private lives.
If you are one of these individuals and wish to ask about, correct or object to information concerning you, please contact support@sportsfuss.com. Because much of this information is supplied by third parties, we may need to refer a correction to the original source.
2.5Device permissions
The App asks for device permissions only when a feature needs them, and you can refuse or later withdraw any of them in your device settings (see the table in section 12.3). Refusing a permission only disables the feature that relies on it.
| Permission | Platform | Why it is needed |
|---|---|---|
| Notifications | Android and iOS | To display the match alerts you have enabled. Requested only when you turn alerts on. |
| Calendar | iOS | To add a match's kick-off to your calendar when you tap Add to Calendar. The App creates the event; it does not read your existing calendar entries. On Android, the App hands the event to your calendar app instead, which needs no permission. |
| Advertising ID | Android | Used by Google Mobile Ads to show and measure advertising, subject to your advertising privacy choices. |
| Internet and network state | Android and iOS | To download football information and to tell whether you are online. |
2.6Information we do not collect
We do not request or collect:
- your precise device location;
- your contacts, photographs, files, camera or microphone;
- payment card or bank details, as the Services contain no purchases;
- your browsing activity on other websites or in other apps; or
- sensitive information, such as information about your health, beliefs or ethnic origin.
Chapter 3
How we use information and our lawful bases
UK data-protection law requires a lawful basis for each use of personal information. The table below sets out each purpose for which we use personal information, the information involved and the lawful basis on which we rely.
| Purpose | Information used | Lawful basis |
|---|---|---|
| Providing football information and operating the Services | Technical request information and search queries | Legitimate interests: providing a functioning football information service |
| Creating your Account and synchronising your favourite club and follows | Account information, favourites and follows | Contract: providing a feature you have requested |
| Displaying your name and profile picture in your Account screens | Name and profile picture | Contract: providing a feature you have requested |
| Recording your confirmation of our Terms of Use and this Privacy Policy, and your marketing choice | Account identifier, document versions, choices and dates | Legal obligation: keeping evidence of consent; and legitimate interests: keeping a record of the terms you agreed to |
| Showing betting odds and predictions only to adults | Account identifier, age confirmation and its date | Legitimate interests: keeping gambling-related content away from children |
| Sending the match alerts you have enabled | Notification preferences, follows, device token, platform, identifier and delivery records | Contract: providing a feature you have requested |
| Sending marketing emails about new features, releases and development updates | Email address, name and marketing choice | Consent, given by ticking the marketing box |
| Telling you about changes to our Terms of Use or this Privacy Policy, and other service messages | Email address and name | Legitimate interests and legal obligation: keeping you informed about the service you use |
| Responding to feedback, contact messages and correspondence, and resolving problems | Feedback, feedback context, contact messages and correspondence | Legitimate interests: supporting and improving the Services |
| Understanding how the App is used, to improve it | Usage analytics | Consent, given in the App |
| Diagnosing and fixing crashes | Crash reports | Legitimate interests: keeping the App stable and secure |
| Securing the Services, limiting abuse and preventing misuse | Technical request information, account identifier and message volumes | Legitimate interests: protecting the Services and their users |
| Showing personalised advertising in the Android App | Advertising information | Consent, given through the advertising privacy choices message |
| Showing non-personalised advertising and preventing advertising fraud | Advertising information | Legitimate interests: funding the Services, which are free to use |
| Publishing football information about public figures | Information described in section 2.4 | Legitimate interests: providing football information and news |
| Responding to requests to exercise your rights | Account information and correspondence | Legal obligation |
| Complying with legal obligations and handling legal claims | Any information relevant to the obligation or claim | Legal obligation, or legitimate interests in establishing or defending legal claims |
Where we rely on legitimate interests, we have balanced those interests against your rights and reasonable expectations, and concluded that the processing is limited, expected and not unduly intrusive. You may object to it at any time (see chapter 12), and you may ask us for more information about how we carried out that balancing.
Where we rely on contract, the processing is needed to provide a feature you have chosen to use. If you prefer that we do not process that information, you can stop using the feature, for example by turning off notifications or deleting your Account.
Where we rely on consent, you may withdraw it at any time, as easily as you gave it. Withdrawal does not affect the lawfulness of processing carried out before it.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. The only automated processing in the Services is ordinary feature logic, such as deciding which alerts to send based on the matches you follow.
Should we wish to use personal information for a new purpose that is incompatible with those described above, we will update this policy and, where required by law, obtain your consent beforehand.
Chapter 4
Notifications, emails and marketing
4.1Push notifications
Notifications are disabled until you enable them. Once enabled, we send the alerts you have chosen (kick-off, line-ups, goals, full-time results and highlights) for your favourite club and the competitions and matches you follow. Alerts are delivered through Firebase Cloud Messaging, which passes them to Google's notification service on Android or Apple's notification service on iOS.
So that notifications can be provided without an Account, Firebase Authentication creates an anonymous identifier for your installation of the App. This identifier is not linked to your name or email address. If you later sign in, the notification registration for that device is moved to your Account and the anonymous identifier is deleted, so that you do not receive each alert twice.
You may choose which alerts you receive within the App. You may also disable notifications entirely in your device settings; the table in section 12.3 explains how.
4.2Service emails
If you have an Account, we may email you about matters concerning the Services themselves, whether or not you have opted in to marketing. These are:
- notice of a change to our Terms of Use or this Privacy Policy that affects you;
- notice of a security incident affecting your Account or information; and
- replies to requests or messages you have sent us.
Service emails are not marketing. We will never ask you for your password or for payment details by email.
4.3Marketing emails
With your consent, we send marketing emails about Football Fuss, such as announcements of new features, new releases of the App and updates on its development. We do not send marketing by text message or push notification, and we do not provide, rent or sell your information to any third party for its own marketing.
You are asked for consent when you create an Account, using a box that is not ticked in advance. Creating an Account does not depend on agreeing to marketing.
You may withdraw your consent at any time, by:
- using the unsubscribe link included in every marketing email;
- turning off marketing emails in your Account settings in the App or on the Website; or
- emailing support@sportsfuss.com.
Once you withdraw consent, we stop sending marketing emails straight away, although an email already being sent at that moment may still arrive. We keep a record that you opted out, so that you are not contacted again by mistake.
Chapter 5
Advertising
5.1Advertising in the Android App
Advertising allows Football Fuss to remain free of charge. The Android App displays advertisements through Google Mobile Ads. The iOS App and the Website do not currently display advertising, and do not include Google's advertising software.
We do not choose the individual advertisements you see, and we do not give Google your name, email address, Account information, favourites or follows. Google selects advertisements using the information its own software collects, as described in section 2.2, and in line with your advertising privacy choices.
Google acts as an independent controller for much of the information collected by its advertising software, and Google's own privacy policy applies to that information. Advertising information is collected by Google's software and is not stored with your Football Fuss Account.
5.2Your advertising privacy choices
Where the law requires it, including in the United Kingdom and the European Economic Area, the App uses Google's User Messaging Platform to ask for your consent before showing personalised advertising, and to record your choices. Personalised advertising uses information about you to choose advertisements that are more likely to interest you. If you decline, advertisements may still be shown, but they will be selected without using your personal information for personalisation.
You may change these choices at any time through Ad privacy choices in the App's settings, which is shown wherever the law requires it.
Your Android Advertising ID belongs to your device rather than to the App, so it is reset or deleted in your device settings rather than in Football Fuss; the table in section 12.3 explains how. You can also manage how Google uses information for advertising through the advertising settings of your Google account.
Chapter 6
Cookies and similar technologies
Cookies are small files that a website stores in your browser. Mobile applications use comparable on-device storage and software components. The table below lists every such technology used by the Services.
| Name or type | Where | Purpose | Duration |
|---|---|---|---|
| ff_session cookie | Website | Keeps you signed in. It is marked HTTP-only and Secure, so it cannot be read by scripts on the page and is transmitted only over encrypted connections. It is set only when you sign in. | Up to 14 days, or until you sign out |
| App storage | App | Stores your favourites, follows, settings and cached football data | Until you clear the App's data or uninstall it |
| Firebase Authentication | App and Website | Maintains your sign-in, or your anonymous identifier | Until you sign out, delete your Account or uninstall the App |
| Firebase Cloud Messaging | App | Holds your device notification token | Until you uninstall the App or delete your Account |
| Firebase Analytics | App, only with consent | Measures how the App is used | Until you withdraw consent, clear the App's data or uninstall it |
| Firebase Crashlytics | App | Records and sends crash reports | Until you switch crash reports off, clear the App's data or uninstall it |
| Google Mobile Ads | Android App | Displays and measures advertising, prevents fraud and records your advertising privacy choices | Determined by Google; see Google's privacy policy |
The ff_session cookie is strictly necessary for signing in, and therefore does not require your consent. The Website does not set any analytics or advertising cookies, and does not use your browser's local storage. That is why no cookie banner is displayed on the Website.
Third-party content, such as YouTube videos or Google Maps, may set its own cookies when you play or open it. You can block or delete cookies through your browser settings. Blocking the ff_session cookie will prevent you from signing in to the Website, but will not affect anything else.
Chapter 7
How we share information
We do not sell personal information. We share it only in the circumstances described below, and only to the extent necessary in each case.
7.1Service providers
The following providers process personal information on our behalf, in accordance with our instructions and solely to provide their services to us. They are not permitted to use it for their own purposes.
| Provider | Service provided | Information involved |
|---|---|---|
| Vercel | Hosts the Website and the servers used by the App | Technical request information and search queries |
| Neon | Hosts our database | Account, favourites, follows, agreement and marketing records, notification records, feedback and contact messages |
| Firebase Authentication | Provides sign-in and anonymous identifiers | Email address, name, profile picture link and identifiers |
| Firebase Cloud Messaging | Delivers push notifications | Device token and notification content |
| Firebase Analytics | Measures App usage, only with your consent | Usage analytics |
| Firebase Crashlytics | Collects crash reports | Crash reports |
| Resend | Sends emails: contact messages and feedback alerts to our inboxes, and marketing and service emails to you | Email address, name, and the content of the email |
| Cloudflare | Receives email sent to our support@, enquiries@ and partnership@ addresses and forwards it to our mailbox | Your email address and correspondence |
| Google (Gmail) | Hosts the mailbox where our email is read and answered | Your email address and correspondence |
Certain background tasks, principally retrieving football data and deciding which notifications to send, run on a privately operated server under our control. That server uses only the notification information described in section 4.1 and the follows needed to decide who should receive each alert.
7.2Independent third parties
Some third parties determine for themselves how they use the information they receive, under their own privacy policies:
- Google Mobile Ads and the User Messaging Platform, for advertising in the Android App (see chapter 5);
- Google Maps, when you open a location such as a stadium;
- YouTube, when you play a video shown in the Services; and
- your sign-in provider, Google or Apple, when you sign in.
When you follow a link to another website, such as a club's official website or a news article, that website receives standard request information from your browser, including your IP address. A link does not indicate that the organisation concerned operates, endorses or sponsors Football Fuss unless we expressly state otherwise.
When you share a match or article, the sharing is handled by your device's own share function. We do not see with whom you share it or what you add to it. When you add a match to your calendar, the event is created on your device and is not sent to us.
7.3Legal requirements and safety
We may disclose personal information where we reasonably believe this is necessary to:
- comply with applicable law, regulation or a valid legal process, such as a court order;
- respond to a lawful request from a public authority, including a law enforcement agency;
- enforce our terms or investigate potential breaches of them; or
- protect the rights, safety or property of Football Fuss, its users or others, including to prevent fraud or abuse.
Where we are permitted to do so, we will tell you about such a request before disclosing your information. We disclose only the information that is necessary to meet the request.
7.4Change of ownership
If Football Fuss, or any part of it that holds personal information, is transferred to another person or organisation, your information may be transferred as part of that transaction. The recipient would be required to use it in accordance with this policy, and we would notify you before your information became subject to a different privacy policy.
7.5With your consent
We may share personal information in other circumstances at your request or with your consent. For example, if you ask us to send a copy of your information to another organisation, we will do so in accordance with your instructions.
Chapter 8
International transfers
We are based in the United Kingdom, and our web servers operate in London. However, some of our providers are based in, or may process information in, the United States or other countries outside the United Kingdom. In particular:
- Google, which operates Firebase, Gmail, Google Mobile Ads, Google Maps and YouTube, is based in the United States;
- Vercel, Neon, Resend and Cloudflare are companies based in the United States, although our servers and data may be hosted in other regions; and
- Apple's and Google's notification services, which deliver alerts to your device, operate globally.
Where personal information is transferred outside the United Kingdom, we rely on a lawful transfer mechanism. This may be UK adequacy regulations, including the UK–US Data Bridge for organisations certified under it, or contractual safeguards approved for transfers from the United Kingdom, such as the International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses.
Further information about the safeguards applying to a particular provider is available on request from support@sportsfuss.com.
Chapter 9
Retention of information
We retain personal information only for as long as it is required for the purposes described in chapter 3. After that, it is deleted or anonymised. The table below sets out how long each type of information is kept.
| Information | Retention period |
|---|---|
| Account information, favourite club and follows | Until you delete your Account |
| Records of the Terms of Use and Privacy Policy versions you confirmed, and your marketing choices | Until you delete your Account. If you opt out of marketing, the record of your opt-out is kept for as long as your Account exists, so that you are not contacted again. |
| Confirmation that you are 18 or over | Until you withdraw it or delete your Account |
| Notification preferences | Until you delete your Account, or, without an Account, for as long as your anonymous identifier exists |
| Device notification tokens | Until you delete your Account, turn every alert off in the App, or withdraw the App's notification permission in your device settings (in which case the token is deleted the next time you open the App). A token is also deleted when Firebase Cloud Messaging reports it as no longer valid, which usually happens after the App is uninstalled. |
| Anonymous identifiers | Deleted immediately if you sign in on that device. Otherwise, deleted automatically, normally within a day, once no device is registered to them, provided they were never linked to an Account. |
| Notification delivery records | 30 days, after which they are deleted automatically. Records linked to an Account are deleted straight away if you delete your Account. |
| Feedback | 24 months from when it was sent, after which it is deleted automatically. If you delete your Account, the feedback is no longer associated with you. |
| Contact-form messages and correspondence | Contact-form messages are deleted automatically 24 months after we receive them. Email correspondence is kept for as long as needed to deal with your message and to keep a reasonable record of how it was handled. You may ask us to delete either at any time. |
| Usage analytics | Two months in Firebase Analytics, after which individual-level data is deleted |
| Crash reports | 90 days in Firebase Crashlytics |
| Website session cookie | Up to 14 days, or until you sign out |
| Hosting and security logs | Short periods determined by our hosting providers |
| Information on your device | Until you clear the App's data or uninstall it |
| Advertising information held by Google | In accordance with Google's own retention policy |
Information that remains in provider backups or logs after deletion is not used to restore a deleted Account, and expires in accordance with the provider's normal retention cycle. We may retain information for longer where required by law, or where it is needed to establish, exercise or defend a legal claim, in which case we keep only what is necessary for that purpose.
Chapter 10
Deleting your account and data
10.1How to delete your Account
You may delete your Account at any time, by any of the following methods:
- in the App, under Settings → Account → Delete my data;
- on the Website, at /account/deletion, if you no longer have access to the App; or
- by emailing support@sportsfuss.com from the email address associated with your Account.
10.2What is deleted
A successful deletion made in the App removes the following from our active systems immediately:
- your Account record, including your email address and name;
- your sign-in identity in Firebase Authentication;
- your favourite club and the competitions and matches you follow;
- your notification preferences;
- your records of agreement to our Terms of Use and this Privacy Policy, your marketing choices and any confirmation that you are 18 or over;
- all device notification tokens registered to your Account; and
- the records of notifications sent to you.
Any feedback you submitted is no longer associated with your Account, and is otherwise retained only as described in chapter 9.
10.3What is not deleted
Deleting your Account does not remove:
- contact-form messages and emails you have sent to us, which you may ask us to delete separately;
- usage analytics and crash reports, which are not linked to your Account and expire as described in chapter 9;
- information stored only on your device, which you can remove by clearing the App's data or uninstalling it;
- information held by Google for advertising purposes, which you can manage through your device's advertising settings and your Google account; or
- football information about public figures, which is not linked to your Account.
10.4Requests made by email
To protect your Account, we will ask you to make an email deletion request from the email address associated with your Account, or to confirm your identity in another reasonable way. Deletion requests made by email are handled without undue delay and, in any event, within one month. We will confirm by email once the deletion is complete.
Chapter 11
Security
We apply technical and organisational measures appropriate to the nature of the information we hold and the risks involved. These include:
- encrypting all connections between the App, the Website and our servers using HTTPS;
- requiring a verified sign-in for every request that reads or changes Account information, so that each person can access only their own Account;
- keeping public football data separate from Account information;
- restricting administrative access to Account information, feedback and contact messages to what is necessary to operate the Services;
- limiting how many feedback and contact messages can be submitted in an hour, both per Account and across the Services as a whole;
- rejecting feedback that contains an email address or telephone number, and accepting an email address on the contact form only in the field provided for it;
- keeping access keys and credentials for our providers out of the App and the Website; and
- collecting as little personal information as possible in the first place.
No method of transmission or storage is entirely secure, and we cannot guarantee the absolute security of your information. If a personal data breach is likely to result in a high risk to your rights and freedoms, we will inform you without undue delay. We will also report breaches to the Information Commissioner's Office where the law requires it, normally within 72 hours of becoming aware of them.
If you believe that your Account or information has been accessed without authorisation, please contact support@sportsfuss.com immediately. You can also protect your Account by keeping the account you use to sign in, such as your Google or Apple account, secure.
Chapter 12
Your rights and choices
12.1Your data-protection rights
Under UK data-protection law, and subject to its conditions and exemptions, you have the following rights:
- Right of access. You may ask whether we hold personal information about you and request a copy of it, together with information about how it is used.
- Right to rectification. You may ask us to correct personal information that is inaccurate, or to complete information that is incomplete.
- Right to erasure. You may ask us to delete your personal information. You can delete your Account yourself at any time, as described in chapter 10.
- Right to restrict processing. You may ask us to limit how we use your personal information, for example while we check its accuracy or consider an objection.
- Right to object. You may object to our processing of your personal information where we rely on legitimate interests. We will stop unless we have compelling legitimate grounds that override your interests, or need the information for a legal claim.
- Right to object to direct marketing. You may tell us at any time to stop sending you marketing. This right is absolute: we will always stop.
- Right to data portability. You may ask to receive the personal information you provided to us in a structured, commonly used and machine-readable format, or to have it transferred to another organisation where technically feasible.
- Right to withdraw consent. Where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
12.2Exercising your rights
To exercise any of these rights, email support@sportsfuss.com, stating the right you wish to exercise and, where possible, the information or feature your request concerns.
Making a request is free. The law allows us to charge a reasonable fee, or to refuse a request, only if it is manifestly unfounded or excessive, for example if it is clearly made to cause disruption rather than to exercise a right, or repeats a request we have just answered in full. If we ever decided that a request fell into that category, we would explain why, and you could challenge that decision with the Information Commissioner's Office.
We may ask for information to confirm your identity before acting on a request, for example by asking you to write from the email address associated with your Account. This protects your information from being disclosed to, or deleted by, someone else.
We will respond without undue delay and within one month of receiving your request. Where a request is complex, or where you have made several requests, this period may be extended by up to two further months, in which case we will inform you of the extension and the reasons for it within the first month.
12.3Controls within the Services and on your device
Many choices can be made directly, without contacting us. The table below shows where to find each one. Menu names can differ slightly between device makers and software versions.
| What you want to do | In Football Fuss | On iPhone or iPad | On Android |
|---|---|---|---|
| Choose which alerts you receive | Settings → Notifications | Not needed | Not needed |
| Turn notifications off completely | Not needed | Settings → Notifications → Football Fuss → turn off Allow Notifications | Settings → Apps → Football Fuss → Notifications → turn off |
| Stop or start marketing emails | Settings → Account, or the unsubscribe link in any marketing email | Not needed | Not needed |
| Turn usage analytics on or off | Settings → Privacy | Not needed | Not needed |
| Turn crash reports on or off | Settings → Privacy | Not needed | Not needed |
| Change advertising privacy choices | Settings → Ad privacy choices (where shown) | Not applicable: no advertising | Not needed |
| Reset or delete your Advertising ID | Not available in apps | Not applicable | Settings → Privacy → Ads, or Settings → Google → Ads → Reset or Delete advertising ID |
| Withdraw calendar access | Not needed | Settings → Privacy & Security → Calendars → Football Fuss | Not applicable: no permission used |
| Remove information stored on your device | Not needed | Delete the App | Settings → Apps → Football Fuss → Storage → Clear data, or uninstall the App |
| Sign out | Settings → Account → Sign out | Not needed | Not needed |
| Delete your Account and its data | Settings → Account → Delete my data, or /account/deletion on the Website | Not needed | Not needed |
You can also use Football Fuss without creating an Account at all.
12.4Complaints
If you are dissatisfied with how we have handled your personal information, please contact support@sportsfuss.com in the first instance so that we can address your concern. We will acknowledge a privacy complaint within 30 days, investigate it, and inform you of the outcome without undue delay.
You also have the right to lodge a complaint with the UK Information Commissioner's Office, which is the UK's independent authority for data protection, or with the data-protection authority in the country where you live or work. We would, however, appreciate the opportunity to address your concern first.
Chapter 13
Children
The Services are intended for a general audience interested in football and are not directed at children under the age of 13. Children under 13 should not create an Account or submit feedback. Betting odds and match predictions are shown only to Account holders who confirm that they are 18 or over.
In the United Kingdom, a child under 13 cannot give valid consent to the use of their personal information for online services that rely on consent, such as marketing emails or usage analytics, and a parent or guardian must do so on their behalf.
We do not knowingly collect personal information from children under 13. If we learn that we hold such information, we will delete it. If you believe that a child under 13 has provided us with personal information, please contact support@sportsfuss.com and we will delete it promptly.
Chapter 14
Users outside the United Kingdom
The Services are operated from the United Kingdom, and this policy is written primarily with reference to UK data-protection law, namely the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations, as amended.
If you live in the European Economic Area, you have equivalent rights under the EU General Data Protection Regulation to those described in chapter 12, and you may lodge a complaint with the data-protection authority in your country of residence, place of work or the place of an alleged infringement.
If you live elsewhere, you may have rights under the law of your country. Please contact us, and we will handle your request in accordance with this policy and the law that applies to you.
Chapter 15
Changes to this policy
We may update this policy from time to time, for example to reflect new features, changes to our providers or changes in the law. The current version is always available on the Website, with its effective date shown at the top.
Where a change materially affects how we handle your personal information, we will notify you before the change takes effect: by email if you have an Account, and in the App or on the Website otherwise. Where the law requires it, we will obtain your consent. Minor changes, such as corrections or clarifications, take effect when the updated policy is published.
Previous versions of this policy are available on request from support@sportsfuss.com.
Chapter 16
Contact us
You can reach us through the contact form on the Website, or by email:
| Address | Use it for |
|---|---|
| support@sportsfuss.com | Privacy questions, requests to exercise your rights, account deletion, security concerns, and help with the App or Website |
| enquiries@sportsfuss.com | General enquiries and suggestions |
| partnership@sportsfuss.com | Partnership, business, press and media enquiries |
We aim to reply to general privacy questions within a few working days, and to respond to formal requests within the time limits set out in chapter 12. Please include enough detail for us to understand your request, but do not send passwords or other sensitive information by email.
Football Fuss™ by Sports Fuss™
© Sports Fuss. All rights reserved.