Privacy Policy

Last updated: 29 August 2026 · MVP / beta version

FutBet is currently in active MVP development. This document is a draft baseline and has not been reviewed by a lawyer. It must not be treated as final, binding legal text until reviewed by qualified counsel — particularly given GDPR's applicability to account and payment data described below.

1. Who We Are

FutBet (the "Platform") is a data-first football statistics and analytics service. This Privacy Policy explains what personal data we collect when you create an account or subscribe to Premium, why we collect it, and how it is handled. It does not apply to Guest mode browsing, where no personal data is collected — see the Terms of Service for that distinction.

2. What We Collect

Account data — if you sign in, we (via Supabase Auth) store your email address and, for Google sign-in, the basic profile information Google shares (name, email, profile picture). If you sign up with email/password instead, we store your email and a securely hashed password — we never see or store your password in plain text.
Favorites data — teams or leagues you favorite while signed in are stored against your account so they sync across devices.
Payment data — if you subscribe to Premium, checkout and billing are handled entirely by Stripe. We pass Stripe your account email and receive back a customer/subscription reference; we never see or store your card number. Stripe's own privacy policy governs the payment data it holds directly.
Cookies — a session cookie (set by Supabase Auth) keeps you signed in between visits. This is strictly functional — FutBet does not use analytics, advertising, or tracking cookies.

3. Why We Collect It

We process this data to operate your account (sign-in, session persistence), sync your Favorites, and process and manage your Premium subscription (checkout, renewal, and cancellation via the Stripe Customer Portal). We do not sell personal data, and we do not use it for advertising.

4. Who We Share It With

Personal data is shared only with the processors needed to run the Platform:

Supabase — authentication and database hosting.
Stripe — payment processing and subscription management.
Vercel — application hosting and infrastructure.

We do not sell or rent personal data to third parties.

5. Your Rights (GDPR)

If you are located in the European Economic Area or UK, you have the right to access, correct, export, or delete your personal data, and to withdraw consent at any time. To exercise any of these rights, or to delete your account entirely, contact the Platform operator. [Contact details to be added.]

6. Data Retention

Account and Favorites data is retained for as long as your account is active. If you delete your account, associated personal data is deleted, subject to any records Stripe or Supabase must retain for their own legal/financial-recordkeeping obligations.

7. Changes to This Policy

This Policy may be updated as the Platform develops. Material changes will be reflected by updating the "Last updated" date above.

8. Contact

Questions about this Policy can be directed to the Platform operator. [Contact details to be added.]