Privacy Policy
Effective 5 October 2026
1. Who this policy applies to
This Privacy Policy explains how FCGOLD handles personal data when you use the FCGOLD mobile application, website or connected FCGOLD services. It covers account features, My Club Sync, profiles, squads, favourites, social features, support, notifications and any future FCGOLD Premium entitlement. Features that are not yet enabled are identified as pre-release or planned.
2. Data controller and contact
FCGOLD will act as data controller for personal data it determines how and why to process. Privacy and support contact: support@fcgold.co.uk. Privacy and support enquiries: support@fcgold.co.uk.
3. Account and authentication data
When connected accounts are enabled, FCGOLD may process your email address, Supabase user identifier, authentication provider, account creation and last-sign-in timestamps, session/security metadata and limited provider profile information returned by Google or another login provider. FCGOLD is designed to use Google sign-in or email one-time codes rather than storing an FCGOLD password. FCGOLD does not receive your Google password.
4. FCGOLD profile data
Profile data may include your FCGOLD ID, display name, profile photo reference or uploaded profile image, platform, favourite club, favourite player, profile visibility choices, friends, achievements, FCG XP, level, member-since date, favourites and selected app preferences. Public or friends-only visibility must follow the privacy controls shown in the app.
5. My Club and imported game data
My Club may contain football-item information that you choose to provide or import into FCGOLD, including player/card name, rating, position, item version or rarity indicators, stats, tradeable state, duplicate indicator, import/capture metadata, FCGOLD match status and FCGOLD SBC Value. My Club is intended to represent user-provided game-inventory information. It is not an EA account service and FCGOLD does not need your EA password to use this data.
6. EA accounts, credentials and passive club reader
FCGOLD is not currently an EA-approved FC Community API partner and does not offer an official EA account connection. The optional FCGOLD browser extension may, when you start it and manually browse Club → Players, read player-card information already rendered in the page for you to view and store the resulting My Club data for FCGOLD use. The reader is designed not to auto-navigate EA pages, intercept private network traffic, or ask for, capture, export, transmit or store your EA password, authentication cookies, refresh tokens or session tokens. EA controls its own cookies, authentication and account processing under EA policies.
7. Local device storage
FCGOLD currently uses device storage for features including My Club, profile information, favourites, settings, social visibility, progression and other app state. Local data remains on the device until replaced, cleared, removed by an in-app control where available, or removed when app data is deleted. Enabling cloud account sync later may add server-side copies for the specific features described at that time.
8. Photos and permissions
If you choose a profile image, FCGOLD may request photo-library permission and process the image you select. FCGOLD should request only permissions needed for a feature. Camera, microphone, contacts and precise location must not be collected unless a future feature clearly requires them and the policy and permission flow are updated first.
9. Technical and service data
Connected FCGOLD services and infrastructure providers may receive technical information needed to deliver and secure the service, such as IP address, request time, app version, device or operating-system type, network response information, crash/error information and security events. FCGOLD should minimise these records and avoid collecting persistent device identifiers unless genuinely required and disclosed.
10. Purchases and FCGOLD Premium
FCGOLD Premium is not currently available for purchase. If paid subscriptions launch, FCGOLD and the relevant app store or payment provider may process product selected, subscription state, purchase date, renewal/expiry state, transaction or order identifiers, entitlement status, refund/cancellation state and support records. FCGOLD should not receive full payment-card details when payment is handled by an app store or third-party payment provider.
11. Support and communications
If you contact FCGOLD, we may process your email address, message, attachments you provide, account identifier and support history to answer the request, troubleshoot problems, protect users and maintain an appropriate record of the conversation. Service emails such as security notices, login codes and material policy changes are not marketing messages.
12. Marketing communications
Marketing emails, promotional notifications or similar communications should be sent only where permitted by law and your choices. Where consent is the basis, you can withdraw it at any time. Opting out of marketing does not stop essential service, security or account communications.
13. Analytics and advertising
The current prototype does not enable a personalised advertising system. If FCGOLD later enables non-essential analytics, advertising identifiers, personalised advertising, audience profiling or cross-service tracking, the relevant providers, purposes, data categories and consent/opt-out controls must be added here and to store privacy disclosures before that processing begins. Personalised advertising should remain off unless a valid choice has been obtained where required.
14. Why FCGOLD uses personal data
FCGOLD may use personal data to create and secure accounts; authenticate users; provide My Club, squads, favourites and social features; restore supported data across devices; calculate app progression and entitlements; provide support; send service communications; prevent fraud, abuse and unauthorised access; diagnose and improve performance; comply with law; and enforce FCGOLD rights and Terms.
15. UK GDPR legal bases
Where UK GDPR applies, processing may rely on: contract, where data is needed to provide an account or feature you request; legitimate interests, such as service security, fraud prevention, debugging and proportionate product improvement; consent, where required for optional marketing, non-essential tracking or certain permissions; and legal obligation, where records or disclosures are required by law. FCGOLD must not use legitimate interests to override rights where your interests or fundamental rights require protection.
16. Who FCGOLD may share data with
FCGOLD may share only the data necessary with service providers acting for FCGOLD, such as authentication/database hosting, cloud hosting, email delivery, crash/error monitoring, notification delivery, customer support and subscription entitlement providers if those services are actually enabled. Google processes data when you choose Google sign-in. Apple or Google may process app-store purchase data when Premium launches. FCGOLD must keep its live provider list and contracts under review.
17. Supabase
The planned FCGOLD account architecture uses Supabase for authentication and database services. When connected, Supabase may process account identifiers, email-related authentication data, session/security information and database records on FCGOLD’s instructions as configured by the project. FCGOLD must enable appropriate Row Level Security and must never embed a Supabase service-role secret in the mobile app.
18. Electronic Arts as a separate service
FCGOLD is an independent football companion and database app. It is not affiliated with, endorsed by, sponsored by or an official product of Electronic Arts Inc., EA SPORTS, EA SPORTS FC, FIFA, UEFA, any football league, club or player. FCGOLD is not currently an EA-approved FC Community API partner. FCGOLD is not currently listed by EA as an approved FC Community API partner. EA operates its own games, Web App, Companion App, accounts and official community connection systems and determines its own processing of EA account, authentication, cookie and game-service data. FCGOLD does not act as the controller of EA account systems and does not claim an official EA connection. Users should review EA's own terms, privacy and cookie notices for EA services.
19. International transfers
Some technology providers may process personal data outside the United Kingdom or EEA. Where required, FCGOLD must use an appropriate transfer mechanism such as an adequacy regulation/decision, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, or another lawful safeguard, and assess supplementary protections where necessary.
20. Retention
FCGOLD should keep identifiable data only for as long as needed for the purpose collected. Active account/profile data may be retained while the account remains open. Following a verified account-deletion request, FCGOLD intends to remove active account data promptly and target completion within 30 days, subject to provider processing and lawful exceptions; backup copies should age out under the provider backup cycle and target no longer than 90 days. Security, transaction, tax, fraud-prevention or dispute records may be retained longer where reasonably necessary or legally required. These targets must be validated against production providers before launch.
21. Account deletion
A connected FCGOLD account must provide an in-app deletion route. Deletion should remove the account and associated server-side personal data rather than simply hiding or deactivating it, except information that FCGOLD is legally required or demonstrably entitled to retain. Local device data may require a separate local-clear action or removal of app data and should be explained during deletion.
22. Your data-protection rights
Depending on the law that applies, you may have rights to request access to your personal data; correction; deletion; restriction; portability; and to object to certain processing. Where processing relies on consent, you may withdraw consent without affecting processing already carried out lawfully. You may also have rights relating to direct marketing and automated decisions.
23. Complaints
If UK data-protection law applies, you may complain to the UK Information Commissioner’s Office (ICO) and may also contact FCGOLD first so we can try to resolve the concern. The final policy should publish the FCGOLD privacy-contact method and current ICO information/link.
24. Automated decisions and profiling
FCGOLD scores, rankings, SBC Value and recommendation features are designed as game-companion tools. They are not intended to make decisions that produce legal or similarly significant effects about an individual. If FCGOLD later introduces materially different profiling or automated decision-making, this policy and any required controls must be updated.
25. Children and age
FCGOLD is not intended to collect personal data from children below the minimum age permitted for account-based use in the user’s territory. The product currently plans a minimum account age of 13, subject to final launch review and any higher local consent/guardian requirements. FCGOLD must not knowingly use children’s data for personalised advertising.
26. Security
FCGOLD should use appropriate technical and organisational measures such as encrypted transport, access controls, least-privilege credentials, Row Level Security, secure provider configuration, separation of publishable and server-only secrets, logging/monitoring and tested deletion processes. No online service can guarantee absolute security.
27. Data breaches
Where a personal-data breach occurs, FCGOLD will investigate, contain and document it and will notify regulators and affected users where required by applicable law. Production incident contacts and procedures must be established before launch.
28. Changes to this policy
This policy may change as FCGOLD features, providers, laws or business practices change. Material changes should be communicated in-app or by another appropriate method before they take effect where required. The current version and effective date should remain easy to find in Settings and on the public FCGOLD legal page.
29. Contact
Privacy and support contact: support@fcgold.co.uk. Privacy and support enquiries: support@fcgold.co.uk.