FunSportfunsport.online

Legal

Privacy Policy

Last updated: 28 June 2026

How funsport.online collects, uses, and protects your personal data under the GDPR and other applicable privacy laws.

1. Data controller

The data controller for funsport.online (https://funsport.online) is VL / Acrodis Europe.

Contact: hello@funsport.online

2. What data we process

Depending on how you use the site, we may process:

  • Account data — email address when you sign in with a magic link.
  • Profile preferences — custom team names and playing-style descriptions you save to your account.
  • Local browser data — language preference, theme, age-verification flag, commentator mode, free-chat counters, and chat history stored in your browser when you are not signed in or for per-match convenience.
  • Push notification data — browser push subscription endpoints and match alert preferences if you enable notifications while signed in.
  • Payment-related data — Stripe checkout session identifiers and a sponsor token cookie after a successful sponsorship payment. Card details are processed directly by Stripe; we do not store them.
  • Commentator chat — messages you send to the AI commentator, match context, and your custom team labels, transmitted to our AI provider to generate replies.
  • Technical data — IP address, browser type, and request metadata in server and hosting logs (for example via Vercel).

3. Purposes and legal bases

  • Provide the service (contract / legitimate interest) — show tournament data, sync your team edits, deliver commentary, and operate accounts.
  • Authentication (contract) — send sign-in links and maintain sessions.
  • Payments (contract) — process sponsorship checkout and unlock paid features.
  • Notifications (consent) — send match alerts you opt into.
  • Security & reliability (legitimate interest) — prevent abuse, debug errors, and protect the platform.
  • Legal compliance — meet tax, accounting, or regulatory obligations where applicable.

4. Service providers (processors)

We use trusted providers who process data on our behalf:

  • Vercel — hosting and delivery.
  • Neon — Postgres database for accounts, cache, team overrides, push subscriptions, and sponsor records.
  • Brevo — transactional email for magic-link sign-in.
  • Stripe (Acrodis Europe) — payment processing for sponsorships.
  • OpenRouter — AI model API for generated commentary and chat replies.
  • football-data.org — football fixtures and results (we send API requests; no personal data is intentionally shared with them).

Providers may process data outside the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses offered by those vendors.

5. Retention

  • Account and team-override data — until you delete your account or ask us to erase it.
  • Session and verification tokens — only as long as needed for authentication.
  • Push subscriptions — until you disable alerts or delete your account.
  • Sponsor records — as long as needed to honour your sponsorship and for accounting.
  • Server logs — typically up to 30 days unless longer retention is required for security.
  • Local browser storage — until you clear it in your browser settings.

6. Your rights (GDPR)

If you are in the EEA, UK, or Switzerland, you may have the right to:

  • access your personal data;
  • rectify inaccurate data;
  • erase data ("right to be forgotten");
  • restrict or object to certain processing;
  • data portability where applicable;
  • withdraw consent at any time (for example push notifications);
  • lodge a complaint with your local data protection authority.

To exercise these rights, email hello@funsport.online. We respond within one month where required by law.

7. Children

funsport.online is a general-audience fan project. Uncensored commentator mode is restricted to users who confirm they are 18 or older. We do not knowingly collect personal data from children under 16 without parental consent. Contact us if you believe a child has provided personal data.

8. Security

We use HTTPS, access controls, and reputable infrastructure providers. No method of transmission or storage is 100% secure; please use a unique email and keep your sign-in links private.

9. Changes

We may update this policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be highlighted on this page.

10. Related documents