Privacy Policy

1. Scope

This policy explains how Footy Forge handles personal information when you use the website, create an account, play a game mode, submit a leaderboard result or request support. It does not control the privacy practices of external websites linked from Footy Forge.

2. Information collected

Depending on the features you use, Footy Forge may process:

• Account information: email address, generated account identifier, optional display name, account timestamps and acknowledgement of this policy.
• Authentication information: a securely processed password and account-confirmation or recovery events. Footy Forge does not receive or store your readable password.
• Career information: private save data such as squads, contracts, injuries, training, fixtures, match results, drafts, trades, season history, game settings and simulation state.
• Device recovery information: account-isolated recovery copies, interface preferences and save-integrity data stored in your browser to protect play during an interrupted connection.
• Leaderboard information: your saved nickname, validated score summary, relevant game settings and the time the result was posted.
• Limited product analytics: page categories and named milestones such as account setup, career start, draft completion and season completion. Analytics does not include your email address, nickname, password, save payload, squad, player selections or exact score.
• Support and technical information: details you voluntarily provide in a support request, together with service logs that may include IP address, browser or device information and request timestamps.

Footy Forge does not ask for your home address, phone number, exact date of birth, school or payment-card details. Do not place sensitive personal information in a nickname or support report.

3. How information is used

Information is used to create and protect your account; confirm email addresses and process password recovery; save and restore careers across devices; prevent one device from silently overwriting a newer save; understand where players encounter setup or gameplay problems; improve game usability; provide game and support services; respond to account or privacy requests; maintain service security; and automatically post a validated completed-game leaderboard entry.

Footy Forge does not sell personal information and does not use account information for targeted advertising.

Optional Footy Forge emails

If you opt in, we may email you Footy Forge news, promotions and occasional reminders to return to the game. Joining is optional and is not required to create an account or play. We record your choice, the wording/version you agreed to, the source of that choice and its recorded time. Account signup alone does not subscribe you.

You can change your choice in Account settings or use the unsubscribe link in a marketing email. Essential confirmation, password recovery and security emails are separate. To choose relevant return reminders, we may use your most recent account sign in and game save activity. Resend processes subscriber email addresses and marketing preferences for delivery and unsubscribe handling.

4. Storage, service providers and overseas processing

Footy Forge uses specialist providers to operate the service:

• Supabase for account authentication and database storage.
• Resend for account email delivery and optional marketing emails sent to subscribers.
• Netlify for website hosting and related delivery services.
• PostHog for limited, event-based product analytics. Footy Forge disables automatic interaction capture, automatic form capture, session replay and automatic pageview tracking.

These providers may process information and technical logs outside Australia under their own privacy, security and data-processing terms. Footy Forge limits information shared with a provider to what is reasonably required for that service. Some recovery data and preferences also remain in the browser on the device you use.

5. Public leaderboards

Leaderboards are publicly readable. Completed Forge Five, Trade Week Daily Challenge and Trade Week Choose Your Club results are posted automatically after validation. Each path has separate rankings. Your saved Footy Forge nickname is used; if no usable nickname is set, the entry uses “Manager”, never an account-email fallback. A private completion queue allows interrupted uploads to retry after reconnecting or signing in again. Delayed Daily results remain attached to their original challenge date. Choose a nickname that does not reveal personal information. Footy Forge may remove entries that are invalid, abusive, misleading or technically corrupted.

6. Retention and deletion

Account and career information is kept while your account is active or while it is reasonably needed to provide the service, resolve disputes, prevent abuse or meet security and legal requirements. You can request account deletion from the account page. The request covers the account profile, private game saves and account-linked leaderboard records. Provider backups and security logs may take additional time to expire under provider retention schedules.

Deleting browser data removes device recovery copies and preferences from that browser. It does not by itself delete information attached to your online account.

7. Access, correction and your choices

You can review and update your Footy Forge display name from the account page, sign out at any time and request account deletion. For access to or correction of other personal information, contact Footy Forge through an official channel linked on the homepage. Sufficient information may be requested to confirm that the account belongs to you before a request is completed.

Product analytics uses an anonymous device identifier before sign-in and a one-way pseudonymous account identifier after sign-in. Footy Forge respects supported Global Privacy Control and Do Not Track signals. You can also change analytics on this device below.

8. Security

Footy Forge uses HTTPS, Supabase authentication, securely processed passwords, account confirmation and recovery controls, database row-level security and verified recovery copies intended to keep each account's records separate. Administrative credentials are not placed in public website files. No online service can guarantee absolute security. Never share your password, confirmation link, recovery link or authentication code.

9. Young people

Footy Forge may be used by younger football fans and is designed to minimise personal-information collection. If you are under 18, ask a parent or guardian before creating an account, and choose a nickname suitable for automatic public results.

10. Questions, corrections and complaints

Changes to this policy

This policy may be updated when Footy Forge features, providers or legal obligations change. The latest policy will remain available on this page and the "Last updated" date will identify material revisions.