Privacy notice
Last updated: 9 August 2026
Foundation Draft now requires a Footy Forge account and saves complete careers to Footy Forge's managed Supabase service. Passwordless sign-in, account careers and public leaderboard submissions remain beta features.
What Footy Forge collects
Supabase Auth receives your email address and manages your passwordless sign-in session. Footy Forge also stores your generated account identifier, sign-in timestamps, privacy-consent record and any optional Footy Forge display name you provide. Each Foundation Draft account slot stores its game-mode identifier and complete career state, including squads, ratings, contracts, injuries, training, fixtures, match results, drafts, trades, season history and simulation state. A verified browser cache and one previous recovery version may remain on a device solely to complete uploads, recover an interrupted sync and migrate an existing device career into an empty account slot. Interface preferences stay on the device. If you publish a completed career, the public leaderboard stores your chosen nickname, score summary, game settings, verification label, release version and submission time.
Why it is collected
The information is used to create and secure one Footy Forge account, send expiring sign-in links, show account progress across game modes, provide support, process deletion requests, synchronise account careers between devices and publish an optional completed-career leaderboard entry. Conflict protection pauses saving when another device has changed the same account slot, rather than silently replacing either career.
What Footy Forge does not ask for
Footy Forge does not need your password, home address, phone number, school, exact date of birth or payment-card details. Never put sensitive personal information in a nickname or feedback report.
Service providers and storage
Account authentication and database storage are provided by Supabase. Authentication emails will be delivered using the configured transactional-email provider. Hosting and beta feedback may be provided by Netlify. These providers may process technical logs such as IP address, device information and request timestamps under their own service terms and security controls.
Children and teenagers
Footy Forge is a game and may be used by younger people. If you are under 18, ask a parent or guardian before creating an account. The account flow is designed to minimise collection and does not use targeted advertising or request an exact birth date. A child-safety and privacy review must be completed before registrations are promoted publicly.
Retention and your choices
You can read the public leaderboard without signing in, but an account is required to play Foundation Draft. You can sign out at any time and request account deletion from the account page. Deleting an account also deletes its profile, leaderboard entries and account game-save records through database relationships. A signed-out device recovery cache is not presented as playable progress and is reconciled only after the account signs in again. Backups and security logs may take additional time to expire.
Security
Footy Forge uses Supabase passwordless authentication, expiring single-use email links, encrypted HTTPS connections and row-level database rules intended to keep each account's records separate. Public browser files contain only the Supabase project URL and publishable key; administrative keys must never be placed in the website. No internet service can promise absolute security. Report a suspected privacy or security problem through the Beta Hub feedback form without including sign-in links or other secrets.
Contact and complaints
Use the Footy Forge Beta Hub feedback form for privacy questions, access requests, corrections, complaints or deletion follow-up. The public launch checklist requires a dedicated operator name and privacy contact before registrations are promoted publicly.