Privacy policy
Last updated: 11 November 2026 · Beta: this policy is for the private beta and is being reviewed before a public launch.
TeamSheet FC is a free fantasy football game for private leagues of friends. This policy explains what personal information we collect when you play, why, who we share it with, and your rights. We've kept it short and in plain English.
Who we are
TeamSheet FC is run by the TeamSheet FC team, based in the United Arab Emirates. We decide how your information is used, so we're the "controller" of it. We follow the UAE's Personal Data Protection Law and, for players in the UK and EU, the UK and EU GDPR.
Questions or requests: privacy@teamsheetfc.com.
What we collect
What you give us
- Your name and email address, when you sign up. Your email is how you sign in: we send you a link instead of using a password.
- Your team name. Other managers in your league see it.
- What you do in the game: your line-ups, formations, bench order, market bids, offers and messages to other managers, sales, and your league settings (if you run a league).
- Messages you send us, if you contact us.
What's collected automatically
- Sign-in and security information: when you signed in, and the session that keeps you signed in on your device.
- Basic technical information: your IP address, browser and device type, and the pages requested. Our hosting and database providers record this in their normal server logs, to keep the service running and secure.
What we don't collect
- Passwords, payment details, or your location beyond what your IP address shows.
- We don't use advertising or analytics cookies.
Football data: player names, statistics and fixtures come from public football data providers. This information is about professional footballers' public performances, not about you.
Why we use it, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Create your account, sign you in, run your team, leagues, market, offers and points | To provide the game you signed up for | Contract (providing the service you asked for) |
| Show your team name, line-up, points and transfers to managers in your leagues | That's how a league works | Contract |
| Send sign-in links and essential service emails (e.g. a change to these terms) | To let you sign in and keep you informed | Contract |
| Keep the game secure and fair: prevent cheating, multiple accounts and abuse; fix problems | To protect players and the game | Legitimate interests |
| Look at how features are used, in aggregate, to improve the game | To make the game better | Legitimate interests |
| Keep records if we have to deal with a complaint or a legal claim | To protect our rights | Legitimate interests / legal obligation |
We don't send marketing emails. If we ever want to, we'll ask first, and you can say no.
We don't sell your information. We don't use it for advertising.
Who sees your information
- Other managers in your leagues see your manager name, your team name, line-ups after each deadline, points, squad and transfers. They don't see your email address.
- League admins can see who's in their league, and can remove managers.
- AI managers are computer-controlled players. They're software and don't use your personal information beyond the game itself (e.g. your squad, to decide what offers to make).
- Our service providers, who process information only on our instructions:
- Supabase: database and sign-in. Data is stored in Mumbai, India during the beta; we plan to move it to London, UK before public launch.
- Vercel: website hosting. Servers are worldwide, including the US.
- Resend: sends our sign-in emails.
- GitHub: runs our automated scoring jobs. These use football data, not your personal information.
- Authorities, if the law requires it.
International transfers
Our providers store or process information in other countries (currently India and the US). When that happens, we rely on the protections in our contracts with those providers, such as standard contractual clauses. Contact us for a copy of the relevant safeguards.
How long we keep it
- Your account and game history: while your account is open. Delete your account and we delete your personal information within 30 days. Your team's past results may stay in a league's history under an anonymous name, so other managers' league tables still add up.
- Server and security logs: kept by our providers for a limited time, usually up to 30–90 days.
- Emails you send us: up to 2 years, unless we need them longer to deal with a complaint.
Your rights
You have the right to ask for a copy of your information (access), have it corrected (rectification), have it deleted (erasure), ask us to limit how we use it (restriction), get it in a portable format (portability), and object to us using it on the basis of legitimate interests.
To use any of these rights, email privacy@teamsheetfc.com. We'll reply within one month.
If you're unhappy with how we've handled your information, please tell us first. You can also complain to the data protection authority where you live (in the UK, the Information Commissioner's Office: ico.org.uk).
Age
TeamSheet FC is for people aged 18 and over. We don't knowingly collect information from anyone younger. If we learn that we have, we'll delete it.
Cookies and similar technology
We only use what's needed to keep you signed in and the site working, e.g. your sign-in session. These are strictly necessary, so we don't ask for consent to them. We don't use advertising or analytics cookies.
Security
Information is sent over encrypted connections (HTTPS). Access to the database is restricted. We use email links instead of passwords, so there's no password to steal. No system is perfectly secure: if something goes wrong that affects you, we'll tell you as the law requires.
Changes
If we change this policy in a way that matters, we'll tell you in the game or by email before the change takes effect.