Privacy policy
2026-10-21
1. Who we are
SLANG FC ("we") is operated by SLANG FC. Contact for privacy requests: info@slangfc.com.
2. What we collect and why
- Account: nickname, and either an e-mail address with a password (stored only as a salted scrypt hash) or the identifier your Apple, Google or X login gives us (and, for Apple/Google, the e-mail they share). Needed to run your account.
- Your choices: chosen club, avatar, whether your profile is public. Needed to personalise the site and the community cards.
- Activity: votes, predictions, packs you send, share clicks and the points they earn. Needed for the game and the tribune leaderboards. Your name is shown on a leaderboard only if you switch "public profile" on.
- Visitors of shared links: when someone opens a pack or card link we store a one-way hash of their address and browser (never the address itself) to count unique visits.
- Technical data: a login cookie (strictly necessary) and standard server logs (address, time, page) kept for security for up to 30 days.
- Optional product analytics: only after you accept, we measure card views and interactions, navigation, filters, search length and result counts, pack steps, sharing actions and account/game outcomes. A separate database uses random browser and session identifiers, without linking them to your account. It does not receive passwords, form contents, search text, login tokens, full URLs, IP addresses or browser fingerprints. No third-party analytics service receives these events. You can refuse, withdraw permission or erase this browser's analytics through Analytics preferences. GPC and Do Not Track are respected.
We do not sell personal data or use advertising trackers. If sponsorships are enabled, reviewed brand messages are clearly labelled and do not influence card winners or statistics. No advertising network or tracking pixel is loaded; following a sponsor link opens that brand's website. We do not collect precise location, contacts or payment data.
If you choose to share a prediction receipt, anyone with its link can see that fixed choice and its eventual result. The receipt does not display your nickname or email. It is included in your account export and removed when your account is deleted.
3. Legal basis
Performance of the service you asked for (account, game), our legitimate interest in security and abuse prevention, and your consent where you choose optional features such as a public profile. For users in Turkey this follows KVKK art. 5; for users in the EU/UK, GDPR art. 6.
4. Who receives data
Hosting (Hetzner Online GmbH (Falkenstein, Germany)) and the sign-in providers you choose (Apple, Google, X) process data for us or with us. Football statistics come from public sources; they contain no personal data about you.
5. Retention
Account data is kept until you delete your account, which removes it immediately; copies in backups expire within 35 days. Security logs: up to 30 days. Optional analytics has a 90-day rolling retention window; expired events are removed by maintenance. Because browser analytics is not linked to your account, use Analytics preferences to erase this browser's analytics separately. Withdrawing permission stops new collection. After erasure, a one-way digest of the random browser identifier and technical timestamps remain within the retention window solely to prevent delayed uploads from restoring deleted events.
6. Your rights
You can access and download your data (Profile → Download my data), correct it, delete your account (Profile → Delete account) or object to processing by writing to info@slangfc.com. You may also complain to your data-protection authority (in Turkey: KVKK Kurulu).
7. Children
SLANG FC is for people aged 16 and over.
8. Changes
We will update this page and its date when practices change.