PRIVACY POLICY

FootballDream ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our fantasy football platform at footballdream.in (the "Service"). By using the Service, you agree to the collection and use of information as described in this policy.

The data controller responsible for your personal information is:

FootballDream (operating at footballdream.in)

For any privacy-related queries or data requests, please use our contact form.

Account information: When you register, we collect your email address, username, and display name.

Usage data: We collect information about how you interact with the Service, including games created, predictions made, draft picks, and scores.

Technical data: We may collect your IP address, browser type, and device information for security and performance purposes.

If you are located in the European Union or European Economic Area, we process your personal data under the following legal bases:

• Consent (Art. 6(1)(a)): Where you have given explicit consent, such as agreeing to essential session cookies by continuing to use the Service.
• Contract performance (Art. 6(1)(b)): Processing necessary to provide the Service you have signed up for, including account creation, game participation, and leaderboards.
• Legitimate interests (Art. 6(1)(f)): Processing necessary for our legitimate interests, such as fraud detection, abuse prevention, and service improvement, provided these interests are not overridden by your rights.
• Legal obligation (Art. 6(1)(c)): Where we are required to process data to comply with applicable law.

We use your information to:

• Provide and operate the Service
• Maintain leaderboards and game history
• Send service-related notifications (if enabled)
• Detect and prevent fraud or abuse
• Improve and personalise your experience
• Comply with applicable legal obligations

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Account data is retained for as long as your account is active. Following a verified account deletion request, your personal data will be permanently deleted within 30 days, except where retention is required by law.
• Usage and game data (scores, predictions, draft picks) may be retained in anonymised or aggregated form after account deletion.
• Technical/log data (IP addresses, browser logs) is retained for up to 90 days for security purposes.

FootballDream uses essential cookies required for session management (authentication tokens). In addition, we use the following third-party services that may set cookies on your device:

• Google AdSense — We display advertisements served by Google AdSense. Google uses cookies and similar technologies (including the DoubleClick cookie) to serve ads based on your prior visits to this site and other sites on the internet. You can opt out of personalised advertising by visiting Google Ads Settings or optout.aboutads.info. For more information on how Google uses data when you use our site, see How Google uses data from sites that use Google services.
• Vercel Analytics — We use Vercel Analytics to understand how visitors interact with the Service. Data is anonymised and aggregated.

You can control or delete cookies through your browser settings at any time. Disabling cookies may affect the functionality of the Service and the relevance of ads shown.

We do not sell, trade, or rent your personal information to third parties. We may share anonymised, aggregated data (e.g., total user counts) publicly. We may disclose information if required by law or to protect our rights.

International data transfers: Our Service relies on infrastructure provided by Supabase (database and authentication) and Vercel (hosting and deployment). Your data may be processed and stored on servers located outside your country or region, including outside the European Economic Area. Where such transfers occur, we rely on standard contractual clauses approved by the European Commission, or equivalent safeguards recognised under applicable data protection law, to ensure your data remains appropriately protected.

Depending on your location, you may have the following rights regarding your personal data. EU/EEA users have these rights under the General Data Protection Regulation (GDPR); users in other jurisdictions may have similar rights under their local law:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to any legal retention requirements.
• Right to data portability: Receive a copy of your data in a structured, machine-readable format and have it transferred to another controller where technically feasible.
• Right to restriction of processing: Request that we limit how we use your data in certain circumstances.
• Right to object: Object to processing based on legitimate interests; we will cease unless we have compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please use our contact form. We will respond within 30 days.

EU/EEA users — DPA complaints: If you believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with the Data Protection Authority (DPA) in your EU/EEA member state. A directory of EU DPAs is available on the European Data Protection Board website.

The Service is intended for users aged 18 years and above only. We do not knowingly collect personal information from users under 18. If we become aware that a user under 18 has provided personal information, we will promptly delete it. If you believe we have inadvertently collected data from a minor, please contact us.

We use third-party services including:

• Supabase — database and authentication
• Vercel — hosting and deployment
• API-Football — live football data and statistics
• Google AdSense — advertising (see Section 7)
• Vercel Analytics — anonymised usage analytics

Each of these services has its own privacy policy governing their data practices. We are not responsible for the privacy practices of third-party providers.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes by updating the date at the top of this page. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

In accordance with the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have designated a Grievance Officer to address complaints:

Grievance Officer: FootballDream Support Team
Email: cricketdream2026@gmail.com
Acknowledgement: Within 48 hours of receipt
Resolution: Within 30 days of receipt

For privacy questions, data requests, or to exercise your rights, email us at cricketdream2026@gmail.com or use our contact form.