iFutsal website Privacy Policy
1. Who processes your data
The data controller is Miguel Tanda, a natural person, who runs iFutsal (ifutsal.app and app.ifutsal.app). For any question or request about your data, write to support@ifutsal.app.
This policy covers the ifutsal.app website. The app has its own policy, at app.ifutsal.app/en/privacy.
2. What data we process and where it comes from
If you ask to join the beta with the free sign-up
You give us your email address. Together with the email we record the language of the website and the date and time of the request. The website does not store this data: it sends it in a single email to the controller's mailbox for the beta.
If you pay for a tier or make a donation
The payment takes place entirely on PayPal: you never enter payment details on the website. PayPal tells us the details of the transaction: first and last name, the email address of your PayPal account, the item (the tier or the donation), the amount, the date and the transaction code.
If you write to us
We process what you write to support@ifutsal.app and your address.
Technical data
The hosting provider (§4) records technical data about requests in its logs, such as IP address, date and time.
Visit statistics
To know how many people visit the website and which pages they read, we use Vercel Web Analytics. It uses no cookies and stores nothing on your device. For each page view it records the page address, the site you came from, approximate country and city, operating system, browser and device type. To count visits it tells visitors apart with a code computed from the request, discarded after 24 hours: the data stays aggregated and cannot be traced back to you. We remove the parameters from addresses before they are sent. We do not use advertising or profiling tools.
3. Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Receiving your sign-up, inviting you to the beta when there is room and writing to you about the beta | Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
| Checking the payment, sending you the invitation, handling a refund and, once they exist in the app, the tier and the badge | Performance of the contract (Art. 6(1)(b)) |
| Keeping a record of the payments received | Legal obligation (Art. 6(1)(c)) |
| Replying to your messages | Steps taken at your request (Art. 6(1)(b)) |
| Security of the website and prevention of abuse | Legitimate interest (Art. 6(1)(f)) |
| Aggregated visit statistics, to understand how the website is used | Legitimate interest (Art. 6(1)(f)) |
We do not send promotional emails, and we do not sell or pass on data to third parties for commercial purposes.
4. Providers that process the data
| Provider | What it does | Where the data is |
|---|---|---|
| Vercel (Vercel Inc., United States) | Website hosting and visit statistics | Functions run in Frankfurt, Germany (EU); some processing may take place in the United States |
| Resend (Plus Five Five, Inc., United States) | Sending the email with your sign-up to the controller's mailbox | Sent from Ireland (EU); the main processing takes place in the United States |
| Tophost (Tophost S.r.l., Italy) | The domain's mailboxes: beta sign-ups and messages written to support@ifutsal.app | Italy (EU), on Seeweb S.r.l. infrastructure |
| PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) | Payments and donations | As set out in PayPal's privacy statement |
Resend and Tophost act as data processors, under their respective data processing agreements. Any transfers outside the European Union take place on the basis of the standard contractual clauses approved by the European Commission (Decision 2021/914); Resend also adheres to the EU–US Data Privacy Framework.
Vercel hosts the website under its own terms of service, and the data passing through its functions may also be processed in the United States.
PayPal processes the payment data as an independent controller, according to its own privacy statement.
For the technical data generated by the use of their services, such as logs, Vercel and Resend act as independent controllers, according to their respective privacy notices.
5. How long we keep the data
- Beta sign-up: until you ask to be removed from the list, or until the end of the beta, when the list is emptied.
- Payment data: as long as needed to send you the invitation and to handle any refund, and then for the time the law requires for income received.
- Messages to support@ifutsal.app: the time needed to handle the request.
- Technical logs: according to the periods stated in the providers' privacy notices (§4).
- Visit statistics: aggregated. Vercel guarantees 12 months of reporting and may keep them longer.
6. Your rights
You can ask at any time to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest. You can withdraw your consent to the sign-up at any time by writing to support@ifutsal.app: withdrawal does not affect what happened before.
We reply within one month of the request. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it).
7. Cookies
The website uses a single technical cookie, tied to a choice you make. We do not use analytics, profiling or third-party cookies, so we do not ask for your consent. The visit statistics (§2) use no cookies.
| Cookie | What it is for | Duration |
|---|---|---|
ifutsal-theme | Remembers whether you chose the light or dark theme | 1 year |
Fonts are served from our own domain. The page loads nothing from PayPal: when you press a payment button you leave the website, and on PayPal its own cookies and privacy statement apply.
8. Minors
The website does not knowingly collect data from people under 14, the minimum age to register for the app.
9. Security
Data travels only over encrypted connections (HTTPS). The website has no database: the sign-up email is forwarded to the controller's mailbox and does not stay on the website.
10. Changes to this policy
We will update this policy before introducing on the website any tools that process new data.
Version in force since: 10 October 2026