Privacy policy

1. Data controller

• Owner: Alex Martínez Herrera
• National ID (DNI): 43692186Y
• Email: info@internetfutbolmanager.com

2. What data we collect

• Registration data: name, email address and password (stored encrypted). If you sign up with Google, we only receive the name and email Google shares with us.
• Public manager profile: your name, points and honors are always visible on your public profile (/managers/tu-id), as part of the game itself (rankings and competition). Your country is shown by default but you can hide it, and your email is only shown if you turn that option on — both adjustable in your profile. This page is excluded from search engines (noindex + robots.txt).
• Game data: team managed, country, city, club name and crest, results and stats from your matches.
• Community: the messages you post in a game's community are shown with your manager name and your club crest, and are visible to any visitor (except Support and Committee, logged-in only, and private games, members only). You can edit them for 15 minutes and delete them whenever you want; do not include personal data of yours or of third parties.
• Machine translation: if you or whoever reads your message enable translation, the text of a message or a community post is translated: Spanish ↔ Catalan on our own server (Apertium); when English is involved, the text is sent to the MyMemory service (Translated S.r.l., EU) only to translate it. You can turn it off in your profile ("Never translate"); translations are stored so the operation is not repeated.
• Payment data: if you buy IFM PRO or a private game, the payment is processed by Paddle (Paddle.com Market Limited) as Merchant of Record. We do not store or have access to your card details — Paddle processes them directly under its own privacy policy.
• Anti-fraud data: to ensure fair play (one person = one account), we log access data (IP, browser and a device fingerprint) with the sole purpose of detecting the use of multiple accounts. It's kept for a maximum of 12 months and is only accessible to the admin team and the anti-fraud commission.
• Internal mail between managers: the messages you exchange with other managers inside the game are kept even if you delete them from your inbox (they are only hidden), as a record for investigating rigged transfers between accounts. Only the administration can read them, and only when there is a specific suspicion of fraud.
• Browsing data: IP address, browser type and pages visited, collected via cookies when advertising (Google AdSense) is active and you've accepted it in the banner — see details in the Cookie policy.

3. Legal basis for processing

• Performance of a contract (art. 6.1.b GDPR): account management and service provision, including purchases of IFM PRO and private games.
• Consent (art. 6.1.a GDPR): advertising cookies.
• Legitimate interest (art. 6.1.f GDPR): platform security and prevention of multi-accounting/fraud.

4. Who we share your data with

We don't sell your data to third parties. We may share it with:

• Infrastructure providers: Hetzner Online GmbH, Germany (server hosting).
• Email service: Resend (sending transactional emails).
• Payments: Paddle.com Market Limited (United Kingdom), as Merchant of Record for IFM PRO and private game purchases.
• Donations: Ko-fi, if you choose to voluntarily support the project.
• Advertising: Google AdSense (with your prior consent, managed by Google's own consent system in the EU).
• OAuth: Google, solely to authenticate your identity if you choose to sign up that way.
• Anti-bot verification: Cloudflare Turnstile, on the contact and private-game request forms.

All providers process data in compliance with the GDPR or have adequate safeguards in place (Standard Contractual Clauses).

5. International transfers

Some providers (Google, Paddle, Resend) may be located outside Spain. In those cases, transfers are carried out with the appropriate safeguards provided for by the GDPR (adequacy decisions or Standard Contractual Clauses).

6. How long we keep your data

• Account data: for as long as the account is active or until you request its deletion.
• Game data (teams, statistics): kept as the game's history; private-game data is never made public or shown outside of that game.
• Anti-fraud data: maximum 12 months.
• Internal mail between managers: kept as part of the game's history, also after you delete it from your inbox.
• Payment data: kept by Paddle under its own legal obligations (billing, tax) — we don't store it.

7. Your rights (access, rectification, erasure, objection, etc.)

You can exercise the following rights by sending an email to info@internetfutbolmanager.com:

• Access: find out what data we hold about you.
• Rectification: correct inaccurate data.
• Erasure ("right to be forgotten"): request the deletion of your account and data.
• Objection: object to certain processing.
• Restriction: restrict processing in certain cases.
• Portability: receive your data in a structured format.

For payment data already processed by Paddle, those rights are also exercised directly with Paddle — see its privacy policy.

You can also file a complaint with the Spanish Data Protection Agency (AEPD).

8. Security

We apply appropriate technical and organizational measures: HTTPS encryption, hashed passwords, restricted access to personal data and periodic backups.

9. Minors

The service is not aimed at minors under 14. If we detect that a minor has provided their data without parental consent, we will delete it as soon as possible.

10. Changes to this policy

We may update this policy. We will notify you of relevant changes by email or via a notice on the platform.