The short version
- FootSim works without an account. If you want one, we store your name, email address and your favourite club.
- There is no tracking, no advertising, no analytics service and no sharing of data for advertising purposes.
- We only set strictly necessary cookies plus the settings you chose yourself. That is why there is no cookie banner.
- You can delete your account completely at any time — in the app or via the deletion page.
- Uploaded PDF and image files are deleted immediately after processing.
1. Controller
Elie Mengi
76646 Bruchsal
Germany
Email: eliebusiness0@gmail.com
FootSim is a private, non-commercial project. Full details are in the legal notice.
2. Server log files when you open the site
FootSim runs on a virtual server at Hostinger International Ltd. When you open the site, the server processes technically necessary connection data: IP address, date and time, the address requested, amount of data transferred, status code, browser identification and, where applicable, the referring page. This is required to deliver the site, keep it running reliably and detect abuse (Art. 6(1)(f) GDPR).
On retention: log files are managed by the web server and the operating system and are overwritten on a rolling basis. No exact period is claimed here as long as none has been formally established. These log files are not combined with your account.
3. Using FootSim without an account, cookies and storage on your device
Simulations, tables, fixtures, live results and comparisons work without an account. Beyond the server log files, no personal data is stored on the server in that case.
On your device, FootSim stores only what is technically necessary plus the settings you chose yourself. There are no analytics, advertising or profiling cookies, and no third-party cookies. No consent is therefore required (Section 25(2) TDDDG) and there is deliberately no cookie banner.
| Category | Technology | Purpose | Duration |
|---|---|---|---|
| Sign-in session | Cookie | keeps you signed in and protects forms against unauthorised submission | up to 30 days |
| Language setting | Cookie and local storage | remembers the language you chose | up to 1 year, in local storage until deleted |
| Appearance | local storage | remembers light or dark view | until deleted |
| Setup progress | local storage | remembers how far the one-time setup in the app has got | until deleted |
| Temporary email information | local storage | lets you resend the confirmation email without typing it again | until you sign out or delete your account |
| Offline app files | browser offline storage | makes the app usable without internet (styling, scripts, offline page) | until the next version |
The session cookie cannot be read by JavaScript and is transmitted only over an encrypted connection in production. The offline storage contains only general program files — no account data and no responses from the account interfaces.
You can delete this data at any time in your browser settings. For an installed app, uninstalling removes the local storage.
4. User account, sign-in and security
If you create an account, we store:
- first and last name
- email address
- password — only in securely hashed form, never in plain text
- confirmation status of the email address and the time it was confirmed
- preferred language
- whether the one-time personalisation has been completed
- the times the account was created and last changed
The purpose is to provide the account and its personalised features. The legal basis is performance of the usage relationship (Art. 6(1)(b) GDPR). The data is stored for as long as your account exists.
After registration we send you a confirmation link, and for a password reset a link to set a new one. Both are time-limited — the confirmation link for 24 hours, the reset link for one hour. A reset link also stops working the moment the password has been changed.
Transmission is encrypted via HTTPS. Forms are protected against unauthorised submission. Sign-in, registration and password resets are rate-limited against automated attempts. The database is reachable only locally on the server and not from the internet.
5. Favourite club and personalisation
If you choose a favourite club, we store its identifier at the data provider, the club name, the address of the club crest and the time of the choice. This is used to show the crest in the header and to move your club's matches to the top of the live section.
The choice is voluntary, can be changed at any time and can be removed at any time. If you delete your account, it is deleted with it.
6. Sending email
For confirmation and password emails we use the service Resend (Resend, Inc., USA) as a processor. Your email address and the content of the respective message are transmitted. This may involve a transfer to the USA.
The arrangement of the data processing agreement and the transfer basis is being reviewed and will be reflected here.
7. External football data and club crests
Match, table and player data come from football-data.org and API-Football (API-Sports). These requests are made by our server; your IP address is not transmitted to the providers.
Exception, club crests: for technical reasons crests are
loaded directly from crests.football-data.org and
media.api-sports.io into your browser. Those providers therefore
receive your IP address, the time and your browser identification. This is
necessary to display the crests (Art. 6(1)(f) GDPR).
8. Tools and simulations
The PDF tool merges uploaded PDF and image files into a single file. Processing happens in a temporary directory that is deleted immediately after the response — including when an error occurs. There is no permanent storage and no analysis of the contents; no sign-in is required.
Simulations are recalculated on every request and are not stored in a way linked to you.
9. Deletion, retention and backups
You can delete your account yourself at any time: in the account area under “Delete account”, confirmed with your current password. This deletes your account with all profile data listed above as well as your favourite club. Your session ends immediately. Instructions — including for the case where you can no longer access your account — are on the Delete account page.
On backups: to protect against data loss, the database is backed up automatically every day. These backups are deleted automatically after 14 days. A deleted account may therefore still be contained in a backup for a short time. Backups are not used for day-to-day operation; they serve recovery in an emergency only.
10. Your rights and right to complain
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21 GDPR). Please contact eliebusiness0@gmail.com.
You may also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
11. Changes
This policy is updated when the application changes.
Last updated: August 2026.