01Who we are
FOOTYUP (“we”) runs organised football games in Dubai, United Arab Emirates. FOOTYUP is not yet a registered company; until it is, FOOTYUP decides how your personal data is used and is responsible for it (the “controller”). When the company is registered, this notice will name it and we will tell you. For anything in this notice, write to 1@footyup.com.
02What we collect
- Your account
- Email, name, phone number and your password — stored only as a one-way hash, never readable. If you sign in with Google: your Google account ID, email and name.
- Your player profile
- Display name, photo (if you add one), nationality, position, preferred foot, level, kit size, emirate, when you can play, birthday (optional) and how you heard about us. Please don’t name other people there unless they agree.
- Bookings and payments
- For each order: contact name, phone and email, what you booked, amounts, promo codes, club credit and Pass membership. How you paid: cash at the venue, a crypto transfer to our wallet, or card through Ziina’s payment page — we never see your card details. If you book for friends, the names you give us for them. We keep a history of each game’s roster and waiting list — who joined or left, when, and which staff member or system made the change.
- Players you give a heart
- When you give another player a heart — in a match report after the game, or on a game’s tactical map before it — we keep who you hearted, when, and the game it came from. You can remove a heart at any time under My players in your profile.
- Your feedback after a game
- The match-report email asks “How was the game?”. If you answer, we keep your rating, the reasons and team balance you pick, your comments, and any players from that game you say you didn’t enjoy playing with, with what you wrote about it — linked to your account and the game. Answering is optional. You can change your answer for 7 days after the report is published, through the personal link in the email; anyone you forward that link to can see and change your answer too.
- Your agreement to the club rules
- When you tick the box to agree to the club rules and acknowledge this notice — when you book a game, or on your game’s page before it — we keep which version of the rules and of this notice you were shown, the language, when you ticked it and, if you ticked it on a game’s page, which game. The club rules include clause 10.2: games are photographed and filmed, and those photos and videos may be used to promote FOOTYUP — agreeing to the rules includes that. It does not sign you up to marketing emails, and it is not the separate consent to analysing how you move (see Photos and video).
- Waitlist
- Your contact details when you queue for a full game.
- Corporate enquiries
- Company, contact name, work email, phone, event details and your message.
- Match records
- Your team, goals, assists, saves, cards, substitutions, minutes, rating, awards and badges, entered by our coordinators.
- Guests without an account
- When someone plays without a FOOTYUP account, a coordinator enters their first and last name and shirt number for that match. There is no profile and we hold no contact details. The full name stays with our staff. To have the name replaced with “Guest” in every report, write to 1@footyup.com.
- Photos and video
- We film games with a fixed camera. Video is used for highlights and match reports, and to estimate how players move on the pitch (heatmaps and movement statistics). We are introducing a separate consent for this analysis. Until it is in place, you can ask us at 1@footyup.com to leave you out of it.
- Technical data
- When you sign in: your IP address and browser type, to keep your session secure. For signed-in members: a log of pages visited and actions taken, with IP address and browser type, to protect accounts and help when something goes wrong. We count visits to the site: these statistics store only daily totals by device type and browser family, with no visitor identifier. Our servers also keep standard access logs.
- Cookies and browser storage
- See section 09.
03Why we use it
- To run your account and your games — bookings, payments, rosters, reports and messages about your games. This is necessary to provide the service you signed up for.
- To show that you agreed to the club rules — the rules every player plays by. Agreeing to them is part of booking a game, so this record is necessary to provide the service.
- To improve our games — your feedback after a game helps us organise the next ones, balance the teams and deal with conduct on the pitch. You choose whether to answer.
- To keep the service safe — sign-in security, abuse and fraud prevention, support.
- To meet legal obligations — accounting and tax records, and proof of your consent choices.
- With your consent only — analytics cookies (Google Analytics). You can withdraw consent at any time; withdrawing doesn’t affect what was done before.
Emails about your games, reports and videos, and about free spots in upcoming matches, can be switched off one by one in your email settings or with the link in every email.
04What other people can see
- Your player profile is public unless you turn it off in Settings: display name, photo, nationality, position, preferred foot, rating, join date, games, goals and assists, match history, heatmaps and match-video links.
- Match reports name everyone who played, even if your profile is private — taking part in a match is public. A guest without an account appears by first name and initial.
- Game rosters show who is booked (your display name, or “FOOTYUP member” if your profile is private), names of friends you booked for, and whether a spot is paid.
- Match videos are published on YouTube.
- Your hearts are not public. You and FOOTYUP admins can see them. A game’s coordinator sees hearts only between players booked in that game, to help split the sides. Nobody is told when you give or remove a heart, and players never see who hearted them.
- Your feedback after a game is seen only by FOOTYUP admins — not by a game’s coordinator and not by other players. It is not anonymous: admins see who answered. A player you name is never told, and never sees what you wrote.
- Whether you have agreed to the current club rules is seen by FOOTYUP admins and by a game’s coordinator for the players booked in that game, so they can ask on the day. Other players never see it.
- A FootyUp Pass in date shows as the Gold league on the public standings.
05Who we share it with
Only what each needs to do its job for us:
| Who | What for | Where |
|---|---|---|
| Hetzner | Our servers, database and backups | Germany (EU) |
| Analytics — only if you allow it. Sign-in with Google, if you use it. Web fonts and YouTube match videos | USA | |
| Resend | Sending our emails | USA |
| Telegram | Our team’s notifications of orders and waitlist requests, including your name, phone and email | UAE and worldwide servers |
| Ziina | Card payments, when offered | UAE |
| Bybit | Receiving crypto payments — blockchain transfers are public by nature | Worldwide |
| Vast.ai | Computing power for analysing match video | USA company, servers in Europe |
| OpenAI, Anthropic | AI tools our team uses to style heatmap images (no names or statistics are sent) and to review match video | USA |
| geojs.io | Your IP address, to pre-fill your country’s phone code | Outside the UAE |
| unpkg, Cloudflare, CARTO | Your browser loads some code and map tiles from them, which shares your IP address | Worldwide |
| GitHub | Our code repository, which holds heatmap images and staff photos | USA |
We also disclose data when the law or a competent authority requires it. We do not sell your data.
06Transfers outside the UAE
Several of the recipients above are outside the UAE. We transfer only what each one needs, where the transfer is necessary to provide our service to you or you have consented to it (analytics), and we rely on our providers’ contractual data-protection commitments.
07How long we keep it
| Data | Kept for |
|---|---|
| Account and profile | While your account exists; deleted within 30 days of your request, except records the law makes us keep |
| Orders and payment records | As long as UAE commercial and tax law requires — at least five years |
| Sign-in sessions | Expire 30 days after you last use them |
| Member activity log | 180 days |
| Game roster and waiting-list history | Kept with our match records and not deleted automatically; the names of friends you booked for are removed when your account is deleted |
| Hearts | Until you remove them; deleted with your account — both the hearts you gave and those given to you. If an admin removes a heart, a note that it was removed stays in the member activity log for 180 days |
| Your agreement to the club rules | While your account exists; deleted with your account |
| Feedback after a game | Kept with our match records and not deleted automatically; deleted with your account. If a player you named deletes their account, the record that you named them is deleted too, but words you wrote in a note or comment stay with your answer |
| Proof of your cookie choice | Three years after your last change |
| Match video and analysis | Until our team deletes it; we are introducing an automatic limit for raw video |
| Server backups | 14 days on our servers; offline copies are kept by our team |
| Corporate enquiries | Until you ask us to delete them |
08Your rights
You can ask us to tell you what we hold about you and give you a copy; to correct it; to delete it; to restrict or stop a use of it; and to withdraw any consent. Ratings and statistics are entered or checked by people — no decision about you is made by automated processing alone. Write to 1@footyup.com: we reply within 30 days and may ask you to confirm your identity first. Much of this you can do yourself in your profile: edit your details, make your profile private, and change your email and cookie settings. If you think we got it wrong, you can complain to the UAE Data Office.
09Cookies and browser storage
| Name | What it does | How long |
|---|---|---|
footyup_session | Keeps you signed in. Essential | 30 days |
footyup_oauth_state | Protects sign-in with Google. Essential | 10 minutes |
_ga, _ga_9N91YMZZST | Google Analytics visit counting. Only if you allow analytics | Up to 2 years, or until you withdraw |
footyup.consent | Remembers your cookie choice (stored in your browser) | 12 months |
fu-visit | Stops the same browser tab being counted twice in our visit statistics (stored in your browser, for that tab only). It is not a visitor identifier | Until you close the tab |
| Browser storage | Your language, cart, a referral code you arrived with, whether you’ve seen the intro, and a cache of public match data | Until you clear it; referral code 30 days |
Change your analytics choice any time: Cookie settings.
10How we protect it
Encrypted connections (TLS) everywhere; passwords stored only as hashes; sign-in cookies your browser’s scripts cannot read; two-factor authentication for all staff accounts; and staff see only what their role needs.
11Under 18
FOOTYUP is for adults. Players under 18 may take part only with the written consent of a parent or guardian, who is responsible for them. We don’t knowingly collect data from anyone under 18 without that consent.
12Changes
When we change this notice, we update the version and date above. If a change affects what you agreed to, we ask again.