· Privacy · Version 8

Your data, plainly

What FOOTYUP collects, why, who sees it, where it goes, how long we keep it — and what you can ask us to do about it.

Effective 20 October 2026 · Governed by UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data

01Who we are

FOOTYUP (“we”) runs organised football games in Dubai, United Arab Emirates. FOOTYUP is not yet a registered company; until it is, FOOTYUP decides how your personal data is used and is responsible for it (the “controller”). When the company is registered, this notice will name it and we will tell you. For anything in this notice, write to 1@footyup.com.

02What we collect

Your account
Email, name, phone number and your password — stored only as a one-way hash, never readable. If you sign in with Google: your Google account ID, email and name.
Your player profile
Display name, photo (if you add one), nationality, position, preferred foot, level, kit size, emirate, when you can play, birthday (optional) and how you heard about us. Please don’t name other people there unless they agree.
Bookings and payments
For each order: contact name, phone and email, what you booked, amounts, promo codes, club credit and Pass membership. How you paid: cash at the venue, a crypto transfer to our wallet, or card through Ziina’s payment page — we never see your card details. If you book for friends, the names you give us for them. We keep a history of each game’s roster and waiting list — who joined or left, when, and which staff member or system made the change.
Players you give a heart
When you give another player a heart — in a match report after the game, or on a game’s tactical map before it — we keep who you hearted, when, and the game it came from. You can remove a heart at any time under My players in your profile.
Your feedback after a game
The match-report email asks “How was the game?”. If you answer, we keep your rating, the reasons and team balance you pick, your comments, and any players from that game you say you didn’t enjoy playing with, with what you wrote about it — linked to your account and the game. Answering is optional. You can change your answer for 7 days after the report is published, through the personal link in the email; anyone you forward that link to can see and change your answer too.
Your agreement to the club rules
When you tick the box to agree to the club rules and acknowledge this notice — when you book a game, or on your game’s page before it — we keep which version of the rules and of this notice you were shown, the language, when you ticked it and, if you ticked it on a game’s page, which game. The club rules include clause 10.2: games are photographed and filmed, and those photos and videos may be used to promote FOOTYUP — agreeing to the rules includes that. It does not sign you up to marketing emails, and it is not the separate consent to analysing how you move (see Photos and video).
Waitlist
Your contact details when you queue for a full game.
Corporate enquiries
Company, contact name, work email, phone, event details and your message.
Match records
Your team, goals, assists, saves, cards, substitutions, minutes, rating, awards and badges, entered by our coordinators.
Guests without an account
When someone plays without a FOOTYUP account, a coordinator enters their first and last name and shirt number for that match. There is no profile and we hold no contact details. The full name stays with our staff. To have the name replaced with “Guest” in every report, write to 1@footyup.com.
Photos and video
We film games with a fixed camera. Video is used for highlights and match reports, and to estimate how players move on the pitch (heatmaps and movement statistics). We are introducing a separate consent for this analysis. Until it is in place, you can ask us at 1@footyup.com to leave you out of it.
Technical data
When you sign in: your IP address and browser type, to keep your session secure. For signed-in members: a log of pages visited and actions taken, with IP address and browser type, to protect accounts and help when something goes wrong. We count visits to the site: these statistics store only daily totals by device type and browser family, with no visitor identifier. Our servers also keep standard access logs.
Cookies and browser storage
See section 09.

03Why we use it

  • To run your account and your games — bookings, payments, rosters, reports and messages about your games. This is necessary to provide the service you signed up for.
  • To show that you agreed to the club rules — the rules every player plays by. Agreeing to them is part of booking a game, so this record is necessary to provide the service.
  • To improve our games — your feedback after a game helps us organise the next ones, balance the teams and deal with conduct on the pitch. You choose whether to answer.
  • To keep the service safe — sign-in security, abuse and fraud prevention, support.
  • To meet legal obligations — accounting and tax records, and proof of your consent choices.
  • With your consent only — analytics cookies (Google Analytics). You can withdraw consent at any time; withdrawing doesn’t affect what was done before.

Emails about your games, reports and videos, and about free spots in upcoming matches, can be switched off one by one in your email settings or with the link in every email.

04What other people can see

  • Your player profile is public unless you turn it off in Settings: display name, photo, nationality, position, preferred foot, rating, join date, games, goals and assists, match history, heatmaps and match-video links.
  • Match reports name everyone who played, even if your profile is private — taking part in a match is public. A guest without an account appears by first name and initial.
  • Game rosters show who is booked (your display name, or “FOOTYUP member” if your profile is private), names of friends you booked for, and whether a spot is paid.
  • Match videos are published on YouTube.
  • Your hearts are not public. You and FOOTYUP admins can see them. A game’s coordinator sees hearts only between players booked in that game, to help split the sides. Nobody is told when you give or remove a heart, and players never see who hearted them.
  • Your feedback after a game is seen only by FOOTYUP admins — not by a game’s coordinator and not by other players. It is not anonymous: admins see who answered. A player you name is never told, and never sees what you wrote.
  • Whether you have agreed to the current club rules is seen by FOOTYUP admins and by a game’s coordinator for the players booked in that game, so they can ask on the day. Other players never see it.
  • A FootyUp Pass in date shows as the Gold league on the public standings.

05Who we share it with

Only what each needs to do its job for us:

WhoWhat forWhere
HetznerOur servers, database and backupsGermany (EU)
GoogleAnalytics — only if you allow it. Sign-in with Google, if you use it. Web fonts and YouTube match videosUSA
ResendSending our emailsUSA
TelegramOur team’s notifications of orders and waitlist requests, including your name, phone and emailUAE and worldwide servers
ZiinaCard payments, when offeredUAE
BybitReceiving crypto payments — blockchain transfers are public by natureWorldwide
Vast.aiComputing power for analysing match videoUSA company, servers in Europe
OpenAI, AnthropicAI tools our team uses to style heatmap images (no names or statistics are sent) and to review match videoUSA
geojs.ioYour IP address, to pre-fill your country’s phone codeOutside the UAE
unpkg, Cloudflare, CARTOYour browser loads some code and map tiles from them, which shares your IP addressWorldwide
GitHubOur code repository, which holds heatmap images and staff photosUSA

We also disclose data when the law or a competent authority requires it. We do not sell your data.

06Transfers outside the UAE

Several of the recipients above are outside the UAE. We transfer only what each one needs, where the transfer is necessary to provide our service to you or you have consented to it (analytics), and we rely on our providers’ contractual data-protection commitments.

07How long we keep it

DataKept for
Account and profileWhile your account exists; deleted within 30 days of your request, except records the law makes us keep
Orders and payment recordsAs long as UAE commercial and tax law requires — at least five years
Sign-in sessionsExpire 30 days after you last use them
Member activity log180 days
Game roster and waiting-list historyKept with our match records and not deleted automatically; the names of friends you booked for are removed when your account is deleted
HeartsUntil you remove them; deleted with your account — both the hearts you gave and those given to you. If an admin removes a heart, a note that it was removed stays in the member activity log for 180 days
Your agreement to the club rulesWhile your account exists; deleted with your account
Feedback after a gameKept with our match records and not deleted automatically; deleted with your account. If a player you named deletes their account, the record that you named them is deleted too, but words you wrote in a note or comment stay with your answer
Proof of your cookie choiceThree years after your last change
Match video and analysisUntil our team deletes it; we are introducing an automatic limit for raw video
Server backups14 days on our servers; offline copies are kept by our team
Corporate enquiriesUntil you ask us to delete them

08Your rights

You can ask us to tell you what we hold about you and give you a copy; to correct it; to delete it; to restrict or stop a use of it; and to withdraw any consent. Ratings and statistics are entered or checked by people — no decision about you is made by automated processing alone. Write to 1@footyup.com: we reply within 30 days and may ask you to confirm your identity first. Much of this you can do yourself in your profile: edit your details, make your profile private, and change your email and cookie settings. If you think we got it wrong, you can complain to the UAE Data Office.

09Cookies and browser storage

NameWhat it doesHow long
footyup_sessionKeeps you signed in. Essential30 days
footyup_oauth_stateProtects sign-in with Google. Essential10 minutes
_ga, _ga_9N91YMZZSTGoogle Analytics visit counting. Only if you allow analyticsUp to 2 years, or until you withdraw
footyup.consentRemembers your cookie choice (stored in your browser)12 months
fu-visitStops the same browser tab being counted twice in our visit statistics (stored in your browser, for that tab only). It is not a visitor identifierUntil you close the tab
Browser storageYour language, cart, a referral code you arrived with, whether you’ve seen the intro, and a cache of public match dataUntil you clear it; referral code 30 days

Change your analytics choice any time: Cookie settings.

10How we protect it

Encrypted connections (TLS) everywhere; passwords stored only as hashes; sign-in cookies your browser’s scripts cannot read; two-factor authentication for all staff accounts; and staff see only what their role needs.

11Under 18

FOOTYUP is for adults. Players under 18 may take part only with the written consent of a parent or guardian, who is responsible for them. We don’t knowingly collect data from anyone under 18 without that consent.

12Changes

When we change this notice, we update the version and date above. If a change affects what you agreed to, we ask again.