Privacy notice

Creating and managing your account

DATA

• email address
• first and last name
• date of birth
• nickname
• password (stored encrypted, never in the clear)
• profile picture, if you upload one
• bio and favourite team, if you fill them in

WHY WE MAY DO IT

Performance of the contract (art. 6.1.b GDPR): without this data the account cannot exist.

FOR HOW LONG

As long as the account stays active. If you ask to delete it, you have 14 days to change your mind; when the time runs out the data is anonymised irreversibly.

The date of birth is used to check the age requirement: FootNews is for adults only.

Letting you publish content and interact with others

DATA

• posts, comments, quotes and reshares
• reactions
• users you follow and users you have blocked
• reports you send
• saved stories and followed sources

WHY WE MAY DO IT

Performance of the contract (art. 6.1.b GDPR).

FOR HOW LONG

As long as the account stays active. When the account is deleted your content disappears for everyone, together with the direct replies to your comments.

Keeping the community clean

DATA

• the text of the content you publish, checked before publication
• reports received about a piece of content
• blocks between users

WHY WE MAY DO IT

Legitimate interest (art. 6.1.f GDPR) in preventing hate content, threats and unlawful material, and legal obligations on digital services.

FOR HOW LONG

Reports are kept for as long as the check requires and, if they lead to a measure, to document it.

The automatic check before publication compares the text against a short list of terms: it profiles nobody and produces no decisions about the person.

Managing subscriptions, purchases and FootCoin

DATA

• subscription and in-app purchase status
• active licences and add-ons
• FootCoin and FootPoints movements
• transactions

WHY WE MAY DO IT

Performance of the contract (art. 6.1.b) and, for the accounting records, legal obligation (art. 6.1.c).

FOR HOW LONG

Accounting records are kept for ten years, as Italian law requires. They remain even if you delete the account, but from that moment they are no longer linked to an active profile.

You can subscribe in two ways, and who takes the money changes. From the app, the purchase is handled by Apple; from the site, by Stripe. In neither case do we see your card details: we only receive the payment confirmation and the subscription status.

Issuing invoices

DATA

• company name or first and last name
• address, city, postcode
• VAT number or tax code
• phone

WHY WE MAY DO IT

Legal obligation (art. 6.1.c GDPR).

FOR HOW LONG

Ten years. If you delete the account and have invoices issued, this data stays because an invoice cannot exist without a bill-to party; everything else in the profile is anonymised all the same.

The invoice is issued automatically when the payment goes through, via the service we use for electronic invoicing.

Answering your support requests

DATA

• first name, last name, email and phone if you give it
• subject and body of the message

WHY WE MAY DO IT

Performance of the contract and legitimate interest in providing support (art. 6.1.b and 6.1.f GDPR).

FOR HOW LONG

Twenty-four months from the closing of the request.

Keeping the service and its security running

DATA

• sign-in sessions
• IP address and device type, in the technical logs

WHY WE MAY DO IT

Legitimate interest (art. 6.1.f GDPR) in keeping the service running and defending it from abuse.

FOR HOW LONG

Technical logs are kept for as long as diagnosis requires, and in any case no longer than 12 months.

Understanding how the service is used

DATA

• site pages and app screens you open
• device type and operating system
• language and version you are using
• country of origin

WHY WE MAY DO IT

Legitimate interest (art. 6.1.f GDPR) in understanding what works and what does not. The tool runs on a server of ours and uses no cookies. To count how many different people pass through in a day it computes a throwaway code from your IP address and device type: it changes every day, is not kept and is not linked to your account. The IP address serves only that computation and to derive the country, and is not saved. The result is aggregate numbers that do not allow anyone to be traced back to: this is why we do not ask you for a consent that would have no object.

FOR HOW LONG

Only the aggregate numbers remain: there is no row that speaks about you, so there is nothing to erase when you delete the account.

The statistics stay in our house: they run on a server of ours, do not pass through outside providers and do not feed profiling or advertising.

Showing you advertising and counting how many times it was seen

DATA

• which ad was shown, in which position and at what time
• whether it was opened
• device type (computer, phone, tablet), language, and which part of the service

WHY WE MAY DO IT

Legitimate interest (art. 6.1.f GDPR) in supporting a free service and in being able to tell whoever buys a slot how many times their ad was shown. The ad is chosen by WHERE you are — the section you are reading, the language, the type of screen — not by who you are: we do not build a profile, we do not infer interests, we do not use your history.

FOR HOW LONG

What remains is the count of an ad, not the trace of a person: there is no identifier, there is no account of yours and there is no IP address of yours, so there is nothing that can be led back to you. We keep the records for twelve months all the same and then delete them, leaving only the daily totals.

Until 17 August 2026 we saved a random code on the device that served to avoid repeating the same ad. We no longer do: it was the only thing we put on your device that the service did not need, and we preferred to remove it rather than ask your permission to keep it. The advertising is ours anyway — we sell it, a server of ours serves it — and there is no outside network, no third-party script on the pages, no phone advertising identifier and nothing that follows you elsewhere. Whoever buys a slot receives only aggregate numbers from us. Every ad is marked as such.

Sending you notifications about activity that concerns you

DATA

• device identifier for push notifications
• events that concern you

WHY WE MAY DO IT

Performance of the contract (art. 6.1.b GDPR).

FOR HOW LONG

As long as you keep notifications on. You can turn them off in your phone settings at any time.

Sending you news and marketing messages

DATA

• email address
• name

WHY WE MAY DO IT

Your CONSENT (art. 6.1.a GDPR), which you give by ticking a dedicated box — separate from accepting the terms — and which you can withdraw whenever you like, from every email we send you or by writing to us. We do not use the shortcut allowed for those who have already bought something: that requires a completed sale, and signing up to FootNews is free.

FOR HOW LONG

Until you withdraw consent or delete the account. We keep a record of when and how you gave consent, because it is on us to prove it.

You will receive nothing if you did not tick that box: without consent you are not on the list. Service emails — password recovery, account notices — are not marketing messages and reach you anyway.