← Games

Privacy Policy

Last updated: 2 October 2026

Who we are

Footi runs playfooti.com and is the data controller for the personal data described here. Footi is run by an independent individual in the UK. For any privacy question or request, email playfooti@outlook.com.

What we collect

  • Stored in your browser (no account needed): today's game progress, your stats and streaks, and settings such as language, theme and sound. This stays on your device; we can't see it unless you sign in.
  • Anonymous play counts: when you finish a game on playfooti.com we record the game, date, win or loss, number of guesses or solve time, and a random ID generated in your browser (so one device isn't counted twice a day). It isn't linked to your account, name or email.
  • If you create an account: your email address, sign-in method (email and password, or Google — from Google we receive your email and a basic account ID), your display name, your game stats, and the leagues you create or join. Passwords are handled by our sign-in provider and are never visible to us.
  • Technical data: like any website, the services that deliver the site (hosting and ads) receive your IP address and browser details when your device requests their content, and our hosting and sign-in providers keep short-term security logs.

Why we use it and our lawful basis

  • Running the games and your account (saving stats across devices, sign-in): necessary to provide the service you asked for — contract.
  • League tables: your display name and stats are shown in league tables to other players. This is part of the account service — contract. Your email is never shown. Choose a display name that doesn't identify you if you prefer.
  • Anonymous play counts and security logs: to understand which games are played and keep the site secure — legitimate interests.
  • Advertising cookies: only where you agree in Google's consent message — consent. You can change your choice at any time through that message's settings link. Footi requests non-personalised ads for everyone and does not use account information or browsing history to personalise advertising.
  • Legal requests: where we must keep or share data by law — legal obligation.

We don't sell your data, make automated decisions about you, or use your Footi account information for advertising.

Cookies and similar technologies

Footi itself uses your browser's local storage for game progress, settings and (if signed in) keeping you logged in — these are essential to how the site works. Google AdSense may set advertising cookies. Visitors in the UK and EEA are shown Google's certified consent message first. Footi requests non-personalised ads for every visitor, whether or not they have an account. These ads may still use cookies for frequency capping, fraud prevention and measurement. See how Google uses data from sites that use its services.

Who we share it with

  • Lovable — hosting, database and sign-in (using Supabase and Cloudflare infrastructure): stores account data and serves the site.
  • Google — Google sign-in (if you choose it) and AdSense advertising. Footi's typefaces are hosted with the site and are not requested from Google Fonts.

Some of these providers may process data outside the UK, including in the USA and EU. Where they do, they rely on recognised safeguards such as the UK adequacy regulations, the UK International Data Transfer Addendum or Standard Contractual Clauses.

How long we keep it

  • Account data (email, display name, stats, leagues) is kept until you delete your account. Deleting it removes your profile, stats, leagues you own, league memberships and your login straight away; copies in our providers' backups are overwritten on their normal backup cycle.
  • Anonymous play counts are kept for as long as they're useful for running the site; they don't identify you.
  • Browser-stored progress stays on your device until you clear your browser data.
  • Security logs are kept by our providers for a short period under their own policies. Advertising data is kept by Google under Google's policies.

Your rights

Under UK GDPR you have the right to access, correct, delete, or receive a copy of your data (portability), to restrict or object to how we use it, and to withdraw consent at any time where we rely on consent. From your account page you can change your display name, download your data, and delete your account. For anything else, email us and we'll reply within one month.

You can also complain to the UK Information Commissioner's Office at ico.org.uk (or your local data protection authority if you're in the EU). We'd appreciate the chance to help first.

Children

Anyone can play without an account and without giving us personal data. Accounts are for people aged 13 and over. If you're under 18, please don't use your real full name as a display name. If you believe a child under 13 has created an account, email us and we'll delete it.

Security

Data is sent over encrypted connections (HTTPS). Account data is protected by access rules so that only you can change your own profile and stats, and admin tools are password-protected. No system is perfectly secure, but we limit what we collect.

Changes to this policy

If we change how we use your data, we'll update this page and the "Last updated" date. For significant changes affecting account holders, we'll give notice on the site.