This document (hereinafter referred to as the "Privacy Policy") concerns the website available at the URL: https://fballers.com (hereinafter referred to as the "website") and the online game fballers, available at https://game.fballers.com and as a desktop application distributed through Steam (hereinafter referred to as the "game"). It is valid from 23 October 2026 and replaces the version valid from 1 March 2021. If amendments are introduced to the Privacy Policy, they will be announced on this page and, if they concern players, in the game.
The rules for using the game are set out in the Terms and Conditions.
What is GDPR?
This abbreviation is commonly used in relation to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").
Who is the data controller?
The data controller of your personal data is BALLERS GROUP Sp. z o.o., with its registered seat at ul. Zygmunta Krasińskiego 29/1, 40-019 Katowice, Poland, KRS: 0000885315, NIP: 9542823814 (hereinafter referred to as "we").
In all matters concerning personal data, you can contact us by e-mail at contact@fballers.com or by post at the address above.
How do we process data in the game?
Creating and running your account and providing the game
Purpose of processing data and legal basis: Art. 6 sec. 1 b) GDPR. We need this data to conclude and perform the contract with you, i.e. to let you play the game in accordance with the Terms and Conditions.
The scope of data: E-mail address and password (stored only in a protected, hashed form); if you sign in with Steam: your Steam ID, Steam display name and Steam avatar; the names and avatars of your characters; the region and language you choose; your game settings; and data generated while you play, such as your characters' progress, clubs, matches, contracts, inventory, in-game currencies, VIP status, invite code used, and the dates you signed up, logged in and were last active.
Processing time: For as long as you have an account. After the account is deleted, we keep only the data needed to establish, investigate or defend legal claims, for a period of 6 years from the date of deletion.
Providing an e-mail address (or signing in with Steam) is necessary to create an account. Without it we cannot provide the game to you.
Your character names, avatars, clubs, statistics and match results, and the content you publish in public parts of the game, are visible to other players.
Chat, direct messages, feed and uploaded images
Purpose of processing data and legal basis: Art. 6 sec. 1 b) GDPR, to provide the communication features of the game.
The scope of data: The content of your chat messages, direct messages and feed posts, the people you block, and images you upload, such as avatars, club logos and images in club descriptions.
Processing time: Messages in global and league chats are deleted after 14 days and messages in club chats after 90 days. Direct messages, feed posts and uploaded images are kept until you or the other party delete them or the account is deleted. Content that has been reported is kept until the report and any appeal have been resolved.
Moderation, security and preventing abuse
Purpose of processing data and legal basis: Art. 6 sec. 1 f) GDPR. The legitimate interest lies in keeping the game, its players and our systems safe, preventing cheating, fraud and abuse, and enforcing the Terms and Conditions. To the extent we handle notices of illegal content and inform you about our moderation decisions, the legal basis is also Art. 6 sec. 1 c) GDPR in connection with Regulation (EU) 2022/2065 (Digital Services Act).
The scope of data: IP address, browser or device type (user agent), login and session data, rate-limit counters, reports you make or that concern you (including an excerpt of the reported conversation), and the warnings and restrictions applied to your account, with their reasons. In addition: data about your activity in the game (the times of your actions, schedules, missions, transfers and market trades), which we analyse to detect automation and abuse; if you sign in through Steam, the Steam ID of the owner of the game licence (for example under Steam Family Sharing) and whether that Steam account has a VAC ban or a publisher ban; and the IP address, user agent and an identifier of the desktop application installation, recorded when you sign up, sign in and use the game's economy (for example the market, Cash transfers or club deposits), to detect linked accounts.
Processing time: Session data until you sign out or the session expires (sessions last up to 7 days). The IP address, user agent and installation identifier recorded at sign-up, sign-in and economy actions for 90 days, after which they are deleted. Reports and account restrictions for as long as you have an account, and afterwards for a period of 6 years for the purposes of establishing, investigating or defending legal claims.
We use automated tools to filter words, limit how fast messages can be sent, and temporarily hide a message that several trusted players have reported until a moderator reviews it. The analysis of game activity, Steam data and linked accounts only points our team to cases to review; it does not restrict any account by itself. Decisions about restricting an account are made by our team. We do not make decisions that produce legal effects for you based solely on automated processing.
Technical logs and error monitoring
Purpose of processing data and legal basis: Art. 6 sec. 1 f) GDPR. The legitimate interest lies in keeping the game working, finding and fixing errors, and measuring the performance of our servers.
The scope of data: Your account ID, character name and technical information about the requests your device sends to the game.
Processing time: For as long as we need the logs to operate, secure and troubleshoot the game, and for no longer than 90 days, after which they are deleted. Logs kept only on a game server may disappear sooner, for example when that server restarts.
Purchases and subscriptions
Purpose of processing data and legal basis: Art. 6 sec. 1 b) GDPR, to sell and deliver fCoin and VIP; Art. 6 sec. 1 c) GDPR, to meet our tax and accounting obligations; Art. 6 sec. 1 f) GDPR, to handle complaints, refunds and chargebacks and to prevent payment fraud.
The scope of data: What you bought, its price and currency, when you bought it, what was delivered to your account, and the status of your subscription. Your payment is processed by the payment provider shown at checkout. We do not receive your full card or bank details.
Processing time: Accounting records for 5 years from the end of the calendar year in which the purchase was made, and other purchase data for 6 years from the date of the purchase for the purposes of establishing, investigating or defending legal claims.
E-mails about your account
Purpose of processing data and legal basis: Art. 6 sec. 1 b) GDPR. We send e-mails that are necessary to provide the game, such as confirming your e-mail address, resetting your password, confirming purchases, and informing you about changes to the Terms and Conditions or the game. These are not marketing messages.
The scope of data: E-mail address
Processing time: For as long as you have an account.
How do we process data on the website?
Sending the newsletter
If you have agreed to receive the newsletter, we will inform you about the progress of work on the game, as well as about its launch, events and rules of operation. The newsletter may also contain information about prices and offers in the game, so we ask you to agree to receive commercial information from us. You can withdraw your consent and unsubscribe from the newsletter at any time, using the link in each message.
Purpose of processing data and legal basis: Art. 6 sec. 1 a) GDPR
The scope of data: E-mail address
Processing time: Until the consent is withdrawn, and after this period, we process information about when and who signed up for the newsletter and what messages were sent. This information is stored for the purposes of establishing, investigating or defending legal claims for a period of 6 years from the date of withdrawal of consent. We also keep the e-mail address of a person who unsubscribed on a suppression list, so that we never send them the newsletter again by mistake (Art. 6 sec. 1 f) GDPR).
Pick'em and other community events
Purpose of processing data and legal basis: Art. 6 sec. 1 b) GDPR, to let you take part in the event in accordance with its rules, including awarding prizes such as access to the game.
The scope of data: If you sign in with Discord: your Discord ID, user name and avatar; your picks and results; and the IP address and browser type of your session.
Processing time: For as long as the event runs and prizes are awarded, and afterwards until you ask us to delete your event account.
Referral links from our earlier landing page
If you generated a referral link on our earlier landing page, the link is unique and tied to your e-mail address. To have it taken into account, set up your game account with the same e-mail address.
Purpose of processing data and legal basis: Art. 6 sec. 1 b) GDPR
The scope of data: E-mail address
Processing time: If the contract is not concluded for a period of up to 6 years from the date of providing the e-mail address for the purposes of establishing, investigating or defending legal claims. If a contract is concluded, i.e. an account is created, the data will be processed for the duration of the contract and for a period of 6 years from the date of termination of the contract for the purposes of establishing, investigating or defending legal claims.
Providing answers to the questions
Purpose of processing data and legal basis: Art. 6 sec. 1 f) GDPR. The legitimate interest lies in communicating with you and answering your questions to us, including support requests and complaints.
The scope of data: E-mail address, telephone number or any other data (you give us)
Processing time: The data is deleted after 1 month from the date of answering, if the communication does not concern obligations or claims. If the communication concerns obligations or claims, we have the right to store the correspondence for a period of 6 years from the date of its completion for the purposes of establishing, investigating or defending legal claims.
Where does the data come from?
We collect most data directly from you or generate it while you use the game. If you sign in with Steam or Discord, we receive the data listed above from Valve Corporation or Discord Inc., respectively.
Who do we share data with?
We use trusted service providers that process personal data on our behalf (Art. 28 GDPR). These providers act only on our instructions and under appropriate data-processing agreements. They include providers of:
- website hosting, content delivery, and protection of the website and of sign-up to the game against bots and attacks (Cloudflare, including Cloudflare Turnstile);
- website database and file storage (including images);
- sending e-mails and backup file storage, with servers in the European Union;
- servers that host the game, located in the European Union;
- the payment provider shown at checkout, when you make a purchase. Where the payment provider acts as the seller (merchant of record), it processes your data as a separate controller under its own privacy policy.
If you sign in with Steam or Discord, Valve Corporation and Discord Inc. process your data as separate controllers under their own privacy policies. The game currently loads fonts from Google Fonts (Google Ireland Limited), which means your browser sends your IP address to Google when it loads the game.
Access to the data is also granted to authorized employees or associates involved in operating the game and the website. We may also disclose data to public authorities when the law requires us to.
Is data transferred outside the EEA?
Some of our providers, or their parent companies, are based in the United States. Where personal data is transferred outside the European Economic Area, we rely on a European Commission adequacy decision (including the EU-US Data Privacy Framework, for providers certified under it) or on the standard contractual clauses adopted by the European Commission (Art. 45 and 46 GDPR). You can ask us for a copy of the safeguards used.
Age
If you are under 18, you may use the game only with the consent of your parent or legal guardian. Where the law requires a parent's consent for processing a child's data, we rely on that consent. If we learn that we hold data of a child without the required consent, we will delete the account.
What are your rights?
You have the right to access your personal data, rectify it, delete or limit processing, including the right to object to the processing based on our legitimate interest, as well as the right to transfer data. Where processing is based on your consent, you can withdraw it at any time; this does not affect the lawfulness of the processing before the withdrawal.
To exercise your rights, including to have your game account deleted, write to us at contact@fballers.com. We will reply within 1 month. We may ask you to confirm that the account is yours before we act on the request.
You also have the right to lodge a complaint with the supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa). Check which national data protection authority is right for you: https://edpb.europa.eu/about-edpb/board/members_en
What are cookies?
Cookies are small pieces of information that store specific information in your browser. Similar technologies, such as local storage and session storage, work in the same way. We use only the ones that are necessary for the game and the website to work or that remember the choices you make. We do not use analytics or advertising cookies. If we decide to use them in the future, we will ask for your consent first and update this Privacy Policy.
| Where | Name | Purpose | How long |
|---|---|---|---|
| Game | Cookies starting with fgame | Keep you signed in | Up to 7 days |
| Game | Local and session storage starting with fballers | Remember your sound, layout and camera settings, keep the desktop application signed in, and remember which notices you have already seen | Until you clear them or, for session storage, close the tab |
| Website | Cookies starting with fbwc | Keep you signed in to Pick'em | Up to 90 days |
| Website | Local storage | Remember the language you chose for the blog | Until you clear it |
| Game and website | Cookies set by our website hosting and security provider | Protect the services against bots and attacks | Up to 30 minutes |
How to manage cookie settings?
Through your browser settings, you can decide whether you consent to the storage of cookies in your browser. You can also delete cookies saved so far. If you block the cookies listed above, you will not be able to sign in to the game or to Pick'em.