In short

You can read everything on this website without an account. If you sign in, we keep only what the website needs to work: a random account id, the display name you choose, a pseudonymized copy of your email address, and, if you're part of the FEDESA staff, your role and a record of what you did as staff. You can see all of it yourself at any time (Settings › Your data). We don't show or store your Google name or picture, we don't use advertising or tracking, and we never sell or share your data for marketing. You can delete your account at any time, and the data that identifies you is wiped from the system.

Who is responsible

The website fedesa.org is run by FEDESA, a non-commercial community football league on Roblox. FEDESA is responsible for the personal data described here (the “controller” under the EU General Data Protection Regulation, GDPR). Contact: [email protected].

Signing in with Google

Signing in uses your Google account through Firebase Authentication, a Google service. When you sign in, Google tells Firebase who you are and gives your account a random id (for example k3J9…). Firebase keeps the sign-in record that Google provides (your email address, and the name and picture on your Google account) so that you can sign in again later. That record is used only to sign you in. Firebase Authentication runs in the United States.

From that sign-in, the website uses only your account id and the first 2 letters of your email address. Your Google name and profile picture are never stored in our database and never shown on the site.

What we store about you, and why

Why we're allowed to use it

• To provide your account (GDPR Art. 6(1)(b)): signing you in, your display name, and your role and its permissions.
• Our legitimate interests (GDPR Art. 6(1)(f)): keeping the league records accountable (who entered, edited or confirmed a match), telling accounts apart (the pseudonymized email), and keeping the website secure.

We keep it for as long as you have an account. When you delete your account, it's deleted as described below. Our hosting providers keep short-lived server logs (such as IP addresses) for security, for the periods set out in their own policies. We don't make automated decisions about you or build profiles.

Who can see it

• Everyone can see confirmed matches, players, competitions and teams. A Manager's display name is shown on their team's page, and the display name of the staff member who entered, edited or confirmed a match can be shown with that match. The transfer market and the finance log are public too: each offer, answer, confirmation and balance change shows the display name and role of whoever made it (and a Manager's team). The money in them (P$) is the league's own and not real.
• Staff can see the changelogs and notes, which show the display name and role of whoever made each change.
• Directors can see the user list: display names, pseudonymized emails, roles, first and last seen dates, and the role and name history.
• You can see everything we store about you on your own data page (Settings › Your data). Nobody else can open it.
• Security is enforced by the database rules and the server. Changing the page in your browser doesn't give anyone more access.

Staff activity

When a staff member logs, edits, confirms, deletes or posts a match, writes a note, or changes a team or season, the website records who did it (their account id, display name and role) and when. This keeps the league records accountable and shows each match's history.

Roblox match data

Match reports come from FEDESA's Roblox games and include the Roblox usernames, display names and user ids of the players and officials in each match, along with their match statistics. Avatar pictures are loaded from Roblox. This is public Roblox information that forms the league's records, and it isn't linked to your Google account. If you'd like something changed in it, contact the FEDESA staff.

Players' Discord accounts

FEDESA staff (Administrators and Directors) can link a player's Roblox account to their Discord account, so that match logs posted in FEDESA's Discord server mention them. For that we store the Discord user id and username next to the player's Roblox user id and username. Only FEDESA staff can see this link; it isn't shown on the public website. The Discord bot looks the username up in FEDESA's Discord server, and Discord processes it under its own privacy policy. The legal basis is FEDESA's legitimate interest in running the league and its match reports. To have the link removed, ask the FEDESA staff or email us; staff can unlink it at any time, and it's deleted with the player's record.

Cookies and your browser

The website doesn't use any cookies of its own, nor any advertising, analytics or tracking. It keeps only what it needs in your browser's storage:

• Your sign-in (kept by Firebase, only if you sign in) so you stay signed in. Signing out removes it.
• Your theme (dark or light), because you chose it.
• Short-lived copies of public data, such as the team list, for this tab only, so that pages load quickly.

These are needed for the website to work as you ask, so they don't need a consent banner. While you sign in, Google's sign-in window is run by Google and follows Google's privacy policy. Our server provider, Cloudflare, may set a strictly necessary security cookie to protect the site from attacks.

Services we use

• Google Firebase: sign-in (Firebase Authentication) and the database (Cloud Firestore), as our processor under Google's Cloud Data Processing Addendum.
• Cloudflare: the server at api.fedesa.org that checks every staff change, and delivering and protecting the website (it handles visitors' IP addresses to do so), as our processor under Cloudflare's Data Processing Addendum.
• GitHub Pages: hosting the website's files. GitHub records visitors' IP addresses for security, under its own privacy statement.
• Roblox: players' avatar pictures are loaded from Roblox, which receives your IP address to send them, under its own privacy policy.
• Discord: match results are posted to the FEDESA Discord server, mentioning players whose Discord account staff have linked (see “Players' Discord accounts”). These posts don't include anything about your website account.

The website's fonts are served from the website itself, so your browser doesn't contact any font service.

Some of these providers are based in, or process data in, the United States. Such transfers are covered by the safeguards the GDPR requires: the EU–U.S. Data Privacy Framework, or the European Commission's Standard Contractual Clauses.

Deleting your account

Open Settings (the cog in the top bar) and choose Delete account. After you confirm, the data that identifies you is wiped from the system:

• your display name, the pseudonymized email, your first and last seen dates, your role, the team you manage, and your role and name history are deleted;
• wherever you're credited (match edits and confirmations, notes, changelogs), your account id is removed and your name is replaced with “Deleted user”. The matches themselves stay as they are;
• your sign-in record is deleted from Firebase Authentication. Google may ask you to confirm it's you.

This can't be undone. If you sign in again later, a new, empty account is created. A Director's account can't be deleted until the Director role has been removed.

Your rights

Under the GDPR you have the right to:

• access the data we hold about you, and receive it in a portable form: Settings › Your data shows all of it and lets you download it as a file;
• have it corrected: you can change your display name yourself at any time, and we'll fix anything else you ask;
• have it erased: Settings › Delete account;
• restrict its use, or object to the uses based on our legitimate interests.

For anything you can't do yourself, write to [email protected] and we'll answer within one month. You can also complain to the data protection authority in your country.

Changes to this policy

If this policy changes, the date at the top of this page is updated. Important changes are announced on the FEDESA Discord server.

Agreement

These Terms of Service apply to the website fedesa.org (“the website”), run by FEDESA. By creating an account, you agree to them and confirm that you have read the Privacy Policy. You can read the website without an account, and these terms apply to that use too, where relevant.

Who can have an account

You sign in with a Google account, so you must meet Google's own age requirements. If you're under the age at which you can agree to online services yourself in your country (between 13 and 16 in the EU, depending on the country), you need permission from a parent or guardian. Each person may have one account, and you're responsible for what's done with it.

Display names and conduct

• Don't choose a display name that's offensive, misleading, or pretends to be someone else (for example a staff member or another player).
• Don't try to get access you weren't given, get around the website's security, overload it, or interfere with other people's use of it.
• Don't use the website for anything illegal, or to harass anyone.

FEDESA may change a display name that breaks these rules, remove roles, or delete an account that's misused.

Staff roles

Roles (Director, Administrator, Referee, Manager) are given by FEDESA and can be changed or removed at any time. Staff must use their tools only for running the league: they must record matches truthfully and keep anything they see only as staff (unconfirmed matches, notes, user details) to themselves.

League records

Match results and statistics come from FEDESA's Roblox games and from staff, who check and confirm them. We try to keep them accurate, but they're provided as they are, and staff may correct them. Only FEDESA staff decide official results.

Names, logos and Roblox

FEDESA, its competition and team names and their logos belong to FEDESA or their owners; don't use them in a way that suggests you speak for FEDESA. FEDESA is a community project and isn't affiliated with, endorsed by or sponsored by Roblox Corporation. Roblox is a trademark of Roblox Corporation.

Availability and liability

The website is free and is provided “as is”. We don't guarantee that it's always available or free of errors, and we may change or stop any part of it. As far as the law allows, FEDESA isn't liable for losses that come from using the website. Nothing in these terms limits liability that can't be limited by law, or your rights as a consumer under the law of your country.

Ending your account, and changes

You can delete your account at any time in Settings. If these terms change, the date at the top is updated and important changes are announced on the FEDESA Discord server. If you keep using your account afterwards, you accept the new terms. Questions: [email protected].

Provider

FEDESA
A non-commercial community football league on Roblox, running the website fedesa.org.

Contact

Email: [email protected]

We aim to answer every message within a few days. For questions about your personal data, see the Privacy Policy above.

FEDESA doesn't sell anything and isn't a business, so it has no company registration, trade register entry or VAT number.

Responsible for the content

FEDESA, reachable at the email address above. Match reports, player names and statistics come from FEDESA's Roblox games, and Roblox usernames and avatars belong to their owners.

Links to other websites

The website links to other websites, such as Roblox profiles, Discord and Google Sheets. We aren't responsible for their content. If you find a link to unlawful content, tell us and we'll remove it.

Online dispute resolution

FEDESA offers no paid services and isn't obliged, nor willing, to take part in dispute resolution proceedings before a consumer arbitration board. Contact us directly at the email address above instead.