Last updated 3 November 2026
Football Career Online is a multiplayer football management game. This page explains what it collects, why, who it goes to, and how to get rid of it. It is written to be read, not to be skimmed past.
Who is responsible
The site is run by an individual, not a company. For anything in this policy — including a request to delete your account — contact daniel@pathstudioai.com.
What is collected
When you create an account
- Email address — used to identify your account and sign you in.
- Password — never stored in readable form. Authentication is handled by Supabase, which stores only a salted hash. Nobody running this site can see your password.
- A display name and username — shown to the other managers in your careers. Pick something you are happy for them to see.
When you play
- The careers you belong to, the club you manage, your squad, tactics, transfers, results and statistics.
- Which other accounts share a career with you — that is how the game shows you the other managers.
- When you were last active. We show other managers whether you were active in the last 10 minutes, as a yes or no. The time itself is not shown to them.
- Whether you were shown our Discord invite and how you answered it, linked to your account, so we can see how it is working.
The free match demo runs in your browser and does not create a career record. The site also uses Vercel Web Analytics to understand page visits and which parts of the site people use. Vercel describes this service as cookie-free; see its analytics privacy documentation. We do not send your password or match decisions as custom analytics events.
Why, and on what legal basis
| Purpose | Basis (UK/EU GDPR) |
|---|---|
| Running your account and your games | Performance of a contract with you |
| Keeping the service secure and working | Legitimate interests |
| Showing personalised advertising | Your consent, which you can withdraw |
Cookies
Strictly necessary
Signing in sets session cookies (names beginning sb-) so the site knows it is still you between page loads. Without them you could not stay logged in, so they do not require consent — but they are disclosed here because they exist. Signing out clears them.
Creator links
If you arrive through a creator's link (an address containing /r/ or ?ref=), a first-party cookie called fco_ref remembers that creator's handle and the time of the click for up to 30 days. It holds no personal data. When you sign in, the creator is linked to your account so they can receive a share of any FCO Pro purchase you make within 12 months, and the cookie is deleted.
Advertising
Ad serving is currently disabled while the site is prepared for review. Google AdSense is the intended advertising provider. Before ads are enabled, the required consent controls must be configured. This page will be updated to describe the active advertising and consent setup.
Vercel Web Analytics does not use cookies. Necessary sign-in cookies are separate.
Who your data is shared with
The services used to operate the site are listed below. We do not sell your account data.
- Supabase — the database and authentication. Hosted in Frankfurt, Germany (EU).
- Vercel — hosting and Web Analytics. Server functions run in Frankfurt, Germany (EU).
- Paddle — our reseller and Merchant of Record for FCO Pro. If you buy Pro, Paddle processes the payment and your billing details, sends the receipt and handles refunds; FCO receives the order, its amounts and status, never your card details.
- Resend — sends emails about Creator Program applications. It receives the applicant's email address, their creator name and the content of the email.
- Google AdSense — the intended advertising provider; ad serving is currently disabled. Google acts as an independent controller for advertising data; see how Google uses data from sites that use its services.
Creator Program
If you apply to the Creator Program, we collect the details on the form: your creator name, email, social links, approximate followers, niche, audience country, language and why you want to join, and we link them to your account. We use them to review your application and run the program, because that is needed to consider and perform the partnership. We keep rejected applications for 12 months, and partners' records for as long as the law requires, including tax records. You can ask us to delete anything else at any time. If you become a partner we also keep what is needed to pay you and account for commissions.
If you came through a creator's link, we record that creator against your account for 12 months once you have one. Creators only see totals: they never see who you are or what you bought. Link clicks are counted per day, with no information about who clicked.
Your public profile
If you have an account, your manager page at /u/your-username can be seen by anyone with the link, and signed-in players can find it by searching. It shows your display name, username, level, badges, achievements and the football record of your seasons, not your email or the names of your careers. Seasons you hide stay off it. You can take the page out of public view and out of search at any time on your profile. Search engines are asked not to index it.
If you own FCO Pro and upload a profile photo, it is resized and stripped of its metadata (such as camera location), stored with our database provider, and shown publicly on your page. Other players can report it. Reports are seen only by the admin, and a reported photo may be hidden or removed. Removing your photo or deleting your account deletes the file.
How long it is kept
Your account and its game data are kept until you ask for them to be deleted. Deleting your account removes your profile, your membership of every career, and your ownership of players in them. Careers you hosted are deleted with it.
Your rights
If you are in the UK or EEA you have the right to access your data, correct it, delete it, export it, restrict or object to its processing, and to withdraw consent for advertising at any time. Email daniel@pathstudioai.com and it will be handled. You also have the right to complain to your national data protection authority — in Portugal that is the CNPD.
Age
This site is not intended for children under 13, and accounts should not be created by them. If you believe a child has created an account, contact daniel@pathstudioai.com and it will be removed.
Changes
If this policy changes in a way that matters, the date at the top changes and the new version appears here.