Privacy Policy

1. This website

Browsing cards, prices and challenges needs no account. The server keeps short-lived request logs (path, time, status) to diagnose faults and measure cache performance; they are capped, rotate automatically and are not used to profile you. There is no advertising and no third-party analytics.

2. Solving happens on your device

The extension and app read the club the EA Web App already loaded and keep it in memory for the session. Your club is not uploaded to solve a challenge.

3. Shared game data (on by default, one switch to turn off)

To keep prices and challenge lists accurate for everyone, the extension and app forward a narrow selection of what the Web App loaded to the shared FutSBC database:

• Transfer market search results — card prices and BIN listings
• SBC sets and challenges, with their requirements and rewards
• Evolutions and objectives catalogues
• Price fields of cards in your club — per card definition (the card itself, e.g. “Saka 88 Rare”), EA’s listed min/max, last sale and average price, plus the card’s public attributes. Sent at most every ten minutes, only for cards whose price changed, and never the item id of your copy, whether it is tradeable, its contract, or how many you own.

Catalogue data is sent at most once a day per device, and the server keeps only the first copy it receives that day. Under the same switch the extension and app also send a small set of product events — which feature was used, the app version, and the text of errors raised by FutSBC’s own code — with no card ids, squad contents, coins or EA identifiers.

Turning it off: open the FutSBC popup (extension) or Settings (app) and switch off Share public game data. From then on nothing in this section is sent, and every feature keeps working.

4. What is never sent

• Your EA account, its email, password, session id, cookies or any authentication token
• Your coins, your transfer history, your trade pile or watchlist contents
• The squads FutSBC builds or submits for you
• Your name, your location, or anything you typed into the Web App

Credentials are stripped twice: on your device before a request is made, and again on the server before anything is written. Any field whose name looks like a session, token, auth header or cookie is dropped without being read.

5. Device id

On first run the extension or app generates a random string — twelve bytes, no relation to you, your machine or your EA account — and sends it with shared data to rate-limit abuse and keep one device’s contributions together. Clearing the extension’s storage or reinstalling the app mints a new one.

6. FutSBC account (optional)

You can use everything without an account. If you create one, we store your email address, a salted password hash (never the password), the date the account was created, your Pro status, and a session cookie that keeps you signed in on this site. An account is used for syncing your FutSBC settings between devices, syncing the request meter (timestamps of the submissions and pack openings FutSBC made for you — no squad contents), saving squads on this site, and unlocking Pro features you have paid for.

You can delete the account at any time from the app’s Settings or from your account page here; this removes the email, hash, synced settings and meter immediately and cannot be undone.

7. Payments

Pro is sold as a subscription. On the web and in the Chrome extension it is processed by Stripe; on iOS by Apple through the App Store. FutSBC never sees or stores your card number — only that a subscription is active, and until when.

8. Cookies

A session cookie when you sign in, and a record of a consent choice if you make one. Both are first-party. There are no analytics, advertising or tracking cookies.

9. Where the data lives

On a single server in Helsinki, Finland, operated by Hetzner Online GmbH within the EU, over TLS. Shared game data is kept while it remains useful for pricing history; account data is kept until you delete the account. Nothing is sold, and nothing is shared with third parties other than Stripe and Apple for payments.

10. Relationship with EA

FutSBC is an independent project. It is not affiliated with, endorsed by, or connected to Electronic Arts Inc. EA SPORTS FC and Ultimate Team are trademarks of Electronic Arts Inc.

11. Changes and contact

If what the software sends ever changes, this page changes with it and the date above moves. Questions, or a request to delete what a device or an account has contributed: privacy@futsbc.app. For a device without an account, include the device id shown at the bottom of the extension popup.