Legal · Privacy
Privacy Policy
Last updated 9 July 2026
This policy explains what personal data EasyChamp collects when you run or join competitions, simulate matches, manage a national team, or place virtual-coin wagers — and how we use, share, and protect it.
1. Who we are
EasyChamp (“EasyChamp”, “we”, “us”) operates the football competition platform at easychamp.com and its product surfaces — Leagues (organizer console), Sim (match simulator), Coach (national-team management), and the virtual-coin betting layer woven through them. We are the data controller for the personal data described below. For any privacy question, contact [email protected].
2. Information we collect
Account & identity
Sign-in is handled by our identity provider (Keycloak). When you create or use an account we process your email address, display name / username, and the authentication tokens that keep you signed in. If you register with Google or Facebook, we receive the basic profile fields you approve at that provider.
Tournament & gameplay data
The competitions, teams, fixtures, standings, squads, and career progress you create or join, along with the choices you make in Sim and Coach. This is the content you use the product to produce.
Payments
Virtual-coin purchases are processed by Stripe. We do not see or store your full card number — Stripe handles card data as a PCI-DSS payment processor. We retain a record of the transaction (amount, coin pack, timestamp, and a Stripe reference) for accounting and support.
Device, usage & cookies
Basic technical data (IP address, browser type, pages viewed) needed to serve and secure the site, plus the small amount of local storage described in section 6.
3. How we use your data
- To provide the products — run your competitions, sim your matches, manage your squad, and settle virtual-coin wagers.
- To authenticate you and keep your account secure.
- To process coin purchases and provide support.
- To operate, debug, and improve the platform.
- To comply with legal obligations and prevent abuse or fraud.
4. Legal bases (GDPR)
Where the GDPR applies, we rely on: performance of a contract (providing the service you signed up for), legitimate interests (securing and improving the platform, preventing abuse), consent (where we ask for it, e.g. optional communications), and legal obligation (accounting, responding to lawful requests).
5. Who we share it with
We do not sell your personal data. We share it only with processors that run the platform on our behalf: our identity provider (Keycloak), Stripe for payments, and our hosting and infrastructure providers. Each is bound to use the data only to provide their service to us. We may also disclose data where required by law.
6. Cookies & local storage
We keep this minimal. We use essential storage to hold your sign-in session (so you stay logged in) and a small preference value that remembers your light/dark theme choice. We do not run third-party advertising or cross-site tracking cookies.
7. Data retention
We keep account and tournament data for as long as your account is active. Payment records are retained as long as required for accounting and tax. When you delete your account we remove or anonymise your personal data, except where we must keep specific records to meet legal obligations.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data, and to object to certain processing. To exercise any of these, email [email protected] and we will respond within the timeframe the law requires. You also have the right to complain to your local data-protection authority.
9. International transfers
Our providers may process data outside your country. Where they do, we rely on appropriate safeguards (such as standard contractual clauses) to protect it.
10. Age
EasyChamp is not intended for children. The virtual-coin betting features are restricted to users who are at least the age of majority in their jurisdiction. We do not knowingly collect data from anyone below the applicable minimum age.
11. Changes to this policy
We may update this policy as the platform evolves. Material changes will be reflected here with a new “last updated” date.
12. Contact
Questions or requests about your data: [email protected].
Draft for review — governing jurisdiction, controller legal entity, and DPO details are placeholders and must be confirmed by counsel before this policy is treated as final.