FutsalIndex privacy notice
How FutsalIndex handles account information, contributions, AI connections, cookies and privacy requests.
Who is responsible
The Salty Pistachio LTD, registered in England and Wales, company 10788917, operates FutsalIndex and is responsible for personal information processed for its platform services. Contact hello@futsalindex.com for privacy questions or to exercise your rights. This notice covers futsalindex.com, its account services and its MCP/application interfaces.
Information we receive
We receive an adult account’s email, display identity, sign-in/session records, representative claims and evidence, contributions and their source information, preferences, permitted inbox messages and event/registration records. Public directory information comes from published sources and community contributions. Our hosting and delivery providers process connection and delivery information needed to serve and secure the service. We do not require child accounts, dates of birth, home addresses or children’s contact details. Do not include these in evidence, messages or posts. Club representatives and event organisers can optionally store player display names as regular squad members or reserves and attribute goals. Full rosters are restricted to authorised managers. Display names attached to goals may appear in public event scorer rankings and match coverage; private event details remain restricted. Use names you have permission to publish, such as a first name and initial.
Why we use it
We use account and operation information to provide requested sign-in, contributions, event, messaging and connection services; administer representative access; maintain source attribution and accurate results; answer support requests; and prevent abuse. Providing requested account services is necessary for our contract with the account holder. Security, moderation, source attribution and reliable public records serve our legitimate interests, balanced against people’s rights. Optional analytics uses consent. We process information where needed to meet legal obligations, including applicable accounting and rights requests.
Optional event emails
With your optional consent, Futsal Index emails you relevant futsal tournaments, events and playing opportunities, including events run by other organisers. These messages may recommend or promote participation in an event. This choice does not cover unrelated sponsor or clothing-brand offers. We use the country, region and interests you choose to select relevant messages. These preferences are private and do not verify a club role or playing status. Marketing consent is separate from account creation, service emails, the weekly results email and analytics. A signup choice takes effect after you verify your email using the sign-in link. Existing accounts are not automatically subscribed. Futsal Index sends these messages; we do not share your email address with event organisers for their marketing. Unsubscribe using the link in any event opportunity email, manage preferences at /account/marketing, or email hello@futsalindex.com. Withdrawal stops future marketing without affecting your account or service messages. We record the consent wording, version, time, source and preference changes for the account lifetime to respect your choices and demonstrate consent. Pending unverified signup choices expire with their sign-in links; account deletion removes marketing preferences, consent records and unsubscribe tokens.
AI and MCP connections
The server receives explicit tool arguments, which may include text or evidence supplied from your assistant conversation. It returns public records or the private account, event, contribution and inbox information authorised for that request. The host assistant provider receives these results and processes them under its own terms. We do not retrieve unrelated conversations or operate background conversation monitoring. The MCP server does not call an inference provider. Club and organiser permissions are checked separately from OAuth scopes. Writes require a preview and explicit confirmation. OAuth credentials are isolated from normal tool results and account exports.
Who receives information
Public contributions and published club, team, result and event records are visible to visitors. Claim evidence and private account information are limited to authorised account holders, representatives and reviewers as appropriate. Club messages are visible to the permitted conversation participants. Cloudflare hosts our application, database and media storage and provides configured email delivery. Google processes optional website analytics after consent. Stripe processes online event payments and account verification; card and bank credentials are collected by Stripe, not by MCP tools. Assistant providers receive the tool results you request. We may disclose information when legally required or reasonably necessary to handle security incidents and protect rights. We do not sell personal information.
International processing and security
Providers may process information outside the UK, including when a visitor uses an overseas assistant service. Applicable provider data-processing terms and transfer safeguards govern that processing. Cloudflare, Google, Stripe and your assistant provider publish their own information about locations and safeguards. We restrict account access, hash authentication tokens and use HTTPS, but no service can guarantee absolute security. Email hello@futsalindex.com if you suspect unauthorised access; do not include credentials in your report.
Retention of AI connection records
Access tokens expire after 15 minutes and refresh tokens after 30 days; revocation prevents further private access. Operator-run maintenance removes expired consent requests, authorisation codes, tokens, rate-limit records and uncommitted previews after a one-day grace period. Completed operation input/result details become eligible for redaction after 90 days, and onboarding drafts inactive for 180 days become eligible for removal. There is currently no automatic cleanup schedule, so these thresholds do not guarantee deletion on the exact day; contact us to request deletion. Operation IDs and idempotency tombstones remain for the account lifetime to prevent duplicate commits. Uncertain operations are retained until reconciliation. These periods do not automatically delete an accepted public result, club record or friendly agreement.
Accounts, contributions and deletion
We keep active account information to provide the service. Sign-in links expire after 24 hours. Persistent sessions expire after 400 days and renew during active use. Deleting an account removes its sessions, integration credentials, drafts and preview records and removes or anonymises account attribution and private content through the account deletion service. Accepted results and operational records may remain without the deleted account’s identity to preserve results, other participants’ records, fraud prevention and applicable legal obligations. Support, dispute, payment and accounting records are kept for as long as needed for their purpose and applicable legal requirements. Backup copies follow provider recovery retention and may take longer to expire; we do not promise instant deletion of all backups. Contact us about information that is no longer needed.
Cookies and optional analytics
Essential cookies support sign-in and remember your settings. The sign-in cookie is __Host-futsalindex_session and can persist for up to 400 days. Your analytics/statistics choice is remembered for six months. Google Analytics is disabled until you consent; it measures browser usage and public content identifiers, device and approximate location information. We do not send it your email, account ID, search text, form answers, claim evidence or tokens, and do not use advertising, Google Signals, session recordings or cross-device account identification. Accepted _ga cookies expire after six months without renewal. A consent-dependent sign-in analytics cookie lasts one minute. Use Cookie settings in the main website footer to change or withdraw consent; withdrawal stops future collection but does not automatically erase information already sent to Google. These policy pages themselves load no optional analytics.
Aggregate page statistics
Our separate statistics database stores daily public-page totals and public content identifiers, not individual visits, IPs, account IDs, referrers or browser identifiers. These totals support long-term trends and cannot be traced back to an individual visit. Rejecting analytics also opts out of future aggregate counting; browser Do Not Track and Global Privacy Control signals are respected. The non-identifying fi_statistics_optout cookie remembers your preference for six months. Hosting connection data used to deliver and secure the site is separate from these aggregate totals.
Your choices and rights
You can disconnect assistants and export your integration records at /account/ai-connections and manage account deletion through account settings. Disconnecting does not delete information already received by an assistant provider or undo completed changes. You can ask for access, correction, erasure, restriction or portability where applicable; object to legitimate-interest processing; or withdraw consent for optional processing. Email hello@futsalindex.com. We may verify your identity and explain any applicable limitation. You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. The ICO explains these rights at ico.org.uk/global/privacy-notice/your-data-protection-rights/.