Privacy policy

1. Who handles your information

OBSfootball is responsible for the personal information processed for our website, accounts, billing and service operations. Contact us at sales@obsfootball.com for privacy questions or requests.

This policy covers obsfootball.com and app.obsfootball.com. Clubs and broadcasters also decide what information to enter or publish using our tools and are responsible for their own use of that information. A club’s or broadcaster’s own privacy notice may therefore also apply.

2. Information we collect

• Account information: your name, email address, verification status, profile image and provider identifier received when you sign in with Google or Twitch, plus country and time-zone settings where provided.
• Onboarding: Your answers about your role, broadcasting experience and goals, together with setup and tutorial progress. We save these to guide your club setup. Optional analytics about onboarding are collected only if you accept app analytics.
• Billing and access: Stripe customer and subscription identifiers, subscription status, payment-session references, welcome-match usage, match activations and available credits. Stripe and Link collect payment and billing details through Managed Payments checkout; our account database does not store full payment-card numbers.
• Production and club information: match details, team and player names and numbers, logos, sponsors, stream or narration channel links, overlay settings, production-session activity used to manage simultaneous match limits, club roles, invitation email addresses and records of collaboration actions.
• Support and moderation: messages you send us, submitted reports and information needed to investigate them.
• Technical and usage information: network and device information, browser information, service requests, errors, identifiers, page visits and product events. Our hosting and other service providers may receive your IP address when your device connects to them.

We receive information from you, your sign-in provider, payment providers and other users who invite you or add you to a club, team or production. Club members and operators provide match and season information.

For club production reports, graphics sources send short-lived random source references, session references and the sponsor placements currently rendered. We retain aggregated presence intervals and production history for the club for up to 730 days, without audience identities or IP addresses in the report records. Private previews are excluded. This functional reporting is separate from optional Mixpanel analytics and does not measure video broadcasts or viewers.

3. How and why we use it

We use account, billing and production information to provide the service you request: signing you in, managing access, processing purchases, operating overlays, enabling collaboration and responding to support requests. Where applicable, the legal basis is performance of our contract with you or steps taken at your request before entering into it.

We process security, error and moderation information for our legitimate interests in protecting accounts, preventing abuse and keeping the service reliable. We use usage information to understand and improve the product, relying on legitimate interests only where permitted by applicable law. Where consent is legally required, consent is the required basis; agreeing to our terms is not consent to optional tracking.

We also process records needed to comply with tax, accounting and other legal obligations, and to establish or defend legal claims. Required account information is necessary to provide authenticated features; if you do not provide it, those features may not be available.

4. Sharing and public content

Information is shared as necessary with service providers for hosting, infrastructure, payments, authentication, analytics and operational support. These include Stripe for payments, Google or Twitch when you choose their sign-in service, and Mixpanel for app analytics when configured. Operational notifications sent to Discord may include account email addresses or error details.

Graphics may load images from external URLs supplied by club members. Your browser contacts those providers when it loads their resources. Following a stream or other external link takes you to a service with its own privacy practices.

Club collaborators can access information permitted by their role. Publishing a club, match, channel link or overlay can make the associated information visible to others, including viewers of your broadcast. Recipients may record or share public material. Private access links should be treated as credentials.

We may disclose information when legally required, to address fraud or threats, to protect rights, or in connection with a business transfer subject to applicable data-protection requirements.

5. Cookies, storage and analytics

Authentication uses short-lived security cookies during sign-in. The app uses local storage for your session and session storage for sign-in redirects, invitations, workspace selection, checkout recovery and pending production actions. Clearing this storage can sign you out or interrupt those workflows.

If you accept analytics in the app, Mixpanel records page visits, product actions and technical error categories to help us understand usage and improve OBSfootball. Data is sent to Mixpanel’s European endpoint. Analytics identifiers are stored in local storage and may be associated with your internal user ID and subscription after sign-in. We exclude names, email addresses, private links and free-text error messages. Automatic interaction capture, session recording and IP-based location enrichment are disabled.

Optional analytics also covers onboarding, your enumerated setup answers, demo interactions, plan selection and paid purchases started in this browser. After sign-in, we synchronize that browser’s permission with your account and use a confirmed permission receipt for purchase attribution. Stripe-confirmed payment events include your internal user and club IDs and product/plan categories, without card details, Stripe IDs or names. Buying works without accepting analytics.

The public website may carry a recognized campaign code in its links, shared by everyone arriving from the same ad. This link continuity itself needs no cookies and sends no events. If you accept app analytics, we save campaign categories to relate them to authorized usage and purchases. That campaign expires after 30 days and is cleared when you decline analytics, sign out or switch accounts. Advertising click or cookie identifiers are not sent to Mixpanel.

TikTok advertising measurement requires an explicit choice separate from app analytics. If you accept it and it is enabled, the pixel loads only on public obsfootball.com pages to measure visits, product-page views and clicks to the app. TikTok receives technical connection and browser information, such as your IP address, as well as the public context of those events. Before loading it, we restrict the address to a public page and permitted campaign parameters; if the referrer contains a private address or disallowed parameters, the pixel does not load. We do not install the pixel in the app, OBS sources, private pages or forms, or enable automatic advanced personal-data or interaction capture.

After you accept advertising, we may store the campaign code, capture date, TikTok click identifier and, where available, its cookie identifier for up to 30 days from first capture. We do not store free-form tracking parameters, email addresses, phone numbers or private addresses in that record. The server uses confirmed advertising permission to report a genuinely new account registration and actually paid purchases to TikTok, including their categories, amounts and currencies. It uses a pseudonymous identifier derived by hashing the internal account ID, together with permitted advertising identifiers; it does not send names, email addresses, phone numbers, Stripe IDs or private paths. The 30-day period applies to click and browser identifiers; the pseudonymous account identifier may accompany later conversions while permission remains valid, up to 180 days from your choice. A returning account sign-in is not reported as a new registration. Billing works if you reject advertising.

Your advertising choice is stored for 180 days in a first-party cookie shared between obsfootball.com and app.obsfootball.com. You can change it through Advertising preferences on the website and the app’s privacy controls. Rejecting it stops future browser collection, clears first-party advertising identifiers and, if the pixel was loaded, reloads a clean public address to remove it. We retain random withdrawal capabilities in functional storage to request and retry withdrawal of server permission, without keeping sign-in credentials. While offline, the server cannot receive that withdrawal until connectivity returns; pages retry and do not authorize new captures while withdrawals remain pending. Signing out or switching accounts also withdraws purchase permission and clears this browser’s associated attribution. Open pages check the choice before emitting events and periodically to detect changes made on another subdomain. Our website cannot delete cookies TikTok keeps on its own domains or recall data already sent; you can manage those cookies and choices in your browser and on TikTok.

Analytics remains off until you accept it. You can accept or reject analytics and change your choice later in Profile › Privacy in the app. Rejecting analytics stops future collection and clears the app’s Mixpanel identifiers; it does not delete data already sent. Your choice is stored in your browser. Clearing browser storage removes that choice and analytics stays off until you accept again. Contact us to ask about information already collected or request its deletion.

Declining, signing out or switching accounts withdraws purchase analytics authorized from this browser. We retain random withdrawal capabilities to retry if the connection is unavailable, without retaining login credentials for that retry. Accepting again does not replay earlier actions or purchases. Withdrawal cannot recall data already sent. Clearing storage outside the app after closing all pages cannot immediately notify the server to withdraw an existing purchase permission.

Some guides and feature pages on the public website include a video from our YouTube channel. Until you press play, the page only shows an image served from obsfootball.com and does not connect to YouTube. When you press it, the player loads from youtube-nocookie.com, YouTube’s privacy-enhanced mode, and Google receives technical information about the connection and the browser, such as the IP address, and may use storage in your browser under its own privacy policy. Without JavaScript, the image is a link that opens the video on YouTube.

6. International processing

Our providers may process information outside your country, including in countries with different data-protection laws. Transfers subject to European or UK data-protection rules require an applicable adequacy decision or other lawful safeguards, such as approved contractual clauses. Contact us for information about the destinations and safeguards applicable to your data and how to obtain a copy of relevant safeguards.

7. Retention and security

We retain account and production information while needed to provide your account and the features you use. Retention depends on the type of record, whether an account or club remains active, unresolved support or moderation issues, legal record-keeping requirements and the period needed to handle claims. Billing records may need to be retained after an account closes.

You can request account deletion from your profile or by email. Club owners may need to transfer ownership first. Shared club information and material published or copied by others may remain after an account is deleted. Deletion of the app account does not automatically delete all records held independently by payment, sign-in or other providers; contact us for help with related requests.

We use access controls and authentication to protect service information. No online service or storage method is completely secure. Keep your sign-in account and private production links secure, and report suspected unauthorized access promptly.

8. Your choices and rights

Depending on the law that applies to you, you may request access to your personal information, correction, deletion, restriction of processing or a portable copy. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting earlier lawful processing.

Email sales@obsfootball.com to exercise your rights, including if a club entered information about you. We may ask for information reasonably necessary to verify your identity. We will respond within the period required by applicable law, normally one month for GDPR requests, and explain any permitted extension or exception.

You can also complain to your local data-protection authority, including the authority where you live or work in the European Economic Area or the UK Information Commissioner’s Office. See the European data-protection authority directory and the ICO complaints page.

For more information about GDPR rights, see the European Commission’s guidance for individuals.

9. Children and player information

OBSfootball is intended for people able to manage an account and enter into our service agreement, rather than for children to use independently. Clubs and broadcasters must have a lawful basis and any necessary permissions before entering or displaying information about players, particularly minors.

If you believe a child’s information has been provided or published improperly, contact us with enough detail to locate it so we can investigate.

10. Updates and contact

We will update this policy and its date as the service changes. Material changes will be communicated as required by applicable law. Privacy requests and questions can be sent to sales@obsfootball.com.