Privacy policy
Plain version: we keep your email so you can log in, your save data so it survives a phone wipe, and that's it. The longer version follows — written in English, no legal-wall padding. If anything reads as evasive, mail us and we'll fix it.
1. Who runs Football General Manager
Football General Manager (“FGM”) is operated by Kudzu Partners SL, registered in Spain. Throughout this document “we” / “us” means Kudzu Partners SL acting as data controller for the personal data described below. The shorthand “you” means whoever is reading this and has, or might create, an FGM account.
2. What we collect
We only collect what we need to run the game. Specifically:
- Account data: the email address you sign up with. Optionally, a display name.
- Save data: the JSON blob your game produces — clubs, players, finances, manager profile, history. Generated entirely in-browser from a seed; none of it identifies you.
- Gameplay metadata: when you last advanced a matchday, and your browser's reported time-zone offset (so the “one match a day” gate works for your local clock).
- Server logs: standard web access logs — IP address, user agent, request timestamp, response code. Kept up to 30 days for security and debugging.
- One session cookie when you're signed in, so the server knows it's you. No advertising or analytics cookies.
3. Why we collect it
- Email → sign in, password recovery, and (if you don't opt out) the daily “your team plays today” reminder.
- Save data → restore your career when you sign in from another browser or device.
- Gameplay metadata → enforce the one-match-per-day rule with the server clock instead of the trivially-spoofable client clock.
- Server logs → spot abuse, debug crashes, comply with hosting-provider obligations.
- Session cookie → keep you signed in across page loads.
4. Who else sees it
We don't sell your data. We don't run ads. We don't share it with third parties beyond what is strictly needed to deliver the service:
- Amazon Web Services (Ireland): hosting, database, mail relay. Data resides on EU servers.
- Google Gmail SMTP: we use Gmail's SMTP relay to send the transactional emails (welcome, password reset, daily reminder).
If any of that changes we'll update this page and email registered users.
5. How long we keep it
- Account + save data: until you ask us to delete it, or until your account is inactive for 24 consecutive months — whichever comes first. After deletion, residual copies may persist in encrypted backups for up to 30 days, then are purged.
- Server logs: 30 days.
- Reminder-email ledger (so we don't send you the same reminder twice): 90 days.
6. Your rights
Under the GDPR you have the right to access your data, correct it, export it, restrict processing, object to processing, and request erasure. In practice:
- Export your save: the “Exportar partida” button inside the game gives you the full JSON of your career, locally, with no email required.
- Everything else: mail info@kudzupartners.com from the address on your account. We aim to reply within 30 days; we don't charge for it.
7. Daily reminder email — opt-out
FGM sends at most one email per local day, only when you have an active career and haven't played that day. You can opt out at any time by replying to a reminder with the word “stop” (we read replies), or by mailing us — either stops further sends.
8. Children
FGM is not directed at children under 16. If you're under that age, please don't create an account. If we learn we've accidentally collected data from someone under 16 we'll delete it.
9. Changes to this page
We may update this policy. The effective date at the top tracks the latest material change. If something changes that materially affects what we collect or who sees it, we'll email registered users before it takes effect.
10. Contact
Kudzu Partners SL — info@kudzupartners.com. If you're unhappy with how we've handled a request, you can lodge a complaint with the Spanish data-protection authority (AEPD, aepd.es).