Privacy Policy

This policy explains what personal data The Footballer Vault collects, how it is used, and your rights. It applies to all visitors and to anyone who submits a player application or manager enquiry through this website.

Last updated: 19 May 2026

1. Who we are

The Footballer Vault (“we”, “us”) is the data controller for the personal information collected through this site.

If you have any questions about how your data is handled, please contact us at hello@footballervault.com.

2. What data we collect and why

Player applications

When you apply to be listed as a player, we collect the following information in order to create and manage your profile on the directory:

Full name
Date of birth (used to calculate and display your age)
Nationality and location (city and country)
Email address and phone number
Playing position, preferred foot, height, and weight
Career history, achievements, and playing statistics
Profile photo
Highlight video links (YouTube / Vimeo URLs only — no video is hosted by us)
Any other links you choose to provide (e.g. social media profiles)
A personal background statement

This data is submitted voluntarily. Providing it constitutes your consent to us holding and displaying it on the directory for the duration of your listing. Your contact details (email, phone) are visible only to the site administrator — they are never displayed publicly.

Manager and scout enquiries

When you submit an enquiry about a player we collect:

Your name
Club or team name
Email address
Phone number (optional)
Your message

This is used solely to process your enquiry and facilitate an introduction between you and the player. We will not use it for any other purpose.

Site visitors

Visitors who only browse the directory submit no personal data through this website. We do not use advertising pixels, third-party analytics platforms, or tracking cookies.

We do collect basic anonymous usage statistics — specifically, how many times a player profile is viewed and how many times contact details are revealed — to help us understand how the site is being used. To make these counts more accurate (so that two different people using the same internet connection each count as separate visitors), we store a randomly generated identifier in your browser's localStorage. This identifier contains no personal information — it is simply a random number. It is used solely for deduplication of analytics counts and is never shared with any third party. You can delete it at any time by clearing your browser's site data.

When a profile is viewed or contact details are revealed, we also record the approximate geographic location of the request (country and city level only) derived from the visitor's IP address. This is used solely to help us understand which regions are interested in which players. The IP address itself is not stored. Location data is processed on the basis of our legitimate interests in understanding the geographic reach of the directory.

3. Legal basis for processing

We process personal data on the following legal bases under the UK GDPR and, where applicable, the EU GDPR:

Consent — player profile data is submitted voluntarily and with the explicit intention of being listed on the directory. You may withdraw consent at any time by contacting us.
Legitimate interests — manager enquiry data is processed to facilitate introductions between clubs and players, which is the core purpose of the service.
Contract — where a paid listing agreement exists, processing is necessary to fulfil that agreement.

For visitors from countries with other applicable data protection laws (including Australia's Privacy Act 1988, Canada's PIPEDA, and US state privacy laws such as California's CCPA), the rights and contact mechanisms described in this policy apply to you equally.

4. How we store and protect your data

All data is stored in a Supabase-managed PostgreSQL database. Supabase is a trusted infrastructure provider; you can review their security practices and sub-processors at supabase.com/security.

Player photos are stored in Supabase Storage and served over HTTPS. All connections to our database use row-level security policies ensuring only the site administrator can access contact details and enquiry data.

Email notifications are delivered via Resend (resend.com), a transactional email provider. Personal data included in these notifications (name, email, message) is processed by Resend solely to deliver the message.

5. Who we share your data with

We do not sell, rent, or trade your personal data to any third party for marketing or commercial purposes.

The only third-party services that receive personal data are:

Supabase — database and file storage. Data is processed in accordance with their Data Processing Agreement.
Resend — transactional email delivery for notifications to the site administrator. Data is processed in accordance with their Privacy Policy.

No analytics providers, advertising networks, or social media platforms receive any data from this site.

6. How long we keep your data

Player profiles— kept for the duration of your paid listing period. After expiry, your profile remains in our system in an “expired” state until the administrator manually removes it, or until you request deletion.
Player applications — kept until processed by the administrator and then manually archived or deleted.
Manager enquiries — kept until the enquiry has been resolved. Enquiries may be retained for a reasonable period thereafter for administrative record-keeping.

You may request deletion of your data at any time (see Section 7 below).

7. Your rights

Depending on where you are located, you may have some or all of the following rights regarding your personal data:

Access — request a copy of the data we hold about you.
Correction — request that inaccurate data be corrected.
Erasure— request that your data be deleted (“right to be forgotten”).
Restriction — request that we limit how we use your data while a dispute is resolved.
Portability — request a copy of your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.
Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email us at hello@footballervault.com. We will respond within 30 days. There is no charge for making a request.

If you are in the UK or EU and believe we have not handled your data correctly, you have the right to lodge a complaint with your relevant supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, your national data protection authority.

8. Cookies and browser storage

This site does not set any cookies. The localStorage entries we use are:

Theme preference (key: theme) — stores your chosen display mode (light or dark). Never transmitted to any server.
Analytics visitor ID (key: tfv_vid) — a randomly generated identifier used to deduplicate profile view and contact-reveal counts (so two people on the same network each count as a separate visitor). It contains no personal information and is only ever transmitted to our own server — never to any third party. It persists until you clear your browser's site data.

No advertising cookies, third-party analytics cookies, or social media tracking of any kind are used on this site.

9. Children's privacy

This site is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you believe a child's data has been submitted without appropriate consent, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page will always reflect the most recent revision. For significant changes we will update the date prominently. Continued use of the site after an update constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions, requests, or complaints, please contact us at: hello@footballervault.com.