Privacy Policy

What we keep

When you have an account:

• your email, to send you the sign-in code (we use no passwords);
• your name and country, only if you add them in your account;
• the leagues and teams you follow;
• whether you turned on email alerts, and when you changed that choice;
• your listening progress: how far you got in each episode and which ones you finished;
• the episodes you liked;
• your choice about personalized recaps, when you made it, and the country you connected from when you signed up (used to decide whether the box started ticked).

Without an account

If you listen without an account, the leagues you follow and how far you got in a sample stay in your browser only. If you then create an account, we move them to it once and clear them from the browser.

The waitlist

Before accounts opened, FutCast had a waitlist. If you joined it, we keep the email you left to tell you about the launch and about FutCast news. We no longer collect emails that way; if you want yours deleted, write to hello@futcast.com.

Why

• So you can sign in and listen: your email and your session.
• So the app remembers what is yours: leagues, progress, new and heard.
• To personalize your recaps based on the leagues you follow, only if you agreed. It is optional: following leagues and listening work the same either way.
• To answer you when you write to us.
• To keep the service safe: we limit sign-in attempts per email and per connection. For that we keep, for one day, a keyed hash of the email and of the connection address (a one-way digest that cannot be reversed without that key, not the email or address in clear); it is still pseudonymised data about you, and it is deleted automatically.

Email alerts

Email alerts are off until you turn them on in your account. If you do, we email you when a recap of a league or team you follow is published: at most one email a day, with the title, the league and the link of each new recap.

We send them through Resend, which receives your email address and the content of the alert. We keep which alerts we sent you and when for 90 days, so we never send you the same one twice. Every email has a one-click unsubscribe link, and you can also turn them off in your account at any time.

Comments

If you comment on an episode, we keep the text, the episode, the date, your likes and your reports. Your comment is signed with the public name you choose in your account, or with "Oyente" and four digits if you choose none; your email is never shown.

Before a comment (or your public name) is shown, an automated system checks it: an AI model from Anthropic receives only the text, without your name or email, and classifies it (hate, harassment, sexual content, violence, self-harm, spam or personal data). When in doubt, the comment waits for a person on the FutCast team, who also reviews comments other listeners report and can remove them or suspend whoever breaks the rules.

How long: a published comment is kept until you delete it or your account. If you delete it, its text is erased at once. For a rejected comment we keep only the reason, never the text. Comments under review or removed are kept up to 90 days for review, then their text is erased; reports, 90 days. Deleting your account erases the text and signature of your comments, your likes and your reports; where someone replied to one, a "comment deleted" placeholder with no text or name stays so the replies still make sense. Comment text never goes into our usage statistics or error logs.

We do not sell your data

We do not sell your personal data to third parties. If we ever wanted to use it for anything other than what this notice says, we would change this notice first and ask for your permission.

Who helps us

We use providers that process data on our behalf: Supabase (database and accounts), Vercel (the website), Sentry (technical errors), PostHog (usage statistics, hosted in the United States), Resend (email alerts, if you turn them on) and Anthropic (the automated check of comments). Your account and listening data is hosted in the United States (Supabase, US West region), and the site is served by Vercel, in the United States.

Pages with a video (official videos and the live show) show Google’s YouTube player in its privacy-enhanced mode (youtube-nocookie.com), and official video pages also load its script from www.youtube.com; when you open them, YouTube receives your IP address and browser details, and may store data in your browser when you play the video, under Google’s privacy policy.

Technical errors and session recordings

To find and fix problems we use Sentry. When something fails on the website, Sentry receives the error, the page you were on, and your browser and operating system. Your connection address (IP) reaches it with the report, but Sentry does not store it. It also measures how fast the site responds on a 10% sample of visits.

Sentry also records how the page looks (Session Replay) on 10% of visits and on every visit where an error happens. The recording hides all text and everything you type into fields, and includes no images, audio or video: what remains is the page structure and the clicks and movements.

In the Android and iPhone apps, when something fails or the app closes unexpectedly, the app sends Sentry a technical report: the error and where in the code it happened, the app version, the phone model and the Android or iOS version. The report carries no email, no account and no identifier of your account or your phone, nothing you type, search for or comment, and no screenshots or recordings.

Sentry keeps error reports and recordings for 30 days and then deletes them.

Usage statistics

To learn what works (for example, whether people come back the next day) we use PostHog, which stores this data in the United States. PostHog is certified under the EU-US Data Privacy Framework and works with us under its data processing agreement (DPA), which includes the European Commission’s standard contractual clauses (SCCs) for transfers from the European Union, the United Kingdom and Switzerland.

PostHog receives the pages you visit and the page you came from (without anything after the “?” in the address, so never what you searched for; we only keep a link’s campaign tag, such as utm_source, separately if it has one); your browser, operating system, language, time zone and screen size; and a few facts about how you use FutCast, never text you type: that you started or completed a sign-up and from where (the sample’s wall, the header, a button or an episode’s “Like” before you had an account); that you started or finished an episode (which one, its format, its league and its voice) or reached the end of the sample; that you pressed “Play all” or built an “I have X minutes” queue (how many minutes and episodes); that you searched (only how many characters the search had); that you asked FutCast a question (whether it was answered, how many facts and in which language, never the question or the answer); that you played or shared a moment or an episode, or shared a video, and how (WhatsApp, Facebook, your phone’s share menu or a copied link); that you liked or unliked an episode (which one, its format, its league and its voice); that you followed or unfollowed a league or a team; that you turned email alerts on or off; that you watched the live show; and that you created an agent key (only its scope).

We discard your IP address: we have turned on PostHog’s option not to keep it (before discarding it, PostHog derives an approximate location from it, country and city). We use no cookies, store no identifier in your browser (every visit starts unidentified) and do not record the screen or log clicks. If you have an account, your activity is linked to an internal identifier of your account, never to your email or name. When you delete your account, we also delete your profile and events from PostHog.

You can ask us not to measure your usage at any time: with the “Don’t measure my usage” link at the foot of the page (remembered in that browser, which stores only that choice) or, if you have an account, with “Don’t measure my usage” in your account (it applies on all your devices). We also honour your browser’s Global Privacy Control (GPC) signal and “Do Not Track”: if it sends one, we measure nothing.

Cookies

We only use the cookies needed to keep you signed in and to complete sign-in with the code. We use no advertising cookies, and usage statistics use no cookies.

Your choices and rights

• Change your name, country, personalization choice or email alerts: in your account, any time.
• Clear your listening history without deleting your account: in your account (or in Profile, in the app), “Clear my listening history”. We erase how far you got in each episode and which ones you finished, on all your devices. Your account, the leagues and teams you follow, your comments, your ratings and your likes stay. Usage statistics already recorded in PostHog are not erased this way: to stop measuring, “Don’t measure my usage”; to erase them, delete your account or write to us.
• Delete your account: in your account, “Delete my account”. We erase your account, your profile, the leagues and teams you follow, the alerts we sent you, your listening history and your usage statistics in PostHog. It cannot be undone; signing in again with the same email starts from scratch. The steps, and what is kept and for how long: futcast.com/en/eliminar-cuenta.
• See, correct or delete your data, ask for a copy, or anything else: write to hello@futcast.com, any time. We handle every request within 30 days.
• You may lodge a complaint with the data protection authority of your country of residence. If you are in the European Union or the United Kingdom, the GDPR gives you additional rights, including the right to complain to your local supervisory authority.

Children

FutCast is not directed at children under 13, and we do not knowingly collect their data.

Changes to this notice

If this notice changes, we update the date above. If the change is material, we also post a notice on the site.