Privacy Policy
This policy explains how FDscout (operated by Isaac Pells, trading as FDscout, the "data controller") handles your personal data. Contact: contact@fdscout.com.
1. What we collect
Account data: your email address, a salted hash of your password (never the password itself), and, if you sign in with Google, your Google account identifier and verified email. Billing data: handled by Stripe; we store only your Stripe customer and subscription references, never card details. Club billing details: for clubs paying by invoice, the organisation name, billing email, billing address and any PO or VAT number, held by Stripe. Club membership: which club you belong to and your role in it. Usage data: the pages and player profiles you view, the searches you run, the features you use and approximate request counts (per IP), used for fair-use limits, abuse prevention, supporting you and improving the Service.
2. Cookies
We use essential cookies: a sign-in cookie that keeps you signed in on fdscout.com and app.fdscout.com, a visit counter used to measure the site and prevent abuse, a short-lived state cookie during Google sign-in, and small cookies that remember your cookie choice and display settings, such as currency, on both addresses. Cloudflare Web Analytics, which sets no cookies, measures visits to the site.
With your consent only, we also set a Meta (Facebook) advertising cookie so we can measure whether our adverts lead to sign-ups. You can accept or decline this when you first visit, and declining changes nothing about how FDscout works. To change your mind later, clear the site's stored data in your browser and choose again on your next visit.
3. Inside a club
In a club, your name (the part of your email address before the @) is shown to the club's other members next to your notes, replies and stage moves, and when you are tagged. The club's super admins also see your email address. Notes and items you save in a club are shared with its members, unless you keep them private where the club allows it.
4. How we use your data
To provide and secure the Service (contract); to send transactional email such as verification, password reset, trial reminders, invoices, club invitations and account notices (contract); to prevent abuse, and to understand how FDscout is used so we can support you and improve it (legitimate interest); and to send occasional emails about FDscout features and offers when you create an account, unless you opted out at signup (the "soft opt-in" for our own similar services, under legitimate interests). Every such email includes an unsubscribe link and you can object at any time.
5. Processors and transfers
We use: Cloudflare (hosting, database, content delivery and web analytics), Stripe (payments), Resend (transactional email, processed in the EU, Ireland), and Google (optional sign-in). Each processes data under its own GDPR-compliant terms. Some processing may occur outside the UK/EEA under appropriate safeguards (standard contractual clauses).
6. Retention
We keep your account and saved work while it exists, including after a trial or plan ends, so it is there if you subscribe later. Accounts with no sign-in for 3 years are deleted, after a warning email. You can ask us to delete your account at any time and we will do so within 30 days, except records we must keep for tax and accounting. Usage counters for fair-use limits expire automatically, most within days. The record of how you use FDscout (the searches you run, the player profiles you open and the features you use) is kept for 12 months and then deleted. Only FDscout sees it: your club does not.
7. Your rights
Under UK GDPR you can request access, correction, deletion, portability or restriction of your data, and object to processing based on legitimate interest: email contact@fdscout.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
8. Changes
We will notify material changes to this policy by email or in-app notice.