Privacy Policy

This policy applies to CLUBS-XI accounts, dashboards, league and club workspaces, managed *.clubs-xi.com websites, communications, checkout flows and related services. It explains what information is processed, why it is used, when it may be shared and the choices available to you.

• Account and profile data: email address, display name, username, role, platform, gamer tag or EA identity, player position, profile settings and verification state.
• Competition data: club and league memberships, applications, invitations, lineups, availability votes, fixtures, results, disciplinary records, appeals, contracts, transfers, fantasy activity and performance statistics.
• Communications: announcements, responses, delivery status, notification preferences and support messages.
• Security data: session and device identifiers, login activity, timestamps and security-derived IP/device hashes used for fraud prevention, auditing and session protection.
• Payment records: plan, amount, currency, transaction/reference identifiers, receipt status and subscription history. Payment credentials are handled by the configured payment provider rather than stored as raw card details by CLUBS-XI.
• Public-site analytics: only after analytics consent, first-party page views, interaction events, approximate device category, page path and referrer host may be recorded for CLUBS-XI-managed public sites.

Information is used to create and secure accounts; operate leagues, clubs, matchdays and player workflows; verify results and eligibility; deliver requested communications; process subscriptions and receipts; provide support; prevent abuse; keep audit records; and improve the reliability and usability of CLUBS-XI. Optional analytics are not activated until the user accepts analytics in cookie preferences.

Some competition information is designed to be public, such as club names, public player identities, fixtures, results, standings and published website content. Account credentials, session tokens, private contact details, internal scouting notes, security information and other restricted records are not intended for public display. Workspace access is controlled according to the user's role and scope.

Necessary cookies support secure authentication, device protection, account recovery and saved privacy choices. CLUBS-XI uses a one-hour inactivity timeout for signed-in browser sessions. Active sessions are renewed securely; refreshing a page does not by itself sign the user out. Optional analytics remain disabled until accepted.

See the Cookie Policy for the current cookie categories and preference controls.

Information may be processed by infrastructure, email, payment and other service providers where needed to operate CLUBS-XI. League or club administrators may access records that are necessary for the roles they manage. CLUBS-XI does not make private account credentials or raw session tokens available to advertisers.

Information is kept for as long as needed to provide the service, maintain competition integrity, satisfy security and accounting needs, resolve disputes and meet applicable obligations. Short-lived verification and recovery data expires automatically. Some competition and audit records may need to remain after an account closes when they are necessary to preserve league history, financial records or security evidence; personal fields should be minimized where possible.

You can update profile and notification settings, change optional cookie choices, sign out active sessions and request account deletion. Depending on applicable law and your location, you may also have rights to request access, correction, deletion, restriction, objection or a copy of certain personal information.

Users must satisfy the age and legal-capacity requirements that apply to their use of CLUBS-XI. Where a minor is permitted to use the service, a parent, guardian, league or club may have additional responsibilities under applicable law. CLUBS-XI should not be used to publish a minor's private contact or security information.

CLUBS-XI uses encrypted HttpOnly browser sessions, token rotation, device-bound session checks, inactivity expiry, role-based workspace access, rate limiting and audit/security controls. No online service can guarantee absolute security, so users should protect their credentials and report suspected account misuse promptly.

This policy may be updated as CLUBS-XI features, service providers or legal requirements change. Material changes should be communicated through the platform or other appropriate channels, and the date above will be updated.