What we collect, why we collect it, and what we do not do with it.
We hold your email and name from Google, a log of the API calls your key makes, and a record of account events like key rotations. We never see your card details. We do not sell your data or run advertising. Two cookies: one keeps you signed in, one remembers which partner sent you, if any.
From Google, when you sign in: your email address, your name and your profile picture URL. We do not receive your Google password and cannot act on your Google account.
From your use of the API: the endpoint path, the HTTP method, the response status, how long the call took, and when it happened. This is what fills the usage figures in your account.
Account events: when your account was created, when a key was issued or rotated, and when a plan changed.
Ordinary server logs: IP address, user agent and requested path, kept by the web server.
To run the service: authenticate you, issue and check your key, apply rate limits, and show you your own usage.
To support you: when you report a problem we can look up the exact call from its request id.
To bill you, if you are on a paid plan.
To protect the service from abuse.
We do not build advertising profiles, and we do not sell or rent your data to anyone.
We set at most two cookies, both first-party.
fsapi_session keeps you signed in. It carries no personal information,
only an identifier for your session on our server. It is marked Secure, HttpOnly and
SameSite=Lax.
ap_click is set only when you arrive through a partner’s link. It
remembers which partner sent you, so that partner can be credited if you buy a plan. It
holds no personal details, lasts 60 days, and a newer partner link replaces it.
There are no advertising cookies and no third-party trackers on this site. If that ever changes, this page changes first.
Card payments are handled by our payment processor. We never see, receive or store your card number. We store only the identifiers the processor gives us so we can tell which subscription belongs to which account, plus the plan and the renewal date.
Google: identity, when you sign in.
Our payment processor: card payments and subscriptions, for paid plans only.
Our hosting and network providers: they process traffic on our behalf.
We may disclose data if the law requires it. Otherwise, no one else gets it.
Account data: while your account exists, and for a short period afterwards so we can settle billing.
API call logs: kept for 90 days, then deleted. The daily totals behind your usage chart are kept longer, because they hold no path or timing detail.
Server logs: rotated on the ordinary schedule of the host.
You can see the personal data we hold in your account: your email and name, your key, your usage and your event history.
You can ask us to export it, correct it, or delete your account and everything attached to it. Email support@footballsoccerapi.com and we will confirm when it is done.
Deleting your account revokes your key immediately.
If this policy changes, the date at the top of the page changes with it, and anything material is announced in the changelog.
Questions or requests: support@footballsoccerapi.com.