Privacy Policy

1. Data controller

The data controller is:

L&P INTERNATIONAL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Łabędzia 4 / 6, 40-528 Katowice, Poland
NIP: 6342974843
KRS: 0000834791
Share capital: PLN 5,000.00

You can contact us through the official FUT ISLAND Discord channel or by post at the registered address above. If we add a dedicated legal or privacy email address, this policy will be updated.

2. Scope and the Extension's single purpose

This policy covers both our website and the FUT ISLAND Chrome extension (the Extension). The Extension has one narrow purpose: to assist a signed-in user with user-configured transfer market searches and actions on supported EA SPORTS FC web application pages. It is not intended to monitor unrelated websites or a user's general browsing activity.

Website analytics and advertising described below apply to the FUT ISLAND website. Data obtained by the Extension from supported web application pages is not used for personalised, interest-based, or retargeted advertising.

3. Data processed by the Extension

The Extension processes only data reasonably necessary for its disclosed single purpose:

• Account and authentication data: FUT ISLAND account email, internal user ID, session information, and authentication tokens required to sign in and verify access. We do not store a user's plain-text password.
• Licence and entitlement data: trial or licence status, enabled features, activation and expiry dates, and subscription or access status.
• User settings and commands: player or item names, price ranges, filters, delays, limits, safety settings, notification preferences, and other values deliberately entered or selected by the user.
• Supported website content and activity: only the content needed to provide the Extension's visible features on supported EA SPORTS FC web application pages, such as transfer market listings, player or item information, prices, search results, action status, and errors.
• Technical and security data: Extension version, browser and operating-system information, IP address received by our servers, request timestamps, licence checks, diagnostic events, crash or error details, and abuse-prevention logs.
• Optional integration data: Discord user ID and notification settings if the user deliberately enables a Discord-related feature.
• Locally stored data: Extension settings, feature state, and session or licence identifiers stored through browser storage when needed for the Extension to operate.

The Extension is not designed to collect or transmit general browsing history, content from unrelated websites, EA account passwords, EA authentication cookies, or full payment card details. Access to supported website content is limited to the pages and features needed for the Extension's user-facing functionality.

4. Data processed through the website

When you use the FUT ISLAND website, we may process:

• account data, including email address, user ID, email confirmation status, and session information,
• licence, trial, access-code, activation, expiry, subscription, and purchase-history data,
• payment and transaction data, including the selected product, currency, payment status, checkout session ID, amount, and transaction date,
• technical data, including IP address, browser type, device data, operating system, cookies, localStorage identifiers, security logs, and error data,
• country or approximate location used to select a default currency,
• support communications sent through Discord or another available support channel,
• website analytics and advertising measurement data, where enabled and legally permitted.

We do not store full payment card details on our servers. Card details are processed by the payment provider, such as Stripe.

5. How the Extension collects and uses data

Extension data is obtained:

• directly from the user when the user signs in, configures a feature, starts an action, or requests support,
• from supported EA SPORTS FC web application pages while the user uses an Extension feature on those pages,
• automatically from the browser, Extension, and server requests for authentication, security, diagnostics, and reliable operation.

We use this data only to:

• authenticate the user and verify a trial, licence, subscription, or feature entitlement,
• provide the user-configured transfer market functionality shown in the Extension's interface,
• save settings, deliver requested notifications, and maintain continuity between sessions,
• secure the Service, prevent fraud and abuse, investigate errors, and maintain or improve the performance and reliability of the Extension,
• provide support when requested by the user and comply with applicable law.

6. Browser permissions and site access

The Extension requests only the permissions reasonably required for its disclosed purpose. Site access is limited to the supported EA SPORTS FC web application pages identified in the Extension's permission request and Chrome Web Store listing. Browser storage may be used to retain settings, authentication state, and licence information. Chrome shows applicable permission warnings before installation, and users can disable site access or uninstall the Extension through Chrome settings.

The Extension includes technical safeguards, configurable limits, delays, and presets intended to support controlled operation. We recommend using only settings identified in the Extension as "Very Safe" and do not recommend configurations outside that category. These safeguards do not mean that FUT ISLAND controls, administers, or guarantees the status or availability of a user's EA account. The user decides whether and how to use the Extension with that account and remains responsible for the settings, instructions, and actions initiated through the Extension. Additional contractual rules concerning EA accounts and use of the Software are set out in the Terms of Service.

7. Legal bases

• providing accounts, trials, licences, and Extension functionality - performance of a contract or steps requested before entering into a contract,
• processing payments, refunds, accounting, and tax records - performance of a contract and legal obligations,
• support and service communications - performance of a contract and legitimate interests,
• security, diagnostics, anti-fraud, abuse prevention, and service reliability - legitimate interests,
• website analytics, advertising measurement, and marketing - consent or another lawful basis where permitted,
• establishing, exercising, or defending legal claims - legitimate interests.

8. Data sharing and service providers

Data may be shared only as described in this policy with:

• Supabase: authentication, database, account, licence, subscription, and Extension service infrastructure,
• hosting and IT providers: secure delivery, server operation, monitoring, and error handling,
• Discord: requested notifications, community features, and support when the user enables or uses them,
• Electronic Arts: the Extension interacts with the supported EA SPORTS FC web application in the user's own authenticated browser session; EA processes data under its own terms and privacy policy,
• Google: distribution and operation of the Extension through Chrome and the Chrome Web Store,
• Stripe, Allegro, banks, and payment providers: website purchases, billing, fraud prevention, refunds, and disputes,
• Google Analytics and Google Ads: website-only analytics and advertising measurement where enabled and legally permitted,
• hCaptcha and IP geolocation providers: website form protection, abuse prevention, country detection, and currency selection,
• professional advisers, public authorities, or other recipients where required by law or necessary to establish, exercise, or defend legal claims.

We do not sell Extension user data or personal data. We do not transfer Extension-derived browsing activity or supported website content to advertising platforms, data brokers, or other parties for personalised advertising, profiling, creditworthiness, or lending purposes.

9. Chrome Web Store Limited Use disclosure

Our use and transfer of data received from the Extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Extension user data is used only to provide or improve the Extension's disclosed single purpose and closely related operational needs such as security, diagnostics, support, and reliability.

• We do not use or transfer Extension user data for personalised, interest-based, or retargeted advertising.
• We transfer Extension user data only when necessary to provide or improve its disclosed purpose, for security or abuse prevention, to comply with law, or as part of a merger, acquisition, or sale of assets with any consent required by applicable policy or law.
• We do not allow humans to read Extension user data except with the user's affirmative consent for support, when necessary for security or abuse investigation, to comply with law, or after aggregation and anonymisation for permitted internal operations.

10. Transparency and consent

The Chrome Web Store listing, the Extension's in-product notices, the permissions shown by Chrome, and this policy must describe the same data practices. Where Chrome Web Store policy or applicable law requires a prominent disclosure and affirmative consent, that disclosure is presented in the Extension interface before the relevant data is collected or transmitted. A link to this policy is provided in the Chrome Web Store listing and is available from the FUT ISLAND website.

11. International data transfers

Some technology providers may process data outside the European Economic Area, including in the United States. Where this happens, transfers are based on mechanisms permitted by applicable law, such as standard contractual clauses, adequacy decisions, the Data Privacy Framework, or other required safeguards.

12. Cookies, browser storage, and similar technologies

The website may use cookies, localStorage, and similar technologies to maintain sessions, remember preferences, secure forms, run consented analytics, and measure website advertising. The Extension may use Chrome storage or equivalent browser storage for settings, feature state, authentication state, and licence information. Extension storage is not used to track browsing across unrelated websites or to create advertising profiles.

13. Data retention and deletion

Extension settings stored locally remain until they are cleared by the user or removed with the Extension, subject to Chrome's storage and sync behaviour. Server-side account, licence, subscription, configuration, and service data is retained while the account or service is active and afterwards only as reasonably necessary for security, disputes, legal claims, and legal obligations. Diagnostic and security logs are deleted or anonymised when no longer reasonably necessary for those purposes. Payment, tax, and accounting records are kept for the period required by applicable law. Website marketing data is processed until consent is withdrawn, a valid objection is made, or the relevant purpose ends.

A user may request deletion of their FUT ISLAND account and associated personal data through the contact channels in section 1. We will delete or anonymise eligible data, while retaining only information that must be kept for legal, accounting, fraud-prevention, security, dispute, or legal-claim purposes. Uninstalling the Extension stops its future operation but does not by itself delete the user's FUT ISLAND account or records that we are legally required to retain.

14. Your rights

Subject to the GDPR and other applicable laws, you may have the right to:

• access your data,
• rectify inaccurate data,
• request deletion of data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent where processing is based on consent,
• lodge a complaint with the Polish Data Protection Authority or another competent supervisory authority.

Some rights may be limited where further processing is required by law, payment records, dispute handling, legal claims, or service security.

15. Security

We use technical and organisational safeguards intended to protect data, including access controls, authentication, secure transport such as HTTPS, form protection, and anti-fraud measures. Authentication and payment information is not publicly disclosed. No transmission or storage method is completely secure, so absolute security cannot be guaranteed.

16. Changes to this policy

We may update this Privacy Policy if the service, technology providers, legal requirements, Extension permissions, or data practices change. Material changes to Extension data practices will be disclosed prominently in the Extension where required before the changed processing begins. The updated version applies from publication unless stated otherwise.