Privacy Policy

From Authentication Providers

When you sign in using Google, Apple, or Discord, we receive and store:

• Your email address
• Your display name (username)
• Your profile picture URL (when available)

For Apple Sign-In, you may choose to share or hide your email address. We respect your choice and do not collect additional information beyond what Apple provides.

Information You Provide

• Profile information (username, country)
• Player builds and squad configurations
• Comments and interactions with other users
• Friend connections and messages

Automatically Collected

• Browser type and language preferences (web)
• Device information (model, OS version, screen size)
• Usage data and interaction patterns
• IP address and approximate geographic location (country level)

When you use our mobile application (eFWorld), we additionally collect:

• Mobile device identifiers — Advertising identifiers (IDFA on iOS, GAID on Android) used for personalized advertising. You can reset or limit these via your device settings.
• App version and platform — To provide platform-appropriate content and troubleshoot issues.
• Push notification tokens — If you enable notifications (currently not used; reserved for future features).
• App usage events — Screen views, session duration, feature interactions (see Analytics section below).

iOS App Tracking Transparency (ATT): On iOS 14.5 and later, our app presents a system prompt asking for your consent to track you across other apps and websites. If you choose "Ask App Not to Track", we will not access your IDFA, and you will receive non-personalized advertising.

• Provide and maintain the Service
• Authenticate your identity and manage your account
• Enable social features (friends, comments, messages)
• Improve and optimize the Service through analytics
• Detect, diagnose, and fix crashes and bugs
• Send notifications related to your account activity
• Display relevant content based on your country preferences
• Display advertising (where applicable) to support the free Service

Web (efootball-world.com)

We may use Google AdSense to display advertisements on our web platform. Google AdSense may use cookies and similar technologies to serve ads based on your prior visits to our Service or other websites.

Mobile App (eFWorld)

We use Google AdMob to display advertisements in our mobile application. The following ad formats may appear:

• Banner advertisements (header areas)
• Medium rectangle advertisements (within content feeds)
• Interstitial advertisements (between screen transitions)

Google AdMob may collect:

• Advertising identifier (IDFA on iOS, GAID on Android)
• Approximate geographic location (country level, derived from IP)
• Device information (model, OS version)
• App information (version, package name)

You can control personalized advertising by:

• Visiting Google Ads Settings
• On iOS: Settings → Privacy & Security → Tracking, or via the consent prompt shown in the app
• On Android: Settings → Google → Ads → opt out of Ads Personalization

For details on how Google uses this data, see the Google Advertising Policies.

Our mobile application uses Firebase Crashlytics (operated by Google) to detect and diagnose application crashes. When a crash occurs, the following information is sent to our crash reporting service:

• Crash stack trace and error details
• Device model, operating system version, and app version
• Internal user identifier and username (if you are signed in) — used to identify which users are affected by specific crashes for support purposes
• Recent in-app actions (breadcrumb log) leading up to the crash

Crash data is retained by Firebase Crashlytics for approximately 90 days. This data is used solely to identify and fix bugs, and is not shared with third parties for advertising or other commercial purposes.

Our mobile application uses Firebase Analytics (Google Analytics 4) to understand how users interact with the app and improve the user experience. The following data is automatically collected:

• Screen views and navigation paths
• Session duration and frequency
• Approximate geographic location (country level)
• Device information (model, OS version, language)
• App version and first-launch information
• Advertising identifier (IDFA on iOS, GAID on Android)
• Internal user identifier and username (if signed in) — for cross-device session linking

Analytics data is retained for up to 14 months by default and is processed by Google in an aggregated and anonymized form for statistical reporting. We do not use Analytics data to identify individual users or share it with third parties for advertising purposes.

For details, see the Firebase Privacy and Security documentation.

On our web platform, we use cookies and similar technologies to:

• Maintain your authentication session
• Remember your preferences (country, platform)
• Enable advertising through third-party services

You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain features.

The mobile application does not use browser-based cookies but uses local storage (MMKV) for app preferences and authentication tokens. This data stays on your device.

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

• With your consent
• To comply with legal obligations
• With service providers who assist in operating the Service:

  • Cloud hosting and database providers
  • Google (Firebase Crashlytics, Firebase Analytics, AdMob, AdSense)
  • Apple (Sign In with Apple)
  • Discord (OAuth authentication)
• Public profile information visible to other users (username, avatar, builds, comments, country)

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication via OAuth providers
• Secure storage of authentication tokens (encrypted on device)
• Regular security updates and dependency patching

We retain your personal information for the following durations:

• Account data — Until you delete your account or request deletion
• Builds and content you create — Until you delete them or your account
• Crash diagnostics (Crashlytics) — Approximately 90 days
• Analytics data — Up to 14 months (default Firebase Analytics retention)
• Advertising data (AdMob) — Managed per Google's data retention policies

You may request deletion of your account and associated data at any time through the app settings or by contacting us. Account deletion is processed within 30 days.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict processing of your information
• Data portability
• Withdraw consent for advertising tracking at any time (via device settings or in-app consent prompts)

EU/EEA users (GDPR): You can withdraw consent for advertising and analytics at any time through the consent management prompts in the app.

California residents (CCPA): You have the right to know, delete, and opt out of the sale of your personal information. We do not sell personal information.

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.

Our advertising configurations (AdMob) are set to exclude content not appropriate for audiences under 13.

We may update this Privacy Policy from time to time. We will notify users of significant changes through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy, please contact us.