Privacy Policy
Last updated: September 11, 2026
This policy explains what data The IFC collects when you use the THE IFC mobile app and the the-ifc.com website (together, the "Service"), why, who it is shared with, how long it is kept and what your rights are.
1. Who is responsible for your data
The data controller is The IFC, a company established in France, publisher of the app and the website. For any question or request about your data: contact@the-ifc.com.
2. The data we collect
Account data. Email address, password (stored hashed, never in clear text), username, first and last name, date of birth, country, profile picture and cover image if you add them.
Third-party sign-in. If you sign in with Google or Apple, we receive the identifier that service sends us, your email address and, depending on your settings, your name. If you link your Discord account, we keep your Discord identifier.
Activity in the Service. Teams, clubs and organizations you join or create, competitions and matches you take part in, scores entered, check-ins, rankings, contracts and transfers, forum posts and comments, messages exchanged between teams, trophies, match logs.
Wallet and purchases. Coin balance, wallet movements, coin purchases made through the App Store or Google Play. We never see or store your payment details: payment is processed by Apple or Google.
Technical data. Device and session identifiers, IP address, device type and operating system, app version, crash reports, usage events (screens viewed, actions performed), push notification token if you allow notifications.
3. Why we use it
| Purpose | Legal basis |
|---|---|
| Create and manage your account, authenticate you, secure access | Performance of the contract |
| Run competitions, the league, rankings, the transfer market and wallets | Performance of the contract |
| Sell coins and credit your purchases | Performance of the contract |
| Send you notifications about your matches, teams and competitions | Consent, withdrawable in your phone's settings |
| Measure usage and fix errors to improve the Service | Legitimate interest |
| Answer your requests and prevent abuse and fraud | Legitimate interest |
| Meet our legal and accounting obligations | Legal obligation |
We do not sell your data and do not show targeted advertising.
4. Who it is shared with
Other users. Your username, picture, teams, results and ranking are visible to other users. Messages are visible to the members of the teams involved. Forum posts are visible to the members of the league or organization.
Organizers. When your team registers for a competition, the organizer sees the usernames, pictures and results of the registered players, which is necessary to run the competition.
Our service providers, who process data on our behalf and under contract:
- Heroku (Salesforce) — hosting of the API and database;
- Expo (EAS) — delivery of app updates and routing of push notifications;
- Google Firebase — usage analytics and notification delivery on Android;
- Apple — notification delivery on iOS, Sign in with Apple, in-app purchases;
- Google — Sign in with Google, in-app purchases on Google Play;
- RevenueCat — tracking of coin purchases and their validation by the stores;
- Sentry — collection of crash reports;
- Stream — activity feed and in-app notifications;
- Branch — handling of share and invitation links.
Some of these providers are established outside the European Union, notably in the United States. Transfers rely on standard contractual clauses or an adequacy decision.
Authorities, where the law requires it or to protect our rights, users or the public.
A successor, in the event of a merger, sale or restructuring of The IFC; you would be informed before your data became subject to another policy.
5. How long we keep it
- Account and activity: as long as your account is active, then 30 days after deactivation, to allow reactivation or handle a request.
- Coin purchases: 10 years, the legal retention period for accounting records. In-game coin movements follow the lifetime of the account.
- Technical logs and crash reports: 12 months at most.
- Messages and posts: as long as the conversation, team or competition exists.
Competition results and rankings may be kept in anonymized form after the account is deleted.
6. How your data is protected
Exchanges between the app and our servers are encrypted (HTTPS). Passwords are salted and hashed. Session IP addresses are stored encrypted. Access to data is limited to the people who need it. No system is infallible, so we cannot guarantee absolute security, but we commit to notifying you of any incident affecting your data, as the law requires.
7. Your rights
Under the GDPR, you can at any time:
- access your data and receive a copy;
- rectify your data from your profile, or by writing to us;
- delete your account, directly in the app: Profile, Settings, Login & security, "Deactivate my account". If you are the only captain of a team or the only owner of an organization, appoint a replacement first;
- object to processing based on our legitimate interest, or withdraw your consent to notifications;
- request the portability of the data you provided;
- lodge a complaint with the CNIL (cnil.fr) or your country's data protection authority.
To exercise these rights, write to contact@the-ifc.com. We may ask you to confirm your identity. We reply within one month.
8. Minimum age
The Service is for people aged 13 and over. If we learn that an account was created by someone younger, we delete it. Parents or guardians can write to us at the address above.
9. Links to other services
The Service may link to websites or services we do not operate, such as Discord or gaming platforms. Their privacy policies then apply, not ours.
10. Changes
We may update this policy. In the event of a significant change, we will notify you in the app or by email before it takes effect, and the date at the top of the page will be updated. The version in force is always the one published here.