Privacy Policy
This policy explains what information Squad Builder collects, why, and what you can do about it. The site is run by a private individual, not a company, so the policy is kept short and in plain language.
Who is responsible for your data
Squad Builder is operated by a private individual (referred to as "we", "us" or "the operator"). The operator is responsible for the personal data processed through this website. For any privacy question or request, contact [email protected].
What we collect
You can use the squad builder without an account. Depending on how you use the site, we process:
- Account data: your email address, nickname and a securely hashed password. If you sign in with Google, we receive your name, email address and profile picture from Google.
- Content you create: saved squads, community ratings of player cards, preferred platform and language.
- If you choose to sync My Club using the browser extension: EA item identifiers, card/version identifiers, card type, storage location, tradeability, rarity and available item attributes (such as first-owner status, loan matches, chemistry style, contracts and match statistics). The extension does not request or send your EA password, EA cookies or a CSV export. The imported club data is linked to your Squad Builder account, used for club views, squad building and SBC solving, and can be deleted from My Club. When you select Send to EA app, the extension receives the chosen SBC card identifiers and their squad positions to assist insertion into your EA Web App session.
- Technical data: IP address, approximate country (derived from the IP address), browser type (user agent), and the pages you open on this site.
- Device identifiers: a random device ID stored in a cookie and a hashed browser fingerprint (built from basic browser and screen properties). These are used for account security and abuse prevention, not for advertising targeting.
- Free daily-use records: counters and the start time of each 24-hour quota window for squad auto-builds and SBC solutions, linked to your Squad Builder account.
If you buy VIP, payment is handled by Dodo Payments (merchant of record). We do not collect or store card or bank details: they are entered only on the Dodo Payments checkout page. We receive only what is needed to manage your subscription: its status and plan, and basic purchase details such as date, amount, currency and country. We do not ask for your EA account or game login.
Chrome extension: My Club and SBC transfer
When you initiate My Club sync, the optional Chrome extension reads EA FC Ultimate Team item information from the EA Web App and sends card/item identifiers, attributes and storage locations to squad-builder.com over HTTPS using a one-time pairing code and a short-lived upload token. Imported data is linked to the Squad Builder account that initiated the sync.
When you choose Send to EA app, the extension operates within your existing EA Web App session to place the prepared SBC lineup. It may temporarily read the EA authentication header X-Ut-Sid in the EA page to make the requested call to the EA API. This value remains in page memory: it is not transmitted to Squad Builder servers or saved in extension storage. The extension does not ask for your EA password or send your EA cookies to Squad Builder.
The extension temporarily stores its pairing/upload status and chosen SBC lineup in browser extension session storage. It remembers a panel display preference in local storage and can find or open the EA Web App tab. These operations are limited to the supported Squad Builder and EA Web App pages; the extension does not collect your email messages, contacts or browsing history.
Chrome Web Store Limited Use: information accessed through the extension is used only for its user-facing My Club sync and SBC lineup transfer features, and related security and reliability. We do not sell extension data or use it for personalised advertising, unrelated profiling, lending or credit decisions. Our handling of extension data follows the Chrome Web Store User Data Policy, including its Limited Use requirements.
Why we use it
- To provide the service: sign you in, keep your saved squads and settings.
- To keep the site secure: prevent spam, fake accounts, circumvention of free daily limits and other abuse.
- To send service emails, such as email verification and password reset. We do not send marketing emails.
- To understand which pages are used, fix bugs and improve the site.
Where the GDPR or similar laws apply, the legal bases are performance of our agreement with you (providing your account), our legitimate interests (security, abuse prevention, improving the site) and, where required, your consent.
Cookies and local storage
Essential cookies keep you signed in, protect accounts and remember your language. Your draft squad and some interface settings are saved in your browser's local storage.
For non-VIP visitors, we may display advertising through Google AdSense and use optional analytics. Ad providers may process browser, cookie or device information as described in Google's privacy documentation. Where legally required, we request consent before non-essential cookies or tracking are used. You can choose necessary cookies only and change your browser preferences.
Who we share data with
We do not sell or rent personal data. We only share it with service providers that help run the site, and only as far as needed:
- Hosting provider (servers where the site and its database run).
- Cloudflare (network protection and content delivery).
- An email delivery provider (to send verification and password-reset emails).
- Google for sign-in if you choose it, and Google AdSense for advertising to non-VIP visitors where enabled and permitted by consent requirements.
- Dodo Payments (payment processing, merchant of record), only if you buy VIP. Its own privacy policy applies to the payment data you give it.
We may also disclose data if required by law. Some of these providers may process data outside your country; they are expected to protect it under their own privacy commitments.
How long we keep it
Account data, saved squads and imported My Club item data are kept while your account exists. You can delete imported club data from My Club at any time. Technical and security records are kept only as long as needed for security and abuse prevention. When your account is deleted at your request, your personal data is deleted or anonymised, except where we must keep limited records to prevent abuse or comply with the law.
Your rights
You can ask to access, correct, export or delete your personal data, or object to its processing. Send your request from the email address linked to your account to [email protected]. As a one-person project we handle requests manually, usually within 30 days. If you are in the EU/EEA or the UK, you also have the right to complain to your local data protection authority.
Children
Squad Builder is not intended for children under 13 (or the minimum age required in your country to consent to data processing). If you believe a child has created an account, contact us and we will delete it.
Security
Passwords are stored only as secure hashes, connections use HTTPS, and access to the server is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.
Changes to this policy
If this policy changes, the new version will be published on this page with an updated date. For significant changes, we will make a reasonable effort to let registered users know.