The English version of this Policy is authoritative. Translations are provided for convenience.
1. Introduction
This Privacy Policy explains how Pro Clubs Hub ("we", "us", "our") collects, uses, shares, and protects personal information about users of the website proclubshub.com and our mobile application (together, the "Platform"). Pro Clubs Hub is operated from Israel and primarily governed by the Israeli Privacy Protection Law, 5741-1981. Where the EU General Data Protection Regulation ("GDPR"), the UK GDPR, or other applicable privacy law grants users stronger rights, we honour those rights as set out below.
2. Information We Collect
Data you provide directly:
- Account details: email address and password (passwords are never stored by us in plain text — authentication is handled by Firebase);
- Profile details: username, avatar, country, preferred platforms (PS5/PS4/Xbox/PC), languages, preferred communication methods;
- EA Pro Clubs import: EA "pro name," club ID, club name, and a snapshot of publicly available statistics from EA's API;
- Listings: your "looking for a team" or "looking for a player" posts, including title, description, positions, minimum OVR, country, platforms;
- Messages: content of direct messages you send to other users;
- Reports: reports you submit about other users, listings, or messages;
- Feed posts: videos and articles you publish.
Data collected automatically:
- Technical data: IP address, browser and device type, operating system, referring URL, approximate location derived from IP;
- Usage data: pages or screens visited, features used, basic performance and error logs;
- Authentication cookies: an httpOnly session cookie is set to keep you signed in (see §10).
Data from third parties:
- EA's public Pro Clubs API — match statistics, roster, and club metadata that EA makes publicly accessible;
- Firebase Authentication (operated by Google) — the minimum identifiers needed to verify your login.
3. How and Why We Use Your Information
We use your data for the following purposes:
- To provide the Platform — create your account, display your profile to other users, enable matchmaking, messaging, and listings (legal basis: performance of our contract with you);
- To verify your email and protect your account — send verification links, security notices, and password-reset emails (contract + legitimate interest in security);
- To enforce our Terms and keep the community safe — detect abuse, fraud, cheating; investigate reports; operate warning/suspension/ban tiers (legitimate interest + legal obligations);
- To operate administrative email — notify moderators of new listings or reports awaiting review (legitimate interest);
- To analyse and improve the Platform — aggregate usage patterns, diagnose bugs, measure feature adoption. Internal server logs are processed on the basis of our legitimate interest in maintaining and improving the service. Optional traffic and product analytics via Google Analytics 4 (see §5 and §10) are loaded only after you give consent through our cookie banner (legal basis: consent — which you may withdraw at any time);
- To comply with legal obligations — respond to lawful requests from authorities, retain records for tax or audit purposes.
We do not sell your personal data, and we do not use it for behavioural advertising.
4. What Other Users See
Other signed-in users of the Platform can see: your username, avatar, country, preferred platforms, languages, EA pro name and club (if linked), imported stats, and any listings or feed posts you publish. Direct messages are private between the participants but may be reviewed by moderators as described in §3 and in the Terms of Use.
5. Sharing with Third Parties
We share the minimum data necessary with these categories of recipient:
- Infrastructure and hosting providers — our servers, databases, caches, and deployment platform. Data is processed on our behalf and subject to confidentiality obligations.
- Firebase Authentication (Google Ireland / Google LLC) — handles password authentication and email verification tokens.
- Google Analytics 4 (Google Ireland / Google LLC) — measures aggregate site traffic, acquisition sources, and product usage. Loaded only after you grant consent via our cookie banner. Sets the _ga family of cookies and may transfer pseudonymous identifiers to Google. IP addresses are truncated by Google before storage. You can opt out at any time via the "Cookie settings" link or by clearing the consent in your browser. We have no ad personalisation signals enabled.
- Email delivery (Hostinger SMTP) — transactional emails (verification, password reset, account notices) from no-reply@proclubshub.com.
- EA's public API — when we fetch your club/stats, we send a public club identifier; we do not send your Pro Clubs Hub account details to EA.
- Embedded content providers (YouTube, TikTok) — when you or another user embeds a video, your browser loads it directly from YouTube/TikTok, which may set their own cookies. Their privacy policies govern that interaction.
- Legal and safety recipients — law-enforcement authorities, regulators, or our legal advisors where disclosure is required by law, necessary to enforce our Terms, or necessary to protect users' vital interests.
- Business transfers — if we merge with, are acquired by, or sell assets to another entity, your data may be part of the transferred assets, subject to equivalent protections.
6. International Data Transfers
Because some of our service providers (notably Firebase/Google) operate globally, your data may be transferred to and processed in countries outside your own, including the United States and the European Economic Area. Where we transfer personal data of EU/UK users outside of those regions, we rely on legal transfer mechanisms such as the European Commission's Standard Contractual Clauses or on the recipient's Data Privacy Framework certification. You may request more information by contacting us.
7. How Long We Keep Your Data
We keep your account data for as long as your account is open. When you delete your account:
- Your profile, listings, and feed posts are removed from the Platform immediately;
- Messages may remain visible to the other participant until they delete their own side of the conversation (in the same way email survives at the recipient);
- Firebase Authentication records are deleted where possible; minimal audit logs required to enforce bans and prevent re-registration may be retained for up to 24 months;
- Anonymised, aggregated statistics (e.g., weekly active users) may be retained indefinitely because they are not personal data.
Reports you filed and moderation decisions taken in response to them may be retained as long as reasonably necessary to protect the community, even after your account is deleted.
8. Your Rights
You have the following rights in respect of your personal data. Some rights apply only to residents of specific regions (e.g., GDPR rights apply to users in the EU/UK):
- Access — ask for a copy of the personal data we hold about you;
- Correction — ask us to correct inaccurate or incomplete data;
- Deletion — ask us to delete your data (you can do this directly from Settings);
- Portability — receive data you provided to us in a machine-readable format (EU/UK);
- Restriction / Objection — ask us to stop or limit specific uses of your data (EU/UK);
- Withdraw consent — for any processing based on consent, you may withdraw it at any time;
- Complain to a supervisory authority — you may lodge a complaint with your national data protection authority (e.g., the Israeli Privacy Protection Authority or an EU data protection authority).
To exercise any of these rights, email support@proclubshub.com. We will respond within a reasonable timeframe, and within 30 days where required by law. We may need to verify your identity before acting on a request.
9. Children's Privacy
The Platform is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact support@proclubshub.com and we will delete the account and any associated data. For users between 13 and the age of majority in their jurisdiction, a parent or legal guardian must agree to these terms; parents or guardians may request deletion of their child's account at any time.
10. Cookies and Similar Technologies
We use the following categories of cookies and similar technologies:
- Strictly necessary — an httpOnly session cookie keeps you signed in securely after login. Browser local storage remembers your language, theme, and other UI preferences. These are required for the Platform to function and do not require consent.
- Analytics (optional, consent-based) — Google Analytics 4 sets the _ga family of cookies (typically _ga, _ga_<property>) to measure traffic, acquisition sources, and aggregate product usage. These cookies are set only after you grant consent via the cookie banner. We use Google's Consent Mode v2: before consent, no analytics cookies are written and only cookieless, aggregated pings may be sent. We do not enable any advertising signals.
- Embedded third-party content — when you or another user embeds a YouTube or TikTok video, your browser loads it directly from those providers, which may set their own cookies. Those cookies are controlled by the respective provider and governed by their privacy policies.
We do not use advertising cookies, retargeting pixels, or cross-site behavioural advertising. You can withdraw analytics consent at any time using the "Cookie settings" link available on the site, or by clearing your browser's storage for this site.
11. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), access controls, encrypted password storage via Firebase, environment-variable protection of secrets, and principle-of-least-privilege for admin access. No system is 100% secure. If a data breach materially affects your data, we will notify you and any required regulators as soon as reasonably practicable, as required by applicable law.
12. Automated Decision-Making
We do not use solely automated decision-making or profiling that produces legal or similarly significant effects about you. Content safety filters may automatically flag messages, listings, or posts for human review — but any decision to remove content or suspend an account is made or confirmed by a human moderator.
13. Third-Party Links and Embeds
The Platform contains links to, and embeds of, third-party websites (YouTube, TikTok, EA-branded pages, etc.). We are not responsible for the privacy practices of those third parties. We encourage you to review their policies before interacting with their content.
14. Changes to This Policy
We may update this Policy from time to time to reflect changes to the Platform, our practices, or applicable law. Material changes will be highlighted by updating the "Last updated" date above and, where appropriate, by in-app notice or email. Continued use of the Platform after a change takes effect constitutes acceptance of the revised Policy.