FOOTBALL API
Sign inRequest a key
The collectionDocumentationMembershipStatusSupport
Sign inRequest a key

PRIVACY POLICY

What we keep, and why

What Football API keeps about you, why we keep it, who else handles it and how to have it deleted.

Last updated 21 October 2026

01Who we are

The operator and data controller for this website is DeveloperData.net (Developer Data), Empire Tower, 41st Floor, Unit 4106-7, South Sathorn Road, Yannawa, Sathorn, Bangkok 10120, Thailand. Contact: [email protected].

This policy covers footballapi.org, the API at api.footballapi.org and the MCP server.

02What we keep

  • Your account: your email address and name as Google gives them when you sign in, the id Google gives your account, your plan, and the country your connection came from when you joined.
  • What you put in: the label you give your key.
  • Your API key: only as a fingerprint and its first characters, never the key itself, so it cannot be shown again.
  • Usage: how many calls your key makes each day and to which endpoints, including calls refused by your plan, and the assistants you connect with when they last used your key.
  • Membership: its state and period, and the reference Stripe gives you as a customer.
  • Support tickets: what you write to us and our answers.
  • Logs: for pages and API calls, the address asked for, the site you came from, your browser's name, your IP address and its country.

03Card details

We never hold your card details. Stripe takes the payment and keeps the card.

04Why we keep it

To run the product, bill membership, answer support, stop abuse and keep the service secure. Nothing is sold, and there is no advertising tracking.

05Who else handles it

  • Stripe: payments.
  • Cloudflare: the network in front of the site, and its security.
  • Our email provider, through Developer Data: the emails we send you.
  • Google: signing in with your Google account.
  • Our hosting company: the servers the product runs on.

06Cookies

Only first-party cookies that make the site work. No analytics or advertising cookies.

NAMEWHAT IT DOESLASTS
fapi_sidKeeps you signed in.30 days
fapi_otProtects signing in with Google's pop-up.10 minutes
fapi_gsChecks a sign-in with Google came back from Google.10 minutes
fapi_gnRemembers the page to return to after signing in.10 minutes
fapi_outStops the sign-in pop-up straight after you sign out.1 minute
ap_clickRemembers which partner sent you, so they can be credited for a purchase. It holds no personal details, and a newer partner link replaces it.60 days

Google's sign-in sets its own cookie when you use it. A key you paste into Try it in the documentation is kept by your own browser, on your device, and never sent to us except with the calls you run.

07How long it is kept

  • Your account and what you put in: while the account is open.
  • After you delete the account: gone at once from the live service, and from backups within 30 days.
  • Billing records: invoices and payments are kept as long as tax and accounting law requires, even after the account is deleted.
  • Page, API and security logs: 30 days.
  • Support tickets: while the account is open, then deleted with it.

08Your rights

You can ask to see what we hold about you, have it corrected, take a copy, or have it deleted. Ask through support; we answer within 30 days.

09Deleting your account

Delete it yourself from your account: Overview, Delete my account. When you confirm:

  • a membership is cancelled at once, and the unused part of the period is not refunded;
  • your key and any connected assistants stop at once;
  • you are signed out, and we email you that it is done;
  • the account, its usage and its support tickets are deleted; billing records stay with Stripe as the law requires.

If you cannot sign in, ask through support from the email address on the account.

10Children

Football API is not for anyone under 18.

11Changes to this policy

A new version is posted here with its date. A change that matters is emailed to members first.