Controller. Fan Passport 2026 (the "Service") is operated by WFC26 (the "Seller"), which acts as data controller for personal data processed through the Service.
Personal data we collect
- Account data — email, display name, avatar (if provided), login credentials.
- Passport data — country selections, serial numbers, stamps, achievements, leaderboard placement.
- Usage and telemetry — device, browser, IP address, in-app events for fraud prevention and product improvement.
- Support — messages you send us.
Purposes and legal basis
- Provide the Service (contract): account creation, passport minting, leaderboards, notifications.
- Security & fraud prevention (legitimate interests).
- Product improvement (legitimate interests).
- Compliance with legal obligations.
- Marketing (consent) — only if you opt in.
Who we share data with
- Paddle — our Merchant of Record handles all purchases, subscription management, payments, tax compliance and invoicing. Paddle receives the personal data needed to process your transaction.
- Service providers — hosting (cloud database, edge infrastructure), email delivery, analytics, and support tooling, all under appropriate data processing agreements.
- Authorities — where required by law.
- Professional advisers — legal and accounting professionals where necessary.
International transfers
Personal data may be transferred outside the UK/EEA to our service providers. Where this occurs we rely on appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions).
Retention
We keep personal data only as long as needed for the purposes above, or to comply with legal obligations, and delete or anonymise it afterwards.
Your rights
Subject to local law, you have rights to access, rectify, erase, restrict, port, object to processing, withdraw consent, and complain to a supervisory authority. We aim to respond within one month.
Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, and audit logging — to protect personal data.
Cookies
We use only essential cookies required for authentication and session management. We do not use marketing cookies.
Contact
For privacy questions, contact the Seller via the support address shown on the checkout page.