Privacy Policy

1. Who we are

Kapital Fútbol (the 'Platform') is a website operated by Kapital Fútbol (Tax ID 2400158966001) with registered address at Guayaquil, Ecuador. For inquiries related to this policy, contact us at kapitalfutbol@gmail.com.

We comply with Ecuador's Organic Personal Data Protection Act (LOPDP, 2021) and, when applicable based on user residence, the European Union's General Data Protection Regulation (GDPR).

2. What data we collect

We collect information you provide directly and data generated automatically when you use the Platform.

• Account data: name, email, hashed password (bcrypt), avatar, city, and country.
• OAuth authentication data (when you sign in with Google or Facebook): provider identifier, email, public name.
• User-generated content: sticker listings, chat messages, ratings, and reports.
• Technical data: IP address, user agent (browser and OS), preferred language, cookie identifiers.
• Tracking data (only with consent): Google Analytics 4 and Meta Pixel identifiers; navigation events (news reads, listing creation, chat starts).

3. Why we use your data

We process data only for specific purposes:

• Operate the service: authenticate you, display your listings, enable trades and chat.
• Security: detect abuse, prevent fraud, enforce moderation.
• Essential communications: send a welcome email and notifications when you receive messages while offline.
• Improve the Platform: understand which content is useful via aggregated analytics.
• Comply with legal obligations when required by competent authority.

4. Who we share your data with

We do not sell or rent your personal information. We share data only with service providers bound by confidentiality and processing agreements:

• Supabase (database and file storage) — servers in the United States.
• Vercel (web application hosting) — global servers.
• Resend (transactional email) — servers in the United States.
• Google Analytics 4 (web analytics, only with consent).
• Meta Pixel and Meta Conversions API (ad campaign measurement, only with consent).
• Google Ads (conversion tracking, only with consent).
• Public authorities when a judicial order requires it.

5. Cookies and similar technologies

We use cookies and browser local storage for technical purposes (session, preferred language, consent state) and measurement (when you accept).

Full details on each cookie and how to manage them are in our Cookie Policy. You can change preferences anytime via the consent banner or by clearing your browser cookies.

6. Your rights

Under LOPDP and, when applicable, GDPR, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate information.
• Erasure: request deletion of your account and associated data.
• Objection: object to processing for marketing or tracking purposes.
• Portability: receive your data in a structured format.
• Withdraw consent at any time without affecting prior processing.
• File a complaint with the supervisory authority (in Ecuador: Superintendencia de Protección de Datos Personales).

7. How long we keep your data

We keep your information while your account is active. If you request deletion, we erase your personal data within 30 days, except where a legal obligation requires us to retain specific records (e.g., moderation logs against pending reports).

8. Minors

The Platform is not targeted at children under 14. If we discover an under-14 created an account, we will delete it immediately. For users between 14 and 18, parental consent is recommended.

9. Changes to this policy

We may update this policy. When we make substantial changes, we'll notify you on the Platform or by email. The last-updated date appears at the top of this document.

10. Contact

To exercise any of your rights or ask questions: kapitalfutbol@gmail.com.

Data controller: Kapital Fútbol (Tax ID 2400158966001). Address: Guayaquil, Ecuador.