FutMaxing
FutMaxing
Join Discord
Legal

Privacy Policy

Last updated: 2026-06-05

FutMaxing is a Chrome browser extension that runs only on the EA FC Ultimate Team web app. This policy describes what data we collect, how we use it, and what choices you have. We deliberately collect as little data as possible — only what is needed to deliver the calculator and reference features.

Summary

  • We do not collect your EA account password.
  • We do not sell, share, or transfer your data to third parties for advertising or analytics.
  • We do collect: your license key, authentication tokens we issue, basic device info during activation, and your IP address (logged server-side for security).
  • We do process your club and transfer market data from EA on our servers — only to compute SBC solutions and aggregate market prices.

What We Collect

Personally identifiable information

When you activate your license, the extension sends:

  • Your license key (the FP-… value you received from us)
  • A device identifier (a fingerprint derived from your browser and operating system) — used to detect license-key sharing
  • Your extension version

This is stored alongside your license record. We use it to verify your subscription status and to enforce license terms.

Authentication information

After activation, our server issues:

  • A short-lived authentication token (JWT, 30-minute expiry)
  • A per-session signing key (HMAC)

These are stored locally on your device. The extension uses them to sign requests so we can verify each request comes from a legitimate licensed user. We do not store your EA password or any EA account credentials at any time.

Location

Our server logs your IP address on every request (standard for any web service). We use it to:

  • Bind your session to a geographic region, so a stolen token from one country cannot be reused elsewhere
  • Apply per-IP rate limits to prevent abuse
  • Display country for support purposes only

We do not derive precise location from your IP, and we do not share it with third parties.

Website content

When you use the SBC calculator or inventory tools, the extension reads your club inventory, transfer list, and market data from EA's FC Ultimate Team web app and sends portions of it to our server to:

  • Compute optimal SBC squad solutions tailored to your club
  • Cache price observations to improve the market price reference for all users
  • Calculate aggregate market statistics

This is the same data EA's own web app loads — we observe it through the page after EA has already loaded it for you. We do not retain individual user inventory snapshots long-term; price observations are aggregated and disconnected from individual users.

What We Do Not Collect

  • Your EA account password — we never see it; you log in to EA's web app normally
  • Browsing history outside the EA FC Ultimate Team web app
  • Keystrokes, mouse position, or clicks anywhere outside the extension panel
  • Health, biometric, or other sensitive personal data
  • Payment information — license purchases happen on our website; the extension never sees card details
  • Personal communications (emails, messages, chats)

How We Store Data

Locally on your device: license key, authentication tokens, signing key, user preferences, cached reference data. Removing the extension from Chrome deletes all local data.

On our servers: license records, aggregate price data, integrity hashes for security verification, server logs for diagnostics (retained 30 days). All data in transit between the extension and our servers is encrypted (HTTPS) and signed with per-session HMAC keys to prevent tampering and replay.

Third Parties

We do not share your data with any third parties for advertising, analytics, or any other purpose. Our infrastructure providers (Cloudflare for CDN, our hosting provider for the server) receive data necessary to deliver requests to our server — this is standard practice and not data sharing.

Your Choices

  • Bookmarklet: right-click the FUTMAXING bookmark in your bookmarks bar and select Delete. To also clear any cached state, open the EA web app, then in DevTools (F12) → Application → Storage → Clear site data.
  • Extension (legacy): uninstall via chrome://extensions. Removing it deletes all local data.
  • To delete your server-side license record and associated data, contact us via Discord (below).

Children

FutMaxing is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us data, please contact us and we will delete it.

Changes to This Policy

If we change this policy, we will update the "Last updated" date above. Significant changes that affect what data we collect will be announced via the extension UI and on Discord.

Contact

Questions, requests, or concerns:

← Back to FutMaxing