Privacy Policy

Last updated: April 16, 2026

Kickoff is a browser extension that helps a fan track FIFA World Cup 2026 resale ticket prices while they browse the official resale site. This page explains what the extension does with data and what it doesn't.

Data we collect

When the extension scans a match page, it stores the following so your personal dashboard can show it back to you:

• Your anonymous UUID — a random identifier generated on your device the first time you run the extension. It is not linked to any name, email, account, or identity.
• Scan data — the match, date, stadium, and the list of available seats (block, row, seat number, category, price) returned by the FIFA resale site's own public API.
• Timestamps — when each scan happened.
• A short User-Agent string — used only to help diagnose bugs. Capped at 200 characters and never correlated with anything else.

Data we do not collect

• Your name, email address, phone number, or any personally identifying information.
• Your FIFA account credentials, payment details, or the tickets you actually purchase.
• Your IP address is not stored in our database. (It briefly passes through Cloudflare for request delivery, like any website visit.)
• Anything from any website other than *.tickets.fifa.com — the extension only activates on that domain.
• Ad tracking, fingerprinting, or third-party advertising trackers of any kind. The extension itself contains no analytics.

Website analytics

The Kickoff website (this landing page, the dashboard, and this privacy page) uses Umami, a privacy-friendly, cookieless analytics service, to count page views and see which pages are popular. Umami does not set cookies, does not track you across sites, and does not collect personal information. It records anonymized, aggregated data only (page URL, referrer, browser, and country derived from IP — the IP itself is not stored). The browser extension does not load Umami; analytics only run when you visit the website in a browser.

Where the data lives

Scan data is stored in a private database hosted on Cloudflare (D1). Your UUID appears in the URL of your personal dashboard (for example, https://fifa-kickoff.pages.dev/app.html?u=…). Anyone who has that URL can read the data associated with it, so treat the URL like a password. Don't share it.

Telegram notifications (optional)

If you choose to link your dashboard to the Kickoff Alerts Telegram bot, we store your Telegram chat ID so we can send price-drop messages to that chat. You can unlink at any time by sending /unlink to the bot. We do not store your Telegram username, phone number, or any other Telegram profile data — only the chat ID and the time you linked.

Data retention and deletion

We keep scan data indefinitely while the extension is actively used, because the value is in the historical trend. You can ask to have your UUID and all associated scans permanently deleted by contacting us at the email below. Deletion is immediate and irreversible.

Sharing and selling data

We do not sell your data. We do not share it with advertisers, analytics providers, or any third party. There is no aggregation, no anonymized-data-for-sale product, nothing like that. The infrastructure providers we use (Cloudflare) process the data strictly as a pass-through for delivery, under their own privacy terms.

Children

Kickoff is not directed at children under 13 and we do not knowingly collect data from them.

Changes to this policy

If this policy changes, we'll update the date at the top. Material changes will be announced via the bot or the dashboard before they take effect.

Contact

Questions or deletion requests: reach out at me@shem.dev.

Kickoff is an independent project. It is not affiliated with FIFA, the FIFA World Cup, Secutix, or any official ticketing partner.