EN
TRPrivacy notice
How NOBK Online handles your personal data (EU GDPR and Turkish KVKK). Last updated: 17 October 2026.
Who we are
NOBK Online is a non-profit community project. For anything about your personal data, write to [email protected].
What we collect
- Account details: username, e-mail address, your password (only as a one-way hash), the country you picked.
- Profile details (optional): profile picture, "about me" text, favourite team and players, linked account names (Steam, RetroAchievements, Letterboxd), favourite anime songs (YouTube links).
- Game data: results and stats of the matches you play (score, shots, passes, cards etc.), your MMR rating, your in-game ID (XUID). In team play (Be A Pro) matches also the side and position you played and the footballer you controlled; these are public on the Pro page and the match cards.
- Connection details: your IP address. Used for sign-in security, to limit failed sign-in attempts and to match your launcher sign-in to your game connection; the record kept for the game connection is deleted automatically after 12 hours. Server logs keep it for at most 30 days.
- Error logs (optional): if you press "Send log" in the launcher, the game's technical log file (run.log) and your note are sent to us. This file can contain your in-game name, match and connection details (including IP addresses). It is only used for debugging and kept for at most 90 days.
- Cookies: one required cookie keeps you signed in, and one remembers the site language you picked. No advertising or tracking cookies.
Why we process it
- To create your account and let you play online (performance of a contract).
- To show match results, the leaderboard, profile and stats pages.
- To send you a reset link if you forget your password.
- To prevent cheating, abuse and unauthorised access (legitimate interest).
What is public
Your username, country, profile picture, about-me text, favourite team, the games you play, your match results and stats are public on the site and in the match notifications on the community Discord server. Your e-mail, IP address and password are never shown. One exception: if you turn on "Connect directly to my opponent (P2P)" on the account page and your opponent did too, match traffic flows directly, so during the match each player's game sees the other's IP address. This option is off by default. In FIFA 09 your IP address is also used to find your country (region) for matchmaking. Players outside Turkey and Europe play directly (P2P) inside their region; in those matches both games see each other's IP address. A match against a player from Turkey or Europe always goes through the server.
Who we share it with
We do not sell your data or use it for advertising. To run the service we use these providers:
- netcup GmbH (Germany): server hosting; your data is stored on this server.
- Cloudflare: keeps the site fast and secure (traffic passes through its network).
- Resend: only for sending password reset e-mails (your e-mail address and username).
- Discord: match notifications (public information only).
- YouTube (Google): if you add YouTube links to your profile, we read the video title from YouTube when you save; video thumbnails on profiles load from YouTube's servers.
Some of these providers are outside your country, so your data may be transferred abroad.
How long we keep it
As long as your account exists. When you delete your account, the account and profile details are deleted at once; in the match history your name becomes "Silinmis" (deleted). Backups are kept for at most 14 days, then deleted automatically.
Your rights
You can ask whether and how your data is processed, get a copy, have it corrected or deleted, learn who it was shared with, and object to processing. You can correct most of it yourself on the account page or delete your account completely. For anything else write to [email protected]; we answer within 30 days. You can also complain to your data protection authority.
Age limit
You must be older than 13 to create an account.