← MADBASE

Privacy Policy

Last updated: 10 October 2026

The short version: MADBASE has no accounts and no sign-in, and we do not ask you for your name, email address, or any other personal detail. We do not sell your data. The limited data that is collected comes from Google services built into the app (analytics, push notifications and, in future, advertising) and from our own server, which counts how the app is used through a random install ID that is not linked to you. All of it is described in full below.

1. Who we are

MADBASE (the “app”) is operated by Melon Softwares (“we”, “us”, “our”), based in the United Kingdom. For the purposes of the UK GDPR and the Data Protection Act 2018, Melon Softwares is the data controller for the limited processing described in this policy.

If you have any question about this policy or your data, contact us at [email protected].

2. Information we do not collect

MADBASE does not require an account. We do not collect or store your name, email address, phone number, postal address, date of birth, contacts, calendar, photos, microphone or camera input, or precise location. There is no login, and nothing you do in the app is tied to a personal profile held by us.

3. Information collected automatically

3.1 Analytics (Google Firebase Analytics)

The app includes Google Firebase Analytics, which collects anonymous usage and device information so we can understand which features are used and diagnose problems. This typically includes:

This data is processed by Google. See Firebase privacy information and the Google Privacy Policy.

3.2 Push notifications (Firebase Cloud Messaging)

The app can send you notifications about new MADFUT 26 content. Notifications are broadcast to a shared topic that every install subscribes to — we do not store device tokens or maintain any list of individual devices, and we cannot send a message to you specifically. Google assigns your installation a messaging token as part of this service. You can turn notifications off at any time in your device’s system settings for MADBASE.

3.3 In-app messages (Firebase In-App Messaging)

We may display occasional announcement banners inside the app. Targeting for these messages relies on the analytics data described in section 3.1.

3.4 Advertising

MADBASE does not currently display advertising. We may introduce advertising in a future version, supplied by Google AdMob. If and when we do:

4. Information handled by our own servers

The app fetches MADFUT game data from our server. In doing so:

WhatWhyHow long
Aggregate view counts (e.g. “this player card has been opened 412 times”) To power the “Popular Players” and “Popular Evo Cards” lists Indefinitely — these are plain counters and contain no identifiers of any kind
A random install ID, created by the app the first time it runs and sent with each request to our server To count how many devices use MADBASE each day and how many are online at once. It is generated at random and contains nothing about you or your device. Our server stores only a scrambled (hashed) form of it Daily records are deleted after 90 days; an install not seen for 180 days is removed entirely. Clearing the app’s data or reinstalling creates a new ID
App version and platform (for example “1.2 on Android”), sent with each request To know which versions are still in use before an update is required, and to fix problems that affect one platform Kept with the daily records above (90 days)
Request statistics (how many requests each part of the API receives per hour, and how many failed) To keep the service running and plan capacity Plain counts with no identifiers, kept for up to 13 months
Server error logs To find and fix faults in our server. They describe what went wrong inside the server and contain no information about you Detailed entries are deleted after 30 days; error counts after 90 days
IP address Processed momentarily to apply rate limits and block abuse of the API Held in memory only, for a rolling window of about one minute. Not written to any database and not used to build a profile

View counts are not linked to you, your device, your install ID or your IP address. We cannot tell which cards you looked at — only how many times a card was opened in total. The install ID is never combined with your IP address, your name or any other information that could identify you, and it is not shared with anyone.

5. Images you save or share

When you use the Download or Share button on a player card, the image is written to your device’s storage or passed to the app you choose to share with. This happens on your device. We do not receive a copy and we do not keep a record of it.

6. Legal bases for processing (UK GDPR)

7. Sharing your information

We do not sell your data, and we do not share it with third parties for their own marketing. Data is shared only with the service providers that make the app work:

We may also disclose information where we are required to do so by law.

8. International transfers

Google processes data on servers outside the United Kingdom, including in the United States. Where personal data is transferred out of the UK or EEA, Google relies on safeguards such as Standard Contractual Clauses and the UK International Data Transfer Addendum, as set out in its own privacy documentation.

9. Your rights

Under the UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, and the right to data portability. We hold no account, and the only identifier of our own is the random install ID described in section 4, which we store only in hashed form and cannot link to you. We therefore usually cannot locate any data that relates to you specifically. Clearing the app’s data or uninstalling the app replaces the install ID, and the old one is removed from our server after 180 days.

To exercise rights over data held by Google, you can:

If you are unhappy with how your data has been handled, you may complain to the UK Information Commissioner’s Office at ico.org.uk.

10. Children

MADBASE is intended for users aged 13 and over and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete anything we are able to identify.

11. Data security

Traffic between the app and our server is encrypted with HTTPS, and the app is configured to refuse unencrypted connections. Our API is protected by rate limiting and access controls. No system is perfectly secure, but the app holds very little data to begin with.

12. Changes to this policy

We may update this policy as the app develops — for example, when advertising is introduced. The “last updated” date at the top will change, and significant changes will be announced in the app.

13. Contact

Melon Softwares
United Kingdom
[email protected]

14. Disclaimer

MADBASE is an unofficial fan-made companion app. It is not affiliated with, endorsed by, or associated with MADFUT, Trivela Games, FIFA, or any football league, club, or organisation. All trademarks are the property of their respective owners.