Privacy Policy — futmarket.app browser extension & userscript

Effective date: 20 October 2026 · Last updated: 25 October 2026

This policy explains how the futmarket.app browser extension (“the extension”), the Tampermonkey userscript, and the plugin information site at plugin.futmarket.app handle information. futmarket.app is an independent third-party project and is not affiliated with, endorsed by, or sponsored by Electronic Arts, FUTNext, FUTBIN or Chrome.

1. What the extension does

The extension runs on the EA SPORTS FC Ultimate Team Web App and provides a local-first workspace for free market tracking, Squad Builder chemistry drafting, complex/points SBC solving, Smart Gallery collection planning, club inventory management and Sniper filter tools. It works without an futmarket.app account.

2. Information stored locally

• Settings and preferences — your chosen interface language, display options, locked player IDs, filters and saved searches are stored in the browser's local storage / IndexedDB on your device.
• Price and collection caches — reference prices, local price samples, Smart Gallery collection progress and UI state are cached locally in the browser to avoid repeated requests and to compute grading/chemistry plans. Local usage counters and the trade ledger record task activity, game-item transactions and game-coin balances for on-device history and profit calculations.
• Saved squad plans — up to 5 squad drafts are stored in the EA Web App site’s local storage. They contain plan names, formations, selected player/card identifiers and display metadata; a local account identifier, season and platform separate your plans on your device. They are not uploaded to futmarket.app.
• This information stays in your browser profile. Local records persist until replaced or deleted. Clear EA Web App site data (including localStorage and IndexedDB) in your browser settings to remove local records; uninstalling the extension alone may leave site data behind. This also removes EA site data and may sign you out.

3. Read-only third-party data requests

To display reference prices, card portraits and public market snapshots, the public extension makes read-only GET requests with credentials: 'omit' to:

• futmarket.app — futmarket.app public read-only market endpoints (aggregated market indices, 4H/24H movers, market timing radar and card history snapshots) and a read-only version handshake on futmarket.app.
• FUTNext — enhancer-api.futnext.com and www.futnext.com (read-only player price references, fodder price ladders and 24-hour public price trend data).
• FUTBIN — www.futbin.org and cdn3.futbin.com (read-only fallback price references by rating/resource ID and public card/player images).

Requests contain only the market lookup parameters needed for the feature, such as public player/card definition identifiers, platform (PS/Xbox/PC) and rating filters. The public extension does not send your EA email, password, session cookie, club contents, coins or trade history to futmarket.app. Third-party service providers may log standard HTTP request metadata (such as IP addresses) under their own privacy policies.

User-initiated EA actions: separate from the read-only third-party requests above, features such as Sniper, bulk listing, pack opening, market purchase and SBC submission use EA's in-page services and can change account state. These actions require a user-started task or confirmation, expose stop controls where supported, and may affect coins or items under EA's rules. They are not described as read-only and are not sent through futmarket.app.

4. What we do not do

• We do not sell personal data or transfer it for advertising, profiling or credit decisions. Necessary feature requests are sent to the services described above.
• No advertising or user profiling in the extension or on this site. The extension does not include analytics tracking code. Public website measurement is described below.
• No UI injection or general browsing-history collection outside the EA Web App and the read-only futmarket.app version handshake. Public service requests described above are separate.
• No remote code execution: all JavaScript is self-contained and packaged inside the extension.

Website analytics

Cloudflare may inject a Web Analytics beacon into public website pages to measure page views and loading performance using browser performance information. This measurement is separate from extension activity and does not read your EA club, squad drafts or trade ledger. See Cloudflare Web Analytics for provider details. Website visits and download responses are not evidence of completed installation or active extension use.

5. Permissions

• EA Web App host access (www.ea.com) — inject the local workspace UI and read in-page player item metadata needed for price display, Squad Builder, SBC Solver and Smart Gallery tools.
• futmarket.app host access — read public aggregated market indices/movers and indicate installed extension version status on futmarket.app in read-only mode.
• FUTNext / FUTBIN host access — fetch read-only public reference prices and player card images.

6. Third-party services and market data

Reference prices come from third-party sources and may be delayed, incomplete or differ from EA's live transfer market. We do not control those services. Their terms and privacy policies apply to requests sent to them. Market data is for informational reference only.

7. Children

The extension is not directed at children under 13. Do not use it if you are below the age required to use the EA SPORTS FC Web App in your country.

8. Support, feedback and contact

We may update this policy when features or data practices change; the effective date above will be revised. For privacy questions, support or deletion requests, email support@futmarket.app. Please do not include EA passwords, session cookies or authentication codes. Messages you choose to send leave your device and are used to handle the request. The optional feedback form on futmarket.app sends your selected category and message to our Cloudflare-hosted service, queues it for support and may deliver it through ntfy.sh. HTTP metadata is used for abuse prevention; there is no automatic upload of your club or trade ledger. Pending feedback is retried until acknowledged; no fixed deletion schedule is currently promised. Contact support for deletion of feedback or support messages.

This policy covers the public browser extension, the Tampermonkey userscript and the plugin site. It does not cover EA's own services or other third-party sites.