What we hold, and what you can do about it.

transferlink is a transfer-intelligence product for football agents and clubs, operated from the Netherlands by transferlink B.V. Under the GDPR we are the controller for everything described here: we decide what is collected and why, and we answer for it.

Registered with the Dutch Chamber of Commerce under number 89562133.

For anything on this page — a question, a correction, a request to see or delete what we hold, or an objection — write to hello@transferlink.io. It reaches a person, not a queue, and we answer within a month as the GDPR requires.

Most privacy policies describe one relationship: the company and its users. This product has two, and conflating them is how a policy ends up misleading.

The second group has the same rights as the first, and less reason to know they need them. That is why section 5 says plainly how to exercise them.

Everything we hold about you, why we hold it, and on what legal basis.

Your player list is readable only by your own account. That is enforced by row-level security in the database, not by which screens we happen to build — a bug in the app cannot show your book to somebody else, because the database refuses the query.

We use a strictly necessary session cookie to keep you signed in, plus first-party preference cookies for language, theme and colour accent. They are not used to follow you across sites or to build an advertising profile, so there is no advertising-cookie banner to click away.

On the public pages of transferlink.io we count visitors with Plausible Analytics, a privacy-first service hosted in the EU. It sets no cookie and stores nothing in your browser. It receives the page you opened, the page that referred you, your browser type and your country, and it hashes your IP address with a daily rotating salt, so the same visitor cannot be recognised from one day to the next. We see totals, never individual people, and we cannot link a visit to an account. Because nothing is stored on your device and nobody is identified, no consent banner is needed. The signed-in product is not measured.

Beyond that there is no advertising or social pixel, no fingerprinting, session recording, heatmap or tracking cookie. Accounts explicitly enrolled in a notified product pilot may produce the limited first-party actions listed in section 3; raw events remain in our own database and are deleted after 90 days.

You may be a professional footballer, a coach or a sporting director who has found his own name in this product. You did not agree to be here. This section is what we hold, why we think we are allowed to, and how to make us stop.

What we hold

Facts about your professional career in competitions we cover: appearances, minutes, the position you actually played in each match, whether you were in the matchday squad, match ratings, transfers and loans, and contract dates. Almost all of it comes from a licensed football data provider and is the same information published in a team sheet. Contract dates come from public sources such as Transfermarkt, or are entered by us, and always carry their source.

From your recent matches we also derive your role at your club (starter, rotation, reserve) and a form category compared with players in the same position and competition. These are rough categories, not scores, and we use them to show which openings are realistic for a player.

Minors. A player under 16, or whose age we do not know, is not in any lead. A lead about a player of 16 or 17 is marked “Under 18” and tells the agent what that means: written consent of his parents or guardian, and the FIFA rules on minors.

If an agent puts you on his own player list, he entered those details; they are visible to him and his team only. You can ask us about those too.

From that we produce an assessment — that a role appears to have changed hands, or that a club has not replaced someone. It is an opinion about a professional situation, and it is shown only to verified professional users: agencies and clubs we have approved by hand. It is never public.

Availability, and where we stop

Our data provider records whether you were in a matchday squad and, sometimes, that you were unavailable. We use only that fact: that you were unavailable, or that you were suspended. The provider may also name a reason such as an injury; we do not keep that reason in what we publish and we never show it. An absence reads as “not available”, nothing more.

We do not hold medical records, we do not seek out health information and we do not store a diagnosis. If something we show about you is wrong, tell us and we will remove it — we would rather carry nothing than carry that.

Why we believe we may

Our legal basis is legitimate interest (Art. 6(1)(f) GDPR): helping professional agents find work for professional players, using information about professional performance that is published as a matter of course in this industry. We have weighed that against your interests, and it is why the product is built the way it is — assessments about professional conduct in public competition, not private life; provenance on every claim; and access only for professionals we have verified by hand, never a public feed.

What you can do

• Ask what we hold about you. We will send it.
• Correct it. If a fact is wrong, we fix it and re-check the finding that rested on it.
• Object. You may object at any time to us processing your data on legitimate-interest grounds. Say so and we will stop, and remove you from the product, unless we can show compelling grounds that override your interests — and we rarely expect to be able to.

One address for all of it: hello@transferlink.io. You do not need a lawyer, a form, or a reason.

We run on other people's infrastructure, and each of them sees a specific slice. These are all the companies that process personal data on our behalf.

That last row is worth stating plainly: when a user looks up a player, that player's name leaves this system for the AI provider, which searches public sources such as Transfermarkt. Who asked for it, private notes and account credentials do not travel with it. Nothing else we hold is sent to an AI provider.

Some of these providers are based in the United States. Transfers there are covered by the European Commission's standard contractual clauses and, where the provider is certified, the EU–US Data Privacy Framework. Nothing is sold to anyone, ever, and nothing is shared with advertisers, because we have none.

The table in section 3 says it per item. The short of it: an access request until you ask us to remove it or two years of silence pass, an account for as long as you keep it, and anything you put in it for as long as the account exists.

Delete your account and your rows go with it — the database is set up so that removing the user removes the saved openings, the analyses, the player list and the read marker in the same operation. We do not keep a second active profile copy. Time-limited recovery copies are described below. The one exception is the sealed dossier of a club request (section 10): your name stays in the record of the transactions you took part in, for up to seven years after the request is finished.

Limited raw pilot events are deleted automatically after 90 days. Encrypted recovery copies age out within 30 days, so a deleted row may remain there temporarily; backups are isolated, used only to restore the service after failure and age out without being returned to normal use.

Data about players is kept while the situation it describes is live. A card that has been refuted or has expired stops being published; the record of the check stays in our own evaluation log, because a system that quietly forgets its own wrong answers cannot be measured.

Under the GDPR you can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong;
• delete it;
• stop or limit what we do with it;
• hand you what you gave us, in a form you can take elsewhere;
• stop processing based on legitimate interest — see section 5 for what that means in practice.

No automated decision with a legal or similarly significant effect is made about anybody by this product. A card is an opinion put in front of a human being who decides whether to act on it.

Write to hello@transferlink.io. If we handle it badly you can complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or to the authority where you live.

Everything travels over HTTPS. Passwords are one-way hashed by the authentication service and are not visible to us. Access to production data is limited to the people who need it, which during the pilot is a very short list.

Separation between accounts is enforced in the database itself rather than in the application — the strongest form available to us, and the reason a mistake in a screen cannot leak one agency's book to another.

If you find a security problem, write to hello@transferlink.io before publishing it and we will work with you.

Since October 2026 verified football clubs use transferlink too. A club says which player it needs, a verified agency offers one player, and the two can message and plan an online meeting. A club can also make one of its own players available to other clubs. This section is what that adds to the rest of this policy.

The dossier. Club requests can involve a lot of money, so every request, with its offers, messages and steps, is kept as a sealed record that cannot be changed afterwards. Both parties can look back at what happened, and so can a dispute body if it comes to that. If someone deletes their account later, their name stays in the record of the transactions they took part in. The basis is legitimate interests: proof for both parties (art. 6(1)(f), and art. 17(3)(e) for erasure requests). We keep a dossier for up to seven years after the request is finished.

Your FIFA licence. Every agent who offers a player adds his own FIFA licence number. We check it by hand in FIFA's public agent directory and keep the number, the outcome, a short note and who checked it, for as long as the account exists and in the dossier of any offer he made. The club sees the checked number of the person who offers. The basis is the contract with the agency and the legitimate interest of clubs in dealing only with licensed agents, as the FIFA Football Agent Regulations require (art. 4 FFAR; art. 6(1)(b) and (f) GDPR).

A disputed signing. When one side reports that a player signed and the other denies it, we do not decide. For up to 14 days we look once a day at the player's public Transfermarkt page, from our own computer, and record only whether it shows him at the club. That decides whether the deal counts. The basis is legitimate interests of both parties in a neutral, verifiable rule (art. 6(1)(f)); the check is kept in the dossier.

The fee. A club may set a fee for the agency whose player signs. Transferlink is not a party to it, does not handle the money and holds no payment details; we only record the steps the parties report.

Writing help. The note of a new request can be written by Anthropic or OpenAI from the club's own choices (position, type, ages, budget, foot, the club's name and league, and a hint if the club types one). No player data goes with it. “Fetch details” on an offer is the player lookup in section 6.

Question suggestions. When an agency wants to ask the club something, we show up to five suggested questions. We make them once per club request, from what the request leaves open and, through Anthropic or OpenAI, from the club's note. No player or account data goes with it. To improve the suggestions we count which suggestion was shown, chosen, edited and answered. We do not use the text of questions and answers for this, and no model is trained on it. The legal basis is legitimate interest: improving the platform (art. 6(1)(f)).

Translation. What clubs and agencies write to each other (messages, questions and answers, the note on a request, the motivation with an offer, a description) you read in your own reading language. Text already in that language goes nowhere. Otherwise Anthropic translates it, once per language; we keep a translation until half a year after it was last shown. The original stays and is what counts; a sealed dossier holds originals only. The legal basis is performance of the contract: you asked for contact with a party in another country (Art. 6(1)(b)).

If you are a player in an offer or a listing, write to hello@transferlink.io. We tell you which agency or club entered your details, and take them out of active view; what is in a sealed dossier stays there for the period above, visible only to the two parties.

A player can have his own account. He sees club requests in outline (position, age range, level and region of the club, closing month; never the club, budget or fee) and can tip his own agency about one. A player always works through an agency.

A player account is for players of 18 and over. Deleting your account removes your profile, the page reading, the record of the check, your invitations and your tips; the section on your rights says how.

The product is being built, so this page will change. The date at the top says when it last did. If a change materially affects people with accounts we will tell them by email rather than quietly editing the page.