FIFA Seat Finder

Privacy Policy

Full transparency on what FIFA Seat Finder accesses, where it goes, and what stays on your device.

Last updatedApril 17, 2026
Section 01

Who we are

FIFA Seat Finder is an independent third-party Chrome extension that helps users compare resale ticket prices on the official FIFA ticket resale website (tickets.fifa.com) for FIFA World Cup 2026 matches.

We are not affiliated with, endorsed by, or officially connected to FIFA or any official FIFA ticketing partner. All trademarks are the property of their respective owners.

Section 02

How the extension works

When you visit a match page on the FIFA ticket resale website while logged in, the extension does two things:

  • It intercepts the network requests the FIFA website itself makes to load seat map data (via the fetch and XMLHttpRequest APIs). This happens passively on requests your browser would have made anyway.
  • Using the request headers and session cookies from your already-authenticated browsing session, the extension queries the FIFA seat map API for additional seat tiles covering the rest of the stadium. This is how it builds a complete picture of all available resale seats in seconds instead of requiring you to pan and zoom through the seat map manually.

The extension does not create new accounts, does not log in on your behalf, does not bypass FIFA's authentication, and only issues requests your own authenticated session is already authorised to make. It does not automate purchases, does not interact with checkout, and does not modify the FIFA website's pages.

Section 03

What data the extension accesses

  • Seat listing data from tickets.fifa.com match pages — seat block name, row, seat number, area, category name and ID, price amount, currency, colour, and an “exclusive” flag.
  • Match metadata — match name, match date, match number, performance ID, product ID, currency, and the match image URL shown on the FIFA page.
  • Session-scoped request headers from FIFA API calls (such as Secutix secret key, CSRF token, and host header) captured from your own authenticated browsing session and reused to complete the seat scan.
  • Local extension settings you choose to set — selected filters, dashboard preferences, and an optional Discord webhook URL if you provide one.
  • An anonymous device identifier generated on your device (deviceId), stored locally, used only to distinguish between independent installations for internal diagnostics.
Section 04

What data the extension does NOT collect

  • No names, email addresses, phone numbers, postal addresses, ID numbers, or other personally identifiable information.
  • No health information.
  • No financial or payment information (no credit card numbers, no transactions, no payment history).
  • No passwords, authentication credentials, or PINs. While the extension uses request headers captured from your authenticated session to query the FIFA API, those headers are session-scoped tokens used transiently in memory and are not stored, logged, or transmitted to our servers.
  • No personal communications (no emails, texts, or chat messages).
  • No location data (no GPS, no region detection, no IP-based geolocation).
  • No browsing history from websites outside tickets.fifa.com.
  • No user activity tracking (no clicks, scroll positions, keystrokes, or mouse movements).
Section 05

Data transferred off-device

The extension transfers the following data off your device over HTTPS:

  • Ticket alert messages to user-provided Discord webhooks — if you manually enter a Discord webhook URL in the extension popup, clicking “Send to Discord” on a specific deal sends that single alert (match, section, price, seat info) to your own webhook. The URL is stored only in your local browser storage and is never transmitted to our servers.

No data is sent directly from your browser to advertisers, analytics providers, or any other destination beyond those listed above.

Section 06

Data retention

Local extension settings stored in your browser remain until you uninstall the extension or clear its storage. Session request headers captured by the extension exist only in memory during a single browser session and are discarded when the tab or browser closes.

Section 07

Data sharing and selling

We do not sell, rent, or trade any data collected by the extension to third parties. We do not share data with advertisers, analytics providers, or marketing companies. The only third-party service provider involved is Discord, which delivers webhook messages you have chosen to send. It is bound by its own privacy and security terms.

Section 08

Third-party services

  • Discord — messaging platform. Used to deliver optional ticket alerts via user-provided webhook URLs. See discord.com/privacy.
Section 09

Tracking and analytics

FIFA Seat Finder does not use Google Analytics, advertising networks, or any behavioural tracking or profiling tools. We do not track users across websites or sessions. The anonymous deviceId mentioned in Section 3 is used only for internal diagnostics (such as distinguishing genuine user installs from testing installs) and is never linked to any personally identifiable information.

Section 10

Children's privacy

FIFA Seat Finder is not directed at children under 13 and does not knowingly collect any information from children.

Section 11

Permissions and why they are used

  • storage
    saves your local settings, your optional Discord webhook URL, the in-session cache of scanned seats, and the anonymous device identifier. All of this stays in your own browser profile.
  • activeTab and tabs
    allow the extension to identify the active FIFA ticketing tab and pass messages between the popup, content script, and background service worker.
  • Host permission*.tickets.fifa.com
    required because the content script runs on FIFA ticketing pages, intercepts the page's own fetch and XHR calls, and issues additional seat-map queries using the session cookies already present in your browser.
  • Host permissiondiscord.com/api
    required to deliver optional ticket alerts to user-provided Discord webhook URLs.
Section 12

Your rights

You can uninstall the extension at any time from your Chrome extensions page, which immediately stops all data collection and transmission and removes all locally stored settings.

Section 13

Security

All data transfers between the extension, FIFA's servers, and Discord happen over HTTPS. We apply reasonable safeguards to protect the data we handle, but no system can be guaranteed completely secure.

Section 14

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates the most recent revision. Significant changes will be communicated through the extension's Chrome Web Store listing description.