01
Data controller
The Data Controller responsible for personal data collected through the App is:
Hiroshi Andrea FusilloIndependent developer (individual, no company)Contact email: dev.hiroandrea@gmail.com
02
Data we collect
We only collect the data strictly necessary for the App to function. We do not use any analytics, advertising, or third-party profiling tools.
Provided directly by you
| Data | When | Purpose |
|---|---|---|
| Email address | Account registration | Account creation and authentication |
| Password | Account registration | Authentication — stored encrypted, never in plain text |
| Username | Profile setup | Identification within the game |
| Team name, abbreviation, crest, colors | Team creation/management | Gameplay features, visible to other users. The crest uses preset shapes and symbols; no image uploads |
| Reports and blocks | Reporting a team or blocking a manager | Moderation of team names; reports are never shown to the reported manager |
| Unit system | Settings | Stat display (metric/imperial) |
Via social login (optional)
If you sign in with Google or Apple (Sign in with Apple), we receive your email — and your name, if authorized — from the provider. We never receive or store your Google/Apple password.
Generated by using the app
Player rosters, match statistics, transfer market negotiations, finances, and team progress, saved to keep your game persistent across devices and sessions.
What we don't collect
No collection of: phone number, physical address, date of birth, GPS location, biometric data, address book contacts, browsing history, health data. No advertising, no third-party analytics/tracking SDKs, no in-app purchases, no access to your camera or photo library.
03
Legal basis and purposes (GDPR Art. 6)
| Purpose | Legal basis |
|---|---|
| Account creation and management, service delivery | Performance of a contract (Art. 6.1.b) |
| Authentication via Google/Apple | Performance of a contract, subject to provider consent |
| Security and abuse prevention | Legitimate interest (Art. 6.1.f) |
| Account-related communications | Performance of a contract |
We do not process data for direct marketing purposes or automated profiling.
04
How we use your data
- Create and manage your account and game session;
- Save and sync your progress (rosters, statistics, finances, market);
- Review reports about team names and hide blocked managers' teams from you;
- Display team name, abbreviation, crest, and colors to other users in multiplayer features (standings, transfer market);
- Generate, via an external AI service, graphical portraits of virtual players — a process that involves no personal user data, only game assets;
- Ensure the App's technical security and prevent fraudulent use.
06
Data retention
We retain your data for as long as your account exists. Upon a deletion request, identifying data (email, username) is deleted or anonymized within a reasonable time, subject to any longer legal retention obligations. Your team is not deleted, so other managers' schedules are not affected: it is handed over to the league as a computer-controlled team with a new generated name, abbreviation, crest and jersey, so none of the content you created remains visible.
07
Data security
- Encrypted data transmission (HTTPS/TLS);
- Authentication via a certified provider (Supabase Auth), passwords always stored hashed;
- Data access restricted through database-level Row Level Security.
No system is 100% secure: we cannot guarantee the absolute security of transmitted information.
08
Your rights
If you reside in the European Economic Area (or a territory with equivalent legislation), you have the right to:
To exercise these rights, write to dev.hiroandrea@gmail.com — response within 30 days. You have the right to lodge a complaint with your competent Data Protection Authority (in Italy: garanteprivacy.it).
09
California residents
If you are a California resident, you have rights similar to those in section 8 (access, deletion, portability, opt-out) under the CCPA/CPRA. We confirm that we do not sell or share personal data with third parties for advertising purposes.
10
Children
The App is not specifically directed at children and does not request demographic data such as date of birth. We do not knowingly collect data from children under 13 (or the applicable local minimum age) without parental/guardian consent. If you are a parent and believe your child provided us data without consent, contact us to request its deletion.
11
International transfers
Providers listed in section 5 may process data on servers outside your country of residence, including the United States, based on appropriate safeguards required by the GDPR (European Commission Standard Contractual Clauses).
12
Changes to this Privacy Policy
We reserve the right to periodically update this notice. In case of material changes, we will notify you via an in-app notification or email before they take effect. The date at the top of this document indicates the most recent version.
13
Contact
For any questions regarding this Privacy Policy or the processing of your personal data: