Who is responsible
The site is operated by Tactical Soccer (tactical-soccer.games). For any question about your data, write to [email protected].
Quick summary
- You can play without creating any account: in that case your progress stays only on your device.
- We do not sell your data or build advertising profiles.
- The site does not use its own cookies or tracking cookies.
- If you sign in with Google and/or turn on the cloud, we store your progress and your public profile on our servers so you can use the ranking, friends and tournaments.
- We measure visits with tools that use no cookies and do not identify you (see “Usage measurement”).
What data we handle and why
1. Your progress on your device. Your squad, in-game money, achievements, language and preferences are stored in your browser’s local storage (localStorage). That information does not leave your device unless you turn on the cloud.
2. Approximate country. The first time you open the game we ask Cloudflare, the provider that serves the site, which country your connection comes from, so it can be preselected in your profile. We only read the country code (for example “AR”): we do not store your IP address. You can change it at any time in Profile.
3. Sign in with Google, Discord or with an email code (optional). If you choose “Continue with Google”, Google confirms your identity and we receive your name, email address and profile picture. We never receive your Google password. If you choose “Continue with Discord”, Discord confirms your identity and we receive your username, email address and avatar; we never receive your Discord password. If you choose “Continue with email”, we send a 6-digit code to the address you type and we only store that address (there is no password). In both cases we use this data to show you on your profile, link your account to your progress and let you sign back in. If you use the same address with both methods, you get the same account.
3b. Guest without an account and anti-bot check. If you play without signing in, the game may quietly create an anonymous guest account (no email, no name and no password) when you finish a minigame you interacted with or open Ranking, Friends or Tournaments. It lets us count how many real people use the game and lets you sign up later; your progress is still stored only on your device. To stop bots, creating it goes through an automatic, invisible Cloudflare Turnstile check, which looks at technical browser data and never asks you to solve anything. Guest accounts with no activity for 180 days are deleted automatically.
4. Cloud saving and online features (optional). If you turn on “Cloud” and are signed in, we store in our database: your club’s progress, the team name and username you chose, your country, crest and jerseys, your squad, your league, minigame scores, your training-round history (used to calibrate the game’s difficulty), your friendships, tournaments and international friendly matches.
5. What other people can see. The World Ranking and public profiles show your team name, username, country, crest, jerseys and scores. To make friendly matches possible, other signed-in accounts can see your full squad. Your email address and Google account are never shown to other people. Please choose a username that does not reveal personal information.
6. Usage measurement. To know how many people visit the site and which parts are used, we use Cloudflare Web Analytics (no cookies, no storing of your IP, no cross-site tracking) and a few anonymous events of our own (for example “the game was opened”, “a minigame was played”, “a video was watched”), stored without your name, email or any identifier. Details and how to turn it off are on the Cookies & advertising page.
7. Technical operating data. Like any website, our providers (Cloudflare and Supabase) process your IP address and browser data in technical logs in order to deliver the site, prevent abuse and keep it secure.
Third-party services involved
- Cloudflare — hosting, content delivery network, cookie-free visit statistics and the invisible anti-bot check (Turnstile). Privacy policy.
- Supabase — database and account authentication (the cloud data). Privacy policy.
- Google — “Continue with Google” (Google Identity Services) and Google Fonts typefaces on some pages, which means your browser connects to Google servers to load them. Privacy policy.
- Resend — sends the sign-in code by email (it receives your email address only to deliver it). Privacy policy.
- Discord — “Continue with Discord” (sign-in). Privacy policy.
Today the site includes no third-party advertising networks. If that changes, we will say so on the Cookies & advertising page before turning it on.
Why we may use your data
We use your data to provide the service you asked for (saving your progress, showing the ranking, letting you play with friends), for our legitimate interest in keeping the site secure and improving it with anonymous statistics, and with your consent when you choose to sign in or turn on the cloud. You can withdraw that consent at any time: stop using the cloud, sign out, or ask us to delete your account.
How long we keep it
- Account data and cloud progress: until you ask us to delete it or the account has been inactive for a long time.
- Anonymous guest accounts: deleted after 180 days without activity.
- Anonymous usage events: up to 24 months.
- Providers’ technical logs: according to their own policies, usually for short periods.
- Progress on your device: you control it; it is erased when you clear the site’s data in your browser.
Your rights
You can ask us to access, correct, export or delete your data, and object to our processing of it. Write to [email protected] from your account’s email and we will reply as soon as possible. To erase everything stored on your device, simply clear the site’s data in your browser settings.
Depending on where you live you may have additional rights under your local law (for example the GDPR in the European Union, the UK GDPR, or Brazil’s LGPD), including the right to complain to your local data protection authority. If you are in Argentina, the Agency for Access to Public Information is the control body for Law 25.326 and handles complaints about non-compliance with personal data protection rules.
Children
The site is suitable for all audiences, but we do not knowingly collect data from children under 13 without an adult’s authorization, and signing in with Google is subject to Google’s minimum ages. If you are a parent or guardian and believe your child gave us data, write to us and we will delete it.
Security
Connections to the site and to the database are encrypted (HTTPS) and each account can only write to its own data. No system is perfectly secure, but we apply reasonable measures and keep the minimum data necessary.
Changes to this policy
If we make important changes we update the date above and, where appropriate, notify you in the game. The current version is always on this page.