Privacy Policy

This Privacy Policy explains how Tactical Soccer ("we", "us", "our") collects, uses, shares and protects your personal data when you use Tactical Soccer (the "Service"), a free online football-manager game. By creating an account or using the Service, you acknowledge that you have read and understood this policy.

The data controller responsible for your personal data is Tactical Soccer. For any privacy question or to exercise your rights, contact us at info@tactical.soccer.

1. Data we collect

We only collect what we need to run the game and, if you shop in the store, to take payment:

• Account data — your email address, username, display name, hashed password and language preference.
• Profile data — your profile photo and gender if you choose to add them, when you joined and when you were last active.
• Gameplay data — the clubs, teams, leagues, tactics, match history, standings and VIP status tied to your account.
• Content you upload — your own club crests, kits and league banners.
• Payment data — when you buy a VIP contract or a boost in the store, your card payment is handled by Stripe through WooPayments. We receive your billing name, billing address, order details and limited card metadata (such as the card type and last four digits). We never see or store your full card number.
• Technical data — IP address, browser and device type, and server log data, used for security and to keep the Service running.
• Messages and friends — the messages you send to other managers, friend requests and your friends list, and the content of messages you send us for support.

2. Information visible to other players

Tactical Soccer is a multiplayer game. When you take part in public leagues — or in private leagues you have been invited to — your username, display name, club and team names, match-day line-ups, results and league standings are visible to the other managers in those leagues. Please do not use personal information (such as your real full name) in the names you choose if you do not want it shown to other players.

Every logged-in member can also see your manager profile in the member directory: your display name, profile photo, gender (if you have set one), VIP status, when you joined, when you were last active, your clubs, trophies and number of friends. A message you send is visible to the manager you send it to.

3. Cookies

We use strictly necessary cookies to keep you logged in, remember your language and operate the cart and checkout. These are required for the Service to work.

We do not use analytics, advertising or tracking cookies, and we do not share your browsing with any third party.

4. How we use your data and our legal bases

Under the GDPR we rely on the following legal bases:

• To create your account and provide the game (performance of our contract with you).
• To process store purchases and keep records of them (performance of a contract and compliance with accounting/tax law).
• To send you service and account emails, such as password resets and order confirmations (performance of a contract).
• To send you optional news or offers about the game, only where you have opted in — you can unsubscribe at any time (consent).
• To keep the Service secure and prevent fraud and abuse, for example by temporarily blocking repeated failed log-in attempts (our legitimate interest).
• To comply with legal obligations (legal obligation).

We do not use your personal data for automated decision-making that produces legal or similarly significant effects. The AI-controlled teams in the game are part of gameplay and do not profile you.

5. Payments

Store payments are processed by Stripe via WooPayments, a service from Automattic. Card details are entered directly with Stripe, a PCI-DSS Level 1 certified payment provider, and are not stored on our servers. Stripe processes your payment data as an independent controller; see Stripe's Privacy Policy for details.

6. Who we share data with

We do not sell your personal data. We share it only with service providers who help us run the Service, and only as far as needed:

• Stripe and Automattic (WooPayments) — payment processing.
• Our hosting and email providers — to store data and send service emails.

We may also disclose data where required by law, to enforce our Terms, or to protect the rights, safety and security of our users or the Service.

7. International transfers

Some of our providers (such as Stripe and Automattic) may process data outside your country, including outside the EEA. Where this happens, the transfer is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

8. How long we keep data

We keep your account and gameplay data for as long as your account is active. If you close your account, we delete or anonymise your personal data, except where we must keep certain records (for example, payment and invoice records retained to meet accounting and tax obligations).

Failed log-in attempts (the IP address and a one-way hash of the username typed) are kept for at most 24 hours, to protect accounts against break-ins.

If you own a league that other managers play in when you close your account, the league is first handed over to another manager during a grace period of 7 days; your account is deleted after that.

9. Your rights

Depending on your location, you have the right to access, correct, delete or export your personal data, to restrict or object to certain processing, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

You can close your account at any time from your account settings or by contacting us at info@tactical.soccer; we will then delete or anonymise your personal data as described in section 8, apart from records we are legally required to keep. We will respond to any request within the time limits required by applicable law.

10. Children

The Service is not directed at children. You must be at least 16 years old (or the minimum age of digital consent in your country, if higher) to create an account. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections and hashed passwords. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date above shows when it last changed, and we will notify you of material changes where required by law. Continued use of the Service after an update means you accept the revised policy.

13. Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact Tactical Soccer at info@tactical.soccer.