Privacy Notice

Who we are

Any Given Sunday is made by El Cap Studios in Ireland. "We" in this notice means El Cap Studios, the controller of the personal data it describes under the EU General Data Protection Regulation (GDPR). You can write to us at privacy@anygivensundaygame.com.

This notice covers the free web demo at anygivensundaygame.com, the desktop game for Windows, macOS and Linux, the game for Android phones and tablets, and the game for iPhone and iPad. It also covers buying the full game in the shop on the site.

What stays on your device

In your browser, the game keeps your saved games, auto-saves, settings and your own databases in the browser's storage for this site (IndexedDB), on this device only. Clearing the site's data in your browser deletes them, so use Export Save to keep a copy as a file.

The shop's pages use the game's display settings from that storage, and a change you make there changes them for the game too. They keep nothing else on your device.

The desktop game keeps them as files in its save folder on your computer. Open Saves Folder on the save screens shows where.

The Android app keeps them as files in its own storage on your phone or tablet, which other apps cannot read. Uninstalling the app deletes them, so use Export Save to keep a copy.

The iPhone and iPad app keeps them as files in its own storage on your device, which other apps cannot read. Deleting the app deletes them, so use Export Save to keep a copy.

A new career asks for your coach's details: a first and last name, a date of birth, a nationality and a favorite club. They need not be your own. They stay in your save.

The game sets no cookies, shows no ads and uses no analytics or tracking. It has no accounts and no online play.

Loading the web demo

The demo is a website hosted by Cloudflare, Inc. (Cloudflare Pages). As with any website, your browser's requests reach Cloudflare's servers with your IP address, your browser's user agent (a line that names your browser, its version and your system) and the address of the page or file asked for. Cloudflare uses them to deliver the site and to protect it from attacks, as its privacy policy says (https://www.cloudflare.com/privacypolicy/). Cloudflare shows us totals, such as the number of requests, and the details of requests its security features stop.

Cloudflare also asks browsers that support it to report failed connections to the site (Network Error Logging). Such a report goes to Cloudflare, not to us.

The game's pictures and fonts come from the site itself. No other company's code runs on the site, apart from Turnstile in Report a Bug (below).

Report a Bug

Report a Bug, on the demo's title screen and at the end of the demo, sends a report only when you press Send Report. A report holds:

• your note, up to 2,000 characters;
• the game's version and edition;
• your browser's user agent;
• your saved game, only if you check the box. A save holds your coach's details as you entered them, and your whole career.

Please do not put personal details, such as your email address, in the note.

When Report a Bug opens, it asks our report service whether it takes reports, and loads Cloudflare Turnstile, a check that a person and not a program sends the report. Turnstile looks at signals such as your IP address, your browser and its connection. Cloudflare processes them for us to tell people from bots, and for itself to improve that check, as its Turnstile privacy addendum says (https://www.cloudflare.com/turnstile-privacy-policy/).

The report goes to our report service, which runs on Cloudflare. The service:

• checks the report's size and fields, and that it came from the game's own page;
• counts the reports sent from your IP address in the hour, to stop floods (5 an hour at most). The count is kept under a keyed hash (HMAC-SHA-256) of your IP address and the hour, so your address itself is never stored, and it is deleted after an hour;
• sends the Turnstile answer and your IP address to Cloudflare to check them;
• stores the report in Cloudflare Workers KV, which deletes it by itself after 90 days. With it we keep the time it came, the version and edition, its size, whether it holds a save and the first 200 characters of your note, so we can find it;
• if we have turned it on, posts a short summary to a private channel of ours on Discord (Discord Inc.): the report's number, the version and edition, whether it holds a save, its size, your browser's user agent (up to 160 characters) and the start of your note (up to 600 characters). Your save and your IP address are never posted.

We read reports to find and fix bugs. We may copy a report to our own computer while we work on it. We delete those copies, and the Discord summaries, once the bug is dealt with and at the latest 90 days after the report came.

If the report cannot be sent, and always in the desktop game, Report a Bug saves the report as a file on your device instead and sends nothing. If you send us that file yourself, we handle it as a report sent through the service.

Buying the game

The shop on the site sells the full game. Its Buy page sends nothing about you until you press Go To Checkout. Then it asks our shop service, which runs on Cloudflare, to start a checkout, and sends it your consent to have the game at once and the page's address. To stop floods, the service counts in its memory the checkouts started from your IP address, and the times your downloads page asks Stripe about your payment, each for an hour, and it never stores the address.

You pay on Stripe's checkout page. Link (Sold through Link, LLC), a company of Stripe, Inc., takes your payment as the merchant of record. It collects your email address, your name, your billing address and your payment details, works out any sales tax or VAT, keeps the records of the payment that the law asks for, and emails your receipt. Stripe handles that data under its privacy policy (https://stripe.com/privacy), which covers Link too. Its checkout page sets cookies of its own, as Stripe's cookie policy says (https://stripe.com/cookies-policy/legal).

Stripe tells us about your order: your name, email address and billing address, what you bought, the price, the tax and the kind of payment, but never your card's number. Later it tells us of any refund or dispute. We see these in our Stripe account and use them to deliver the game, to answer you and to keep the records of the sale that the law asks of us.

After payment, our shop service sends your email address, order number, price, private downloads address, express consent and acknowledgement, and a copy of the sale terms and refund policy to Cloudflare Email Service. Cloudflare, Inc. sends the purchase confirmation email from orders@anygivensundaygame.com. This is a contract email, not marketing. Link's receipt is a separate email.

Our shop service keeps a record of your order in Cloudflare Workers KV, so that you can download the game again:

• a code made from your order's private key (a hash: the key itself is not kept there);
• Stripe's numbers for your checkout and your payment;
• when you started the checkout, the amount and its currency, and whether it was a test order;
• when you agreed to have the game at once, with the version of the words you agreed to and of the Terms of Sale;
• how many downloads your order started each day, kept for two days, and when you started the first one, so we can check delivery;
• a full refund, a lost dispute or a failed payment, as Stripe reports it.
• whether you accepted the terms at Stripe Checkout, and the confirmation email's version, time sent, service message number and content hash (a code to check its text);

The order record keeps no name, email address or card details. The email address is used to send the confirmation and is not saved in Workers KV. Cloudflare processes the email content and its delivery records under its data processing terms (https://www.cloudflare.com/cloudflare-customer-dpa/). Email Sending analytics are available for 31 days.

Your order's private key is part of your downloads page's address, and Stripe keeps that address with your payment, with your request to have the game at once, so we can send it to you again if you lose it. Anyone with the address can download your copy, up to 10 downloads a day, so keep it to yourself.

Stripe sends our shop service a message when a payment comes in, fails, is refunded or is disputed. Stripe signs each message, and the service ignores any message whose signature it cannot check.

The desktop game and the stores

The desktop game sends nothing to us. Its saves and settings stay in its save folder (above).

If you play it through Steam, Valve Corporation sells it to you, installs it and starts it. Valve's privacy policy covers what Steam knows about you, such as your account, your purchases and your play time (https://store.steampowered.com/privacy_agreement/).

If Steam Cloud is on for the game, Steam copies your saved games, auto-saves and databases to Valve's servers under your Steam account, so they follow you to your other computers. Your settings stay on each computer. We do not get these copies. You can turn Steam Cloud off in the game's properties in Steam.

If you buy the game on itch.io, itch corp sells it to you and delivers it. Its privacy policy covers your account and your purchase (https://itch.io/docs/legal/privacy-policy).

If you buy it in the Microsoft Store, Microsoft sells it to you, installs it and keeps it up to date. Microsoft's privacy statement covers your account and your purchase (https://privacy.microsoft.com/privacystatement). The Store's copy keeps its saves in its own folder, which Windows deletes when you uninstall the game.

On Windows the game draws its screens with Microsoft Edge WebView2, a part of Windows. The game turns off WebView2's SmartScreen check. WebView2 may send Microsoft diagnostic data about itself, under your Windows diagnostic data settings and Microsoft's privacy statement. On macOS and Linux the game uses the system's own web view. The game's own Windows installer, outside Steam, downloads WebView2 from Microsoft if your computer does not have it.

On Windows, if WebView2 is missing, the game says so and offers to open Microsoft's download of it in your browser.

The Android app and Google Play

The Android app sends nothing to us. It does not ask for permission to use the internet, so it cannot reach it. Its saves and settings stay in its own storage (above).

Google Play installs the app and keeps it up to date. Google's privacy policy covers what Google Play knows about you, such as your Google Account and the apps you install (https://policies.google.com/privacy).

If backup is on for your device, Android copies the app's saved games, auto-saves, databases and settings to your Google Account, and puts them back when you install the game again or move to a new device. Google keeps these copies for you under your account. We do not get them. You can turn backup off in your device's settings.

Export Save and Import Save use Android's own file picker, so a file goes only where you choose. If you choose a cloud drive, that service's terms and privacy policy apply.

The app draws its screens with Android System WebView, a part of Android. The app turns off the web view's usage and diagnostic reports and its Safe Browsing checks. Android itself may send Google diagnostic data, under your device's settings and Google's privacy policy.

The iPhone and iPad app and the App Store

The iPhone and iPad app sends nothing to us. It loads only the game's own files, which come inside the app, and makes no connection to the internet. Its saves and settings stay in its own storage (above).

Apple sells the app to you on the App Store, installs it and keeps it up to date. Apple's privacy policy covers what the App Store knows about you, such as your Apple Account and your purchases (https://www.apple.com/legal/privacy/).

If iCloud Backup is on for your device, iOS copies the app's data, with your saved games, auto-saves, databases and settings, to your iCloud account, and puts it back when you restore your device or move to a new one. A backup of your device on a computer holds it too. Apple keeps the iCloud copies for you under your Apple Account. We do not get them. You can leave the app out of iCloud Backup in your device's settings.

Export Save and Import Save use the system's own file picker, so a file goes only where you choose. If you choose iCloud Drive or another cloud service, its terms and privacy policy apply. The app also has a folder of its own in the Files app, where you can keep exported files on your device.

The app draws its screens with WebKit, a part of iOS, and shows only the game's own files in it. iOS itself may send Apple diagnostic data, under your device's settings and Apple's privacy policy.

If you agree in your device's settings to share analytics with app developers, Apple may give us crash reports and statistics about the app, which do not tell us who you are.

If you test the game through TestFlight, Apple's app for testing, Apple gives us the feedback you choose to send (your comments, a screenshot and details of your device) and crash reports, with the name or email address you joined the test with. We use them only to find and fix bugs, as bug reports.

If you write to us

If you write to us, by email or with a report file, we use your address and your message to answer you and to deal with what you ask. We keep them while we deal with it and for a year after, then delete them; a report file you send is kept 90 days at most (above).

Why we may use it

We use bug reports, and the count and the check that guard the report service, because we have a legitimate interest in finding and fixing the game's bugs and in keeping the service free of abuse (Article 6(1)(f) GDPR). The same interest covers the crash reports and the TestFlight feedback Apple passes on to us. We use your messages to answer them, which is our legitimate interest too, or a step you ask us to take. Sending a report is your choice, and so is sending your save with it. You can object at any time (see Your rights).

If you buy the game, we use your order's details to sell it to you and deliver it, which is our contract with you (Article 6(1)(b) GDPR), and keep the records of the sale that tax law asks of us (Article 6(1)(c)). The shop's limits on checkouts and downloads guard it against abuse, which is our legitimate interest (Article 6(1)(f)).

How long we keep it

• Reports in Workers KV: 90 days, then they are deleted by themselves.
• The hourly count: one hour.
• Discord summaries and our working copies: until the bug is dealt with, and 90 days at most.
• Report files you send us yourself: 90 days at most.
• Messages you send us: while we deal with them and a year after.
• Your order record in Workers KV: as long as we offer the game's downloads, so that you can download it again. If you ask us to delete it, your downloads end.
• Your order's daily download counts: two days. A failed payment's record: 30 days. The counts of checkouts and of payment lookups from your IP address: an hour, in memory only, cleared by the service's next call after that.
• Your order's details in our Stripe account: six years after the end of the year of the sale, as Irish tax law asks of a seller. Stripe keeps its own records as its privacy policy says.
• Cloudflare's own records of requests to the site: as Cloudflare's privacy policy says.
• Your saves on your device: until you delete them. Steam Cloud's copies: until you or Steam delete them.
• Android's backup copies: as long as Google's backup keeps them for your Google Account.
• iCloud Backup's copies: as long as iCloud keeps them for your Apple Account.
• TestFlight feedback and crash reports from Apple: as long as App Store Connect, Apple's service for developers, keeps them; our own copies until the bug is dealt with, and 90 days at most.

Who else handles it

• Cloudflare, Inc. (United States) hosts the site and runs the report service, the shop service, their storage, the purchase confirmation emails through Cloudflare Email Service, and Turnstile. It processes the data for us under its data processing addendum, apart from what its privacy policy says it decides for itself, such as keeping its network safe and improving Turnstile.
• Stripe, Inc. (United States) and its companies, among them Stripe Payments Europe, Limited (Ireland) and Sold through Link, LLC (United States), run the checkout and take your payment as the merchant of record, under Stripe's privacy policy.
• Discord Inc. (United States) keeps the summaries, if we have them posted there.
• Valve Corporation (United States) runs Steam and Steam Cloud, under its own privacy policy.
• Google (Google Ireland Limited in the European Economic Area and Switzerland, Google LLC elsewhere) runs Google Play, Android's backup and Android System WebView, under its own privacy policy.
• Apple (Apple Distribution International Limited in the European Economic Area, the United Kingdom and Switzerland, Apple Inc. elsewhere) runs the App Store, TestFlight, iCloud and iOS, under its own privacy policy.

We do not sell your data or give it to anyone else, unless the law makes us.

Transfers outside Europe

Cloudflare, Discord, Valve and Google LLC are based in the United States, and the data may be handled there. Each of them takes part in the EU-U.S. Data Privacy Framework, which the European Commission has found gives adequate protection. Cloudflare also relies on the Commission's standard contractual clauses should that framework lapse.

Apple stores data mostly with Apple Inc. in the United States, and its transfers of the data of people in Europe are governed by the Commission's standard contractual clauses, as its privacy policy says.

Stripe, Inc. and Sold through Link, LLC are in the United States too. Stripe takes part in the EU-U.S. Data Privacy Framework, and also relies on the Commission's standard contractual clauses.

Your rights

Under the GDPR you can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, or to give it to you in a form a computer can read, and you can object to our use of it. Write to us at privacy@anygivensundaygame.com. There are no accounts, so tell us roughly when you sent the report and what your note said, and we will find it. We answer within one month.

For an order, tell us the email address you paid with. Your rights over what Stripe and Link keep of your payment are with Stripe, as its privacy policy says.

You can also complain to the Data Protection Commission in Ireland (https://www.dataprotection.ie) or to the data protection authority where you live.

Children

The game is not made for children under 13. If you are under 16, please ask a parent or guardian before you send a report. If you are under 18, please ask a parent or guardian before you buy the game.

Changes

If we change this notice, we change the date at its top, and when a change matters we say so in the game or on the site.