Pitch Heirs: privacy policy
Last updated: 1 November 2026
Pitch Heirs is a football career game published by Sam Levy, Paris (France), who can be reached at [email protected] and is the controller of your data. This policy covers both the app and the web version of the game.
In short
- You can play without an account: nothing then leaves your phone or your browser, unless you play the daily challenge (see below).
- With an account, we only keep your email address (which Apple lets you hide) and your games, so you can find them on another device.
- No ads, no analytics, no tracking, no cookies, and no data sold or shared for commercial purposes.
- You can delete your account from the game at any time: everything is erased from the server immediately.
Without an account
Your current game and your career history are stored only on your device. We receive nothing. In the app, uninstalling it erases them. On the web version, they are kept in your browser's storage for this site: clearing your browsing data erases them, and Safari may erase them on its own if you don't come back to the site for 7 days.
With an account
You can create an account with "Sign in with Apple" (on iPhone) or "Sign in with Google". We then receive:
| Data | Where it comes from | Why |
|---|---|---|
| Account identifier | Created when you sign in | Link your games to your account |
| Email address | Apple or Google. With Apple, you can give a relay address that hides yours | Identify your account with Apple or Google; contact you only about your account, if needed |
| Your current game | The game | Find it on another device |
| Your career history: first and last names given to your players, choices made during the game, results, dates | The game | Show "My careers" on all your devices, check that results come from the game |
| Technical logs (IP address, date, type of request) | Our hosting providers, automatically | Security and proper operation of the service; kept for a short time, as set by each hosting provider |
We never ask for your name, photo, contacts or location.
Legal basis: performance of the service you request by creating an account (Article 6(1)(b) GDPR), and our legitimate interest in securing the service for technical logs (Article 6(1)(f)).
Daily challenge
The daily challenge compares your game with those of the other players of the day. When you play it, we receive:
| Data | Why |
|---|---|
| A technical identifier: your account's, or, without an account, an anonymous identifier created by the game (no email or any other information) | Count one game per player per day |
| Your challenge game: gender, playing style and background chosen, choices made during the game, result | Check that the result is the game's own, and show where you stand among other players (as a percentage, with no named ranking) |
The name you give your player is not sent. Legal basis: performance of the service you request by starting the challenge (GDPR article 6.1.b). Challenge results are erased at the latest one year after the day played, and immediately if you delete your account. Without an account, the anonymous identifier stays on your phone or in your browser; to have your results erased sooner, write to us.
Web version: storage and cookies
The site sets no cookies. It only uses your browser's storage to keep your game and, if you are signed in, your session. This storage is strictly necessary for the game and is used for nothing else, so it does not require your consent.
If you write to us
If you send us feedback or a question by email or through the game's "Send feedback" screen, we keep your message and address (if you give it) to reply and to improve the game.
Feedback sent from the game comes with your current game (the names you gave your players, the choices you made, the card on screen), the type of device (iPhone, Android or browser), the game version and the language, so that we can see exactly what you saw. If you are signed in, the feedback is linked to your account. It is hosted by Supabase (see "Hosting") and read only by the game's publisher.
Legal basis: our legitimate interest in fixing and improving the game (Article 6(1)(f) GDPR). We delete these messages at the latest one year after we receive them or after our last exchange, and immediately if you delete your account.
Hosting
Account data is hosted by Supabase, in a data centre in the European Union (Paris). The website is hosted by Cloudflare, which receives visitors' IP addresses to deliver pages and protect the site. Supabase and Cloudflare act as processors under a data processing agreement. Both are US companies: any transfer of data outside the European Union is covered by the European Commission's standard contractual clauses.
Sign-in goes through Apple or Google, as you choose. Their own privacy policies apply to that step.
Retention
Your data is kept as long as your account exists. When you delete your account, your email address, current game, career history, daily challenge results and the feedback sent from that account are erased from the server immediately and permanently.
Signing out deletes nothing: your games stay on the device and on the server.
Your rights
You can at any time access, correct or erase your data, ask for a copy, or object to its processing:
- Erasure: "Delete my account" button on the game's Account screen.
- Other requests: write to [email protected]. We reply within one month.
You can also lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country.
Children
The game is rated 12+. An account is optional. If you are under 15, ask a parent before creating an account.
Changes
If this policy changes, we will update the date at the top of this page and, for any significant change, let you know in the game.