Privacy Policy

Overview

Simon Varli ("we", "us", or "our") operates Legacy of Football ("the App"), a football card trading and management game. This Privacy Policy explains what data we collect when you use the App, why we collect it, how it is used and shared, and the rights you have over your data.

By creating an account or using the App, you agree to the collection and use of your information as described here. If you do not agree, you should not create an account or use the online features.

1. What data we collect

We collect and process the following categories of data:

• Account & authentication data — the email address and credentials you use to sign in, your user identifier, and authentication session information.
• Club profile data — your manager username, club name, club identity (colors and crest), division, and aggregate stats you choose to make public (see Section 4).
• Game progress & saves — your squad, owned player cards, coins, contracts, training levels, stadium and facilities, season and league state, market activity, and other game state required to resume your progress.
• Direct message & chat content — the content of private messages you send to other managers, along with the associated metadata (sender, recipient, timestamps).
• Technical & operational data — device type, browser, operating system, approximate region, usage logs, and identifiers needed to operate the App, keep sessions secure, and detect abuse.

2. Why we use your data

We process your data for the following purposes:

• Cloud saving — to store and restore your game progress so you can continue across devices and sessions.
• Social features — to display public club profiles, leaderboards, follow relationships, and an activity feed.
• Matchmaking & leaderboards — to place your club in a division and rank it against other managers.
• Safety & moderation — to operate blocking and reporting tools, review reported content, prevent harassment, and enforce the rules of use.
• Support — to respond to your requests for help and resolve issues with your account or data.
• Product improvement — to understand how the App is used, identify bugs, and improve features and balance.

3. Legal basis (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

• Performance of a contract — providing your account, cloud saves, and the gameplay experience you signed up for.
• Legitimate interests — operating leaderboards, preventing fraud and abuse, and improving the App, where those interests are not overridden by your rights.
• Consent — for specific features such as analytics where we ask for your opt-in. You can withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal obligation — where we are required to retain data, for example for abuse or safety records.

4. What is public vs. private

Legacy of Football includes social features. The following parts of your club profile are public and visible to other managers:

• Manager username and club name.
• Club identity (colors and crest).
• Current division and league rank.
• Aggregate public stats (matches played, wins, packs opened, trophies).
• Featured or key players you choose to display.
• Public activity-feed events such as promotions or titles.

The following data is private and not shown to other managers:

• Your email address.
• Detailed game save contents (coins, individual card states, training, contracts).
• Direct message conversations (see Section 5).
• Technical and operational data.

5. Chat, blocking & reporting

You can send private direct messages to other managers. Messages are stored and visible only to you and the recipient, plus our moderation team where needed for safety.

• Blocking — you can block any manager. Once blocked, neither of you can send messages to the other, and the block prevents new conversations between you.
• Reporting — you can report a manager or a specific message. Reported content and the associated message content may be reviewed by our moderation team for safety and policy enforcement purposes.
• Retention of reports — reported messages may be retained after deletion for as long as needed to investigate, act on, and keep a record of the report.

We do not use your private messages for advertising. Moderation access is limited to what is necessary to keep the community safe.

6. Data sharing

We do not sell your data. We share data only with:

• Service providers that host our backend, authentication, and database under contract and under appropriate safeguards.
• Authorities where we are legally required to do so.
• Other managers, but only the public profile elements listed in Section 4.

7. Data retention

We keep your game progress and account data for as long as your account is active. If you delete your account, we remove your game saves, club profile, and personal data within a reasonable period, except where we are legally required to retain certain records (for example, safety or abuse-related reports). Public feed events you generated may remain visible in aggregated or anonymized form.

8. Your rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion / account removal — request that we delete your account and associated personal data, subject to legal retention obligations.
• Data portability — receive your data in a structured, commonly used, machine-readable format.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Withdrawal of consent — withdraw consent for processing that relied on it, without affecting prior processing.

You can exercise access, portability and deletion yourself at any time from Profile → Account & data, where "Download my data" produces a JSON export and "Delete account" permanently removes your account and associated data. For anything else, contact us at varli_s@hotmail.com. We will respond within the period required by applicable law. You have the right to lodge a complaint with your local data protection authority.

9. Security

We use reasonable technical and organizational measures to protect your data, including access controls and encryption in transit. No method of storage or transmission is fully secure, so we cannot guarantee absolute security.

10. Children

The App is not directed to children under the applicable minimum age in your region. We do not knowingly collect data from anyone below that age. If you believe we have collected data from a minor, contact us at varli_s@hotmail.com and we will remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, notify you within the App or by other means. Your continued use of the App after a change indicates acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or your data, contact us:

• Email: varli_s@hotmail.com
• Operator: Simon Varli
• In-app: Profile → Support & contact