Privacy is not a feature bolted onto the game.
Last updated · 18 August 2026
Footboard shows no ads, runs no behavioural analytics and never asks you to create an account in order to play. An account is an optional convenience. Whatever the game needs to run is used where it is needed, for as long as it is needed, and no longer.
What we do not collect
We do not collect your email address, phone number, location, contacts, photos, payment details, usage analytics or advertising identifier. Neither the app nor the web version contains a third-party advertising or analytics SDK. Even if you sign in with Apple, we do not ask for your email address.
What happens in an online room
While you play online, the nickname you choose and a random device identifier generated by the app are sent to the game server so you can join a room and return to the same seat after a dropped connection. Both live in the active room state in memory and are discarded when the room closes. Do not put personal information in your nickname — everyone at the table can see it.
The weekly leaderboard is the one exception. Points from finished online matches are stored for the weekly ranking. That record holds the SHA-256 digest of the device identifier rather than the identifier itself, plus the nickname you chose. The digest cannot be reversed, but it does link matches from the same device — so this is pseudonymisation, not anonymisation. Records are kept per week and are used for nothing but the ranking.
Optional account: transfer code
The entire game can be played without an account, and opening a screen never creates a record on the server. If you want your weekly ranking points to follow you when you change devices, you can ask for a transfer code. The record is created at that moment, because you asked for it.
The server then stores two things: the nickname you picked and a digest of the code — never the code itself. We ask for no email, phone number or password. The code works once, and asking for a new one invalidates the old. The record is used only so the leaderboard can recognise you, and it is shared with no one. On iOS, Sign in with Apple does the same job; in that case the server also stores the user identifier Apple issues for this app alone.
Deleting your account
In the app, Your account → Delete account (on iOS, Online → Player Profile → Delete Account) permanently erases your user record on the server together with every weekly leaderboard row belonging to it. The action cannot be undone and needs no approval from us — the moment the server confirms the deletion, the identity keys on the device are cleared too. If you played without an account, the same button removes the ranking rows tied to your device digest. Deleting the app removes the data on your device but not the ranking record on the server; use this button for that. If you can no longer reach the app, you can also request deletion at the address below.
What stays on your device
- The downloaded football data pack is stored on your device.
- The random device identifier lives in the Keychain on iOS, in secure storage on Android and in the browser's local storage on the web; it exists only to reconnect you to an online room.
- Your nickname and sound preference are stored in the same place.
- If you signed in with Apple, your Apple user identifier is kept in the Keychain as well; deleting your account deletes that key too.
Unless you join an online game, the app never connects to the game server. Deleting the app removes all of this data from your device.
Where the data comes from
The football statistics on the cards are derived from the dcaribou/transfermarkt-datasets open dataset (CC0-1.0). No player photographs or club crests are used.
Children
The game is suitable for all ages and does not knowingly collect data from children. Data that is never collected needs no age-specific handling.
Changes and contact
This text is updated whenever the game's behaviour changes; the date at the top marks the last change. Questions go to [email protected].