Privacy Policy.

1. Who operates TOUCHLINE?

TOUCHLINE is an independently operated online football-card collecting game. The TOUCHLINE website operator is responsible for decisions about your game account and the personal information used to run the game. For privacy and data-rights enquiries, use the contact details below.

2. Information we collect

• Account details: email address, an account identifier and authentication/session information when you register or sign in. Our authentication provider, Supabase, handles sign-in credentials; if you choose Google sign-in, Google may share your basic account identifier and email with our authentication service.
• Game records: virtual credits, collected card identities and values, pack-opening history and decisions, free rewards and Matchday activity needed to operate and protect the game.
• Technical records: IP address, device/browser and request or error information that may be processed by our hosting, security and authentication providers to deliver the website and prevent abuse.
• Messages: information you voluntarily share if you contact us about your account or privacy rights.

Virtual credits and cards have no cash-out value. We do not require bank-card payment details to play the current free-credit game.

3. How and why we use data

We use account and game information to provide login, save progress, calculate and enforce pack results and credits, keep the service working and prevent fraudulent or abusive use. Where relevant, we rely on performing the service you request (including account services), legitimate interests in security and preventing misuse, and compliance with legal obligations. If we introduce optional analytics or personalised advertising, those activities will have a separate privacy assessment and, where required, consent before activation.

4. Who processes information?

Optional Google sign-in is provided through Google OAuth if you select it. TOUCHLINE uses Supabase for user authentication and secure game data, and Vercel to host and deliver the website. These providers may process technical information in order to operate their services. We may also share information when required by law or needed to protect the service or users. We do not sell player account data to advertisers.

Some providers may process data outside the UK; where relevant, international transfer safeguards and provider terms apply.

5. Advertising

TOUCHLINE has been submitted for Google advertising review, but no AdSense or rewarded-ad serving script is currently running on this website. A Google AdSense account ownership meta tag may appear in the page source; it does not itself display ads.

We are considering optional rewarded advertisements for in-game credits. These are not active. Before starting advertising, this notice will be updated to explain any new vendors, purposes, cookies, device data and choices. Where required, we will use a Google-certified consent-management platform for UK/EEA advertising.

If Google ads are enabled in future, Google and other ad partners may use cookies and other identifiers to serve and measure ads, potentially based on visits to TOUCHLINE and other sites. You can learn about Google's use of data in its partner-site information and manage personalisation at My Ad Centre. This describes a possible future use, not currently active tracking.

6. Cookies and browser storage

The website uses essential browser storage, including authentication sessions to keep signed-in users logged in, and a small local preference to remember that you have seen the privacy notice. Advertising and optional analytics trackers are not presently enabled. See the Cookie Policy for a breakdown.

7. How long we keep information

We generally retain game account information while an account remains active, and for a reasonable period afterwards when necessary for security, resolving abuse, operational backups or legal obligations. Hosting and authentication logs may follow service-provider retention schedules. We review deletion requests and do not keep data longer than reasonably needed for the purposes described.

We use authentication and server-side permissions to protect game records, but no online service can guarantee absolute security.

8. Your privacy rights

Depending on UK data protection law, you may request access to your personal data, correction, deletion, restriction or transfer of data, or object to certain processing. You may also withdraw consent where a process relies on it. Some rights have legal exceptions. Contact us with your request; we may need to verify that you own the account before discussing or changing personal information.

If you are unhappy with our handling of your information, you can contact the UK Information Commissioner's Office.

9. Privacy contact and updates

For account privacy, access, correction or deletion requests, contact privacy@touchline.click. Please do not send passwords or full payment details.

We will update this policy when the service or its data use changes, including before launching actual advertising technology. Material changes will be communicated appropriately.