Privacy Policy — The Beautiful Game (TBG)
Last updated: 6 August 2026
This Privacy Policy explains what personal data The Beautiful Game (“TBG”, the “App”, “we”, “us”) collects, why, who we share it with, and the choices and rights you have. It applies to the TBG mobile app on iOS and Android.
Contact: durezzistudio@proton.me.
1. Summary
TBG is an asynchronous, friends-only football management game. To run it we need a small amount of account and gameplay data. We also show ads (which you can remove with a one-time purchase) and send optional match-day notifications. We do not sell your personal data. Where the law requires it (for example in the EEA, UK and certain US states), we ask for your consent before showing personalised ads or tracking you across apps.
2. What we collect and why
| Data | Why we collect it | Processed by |
|---|---|---|
| Email address | To create your account and sign you in | Supabase (auth) |
| Display name, optional avatar image | Your in-game identity, shown to friends in your leagues | Supabase |
| Gameplay data — leagues, club, squad, tactics, transfers, results and other in-game actions | To run the game and show it to the other managers in your private leagues | Supabase |
| Push notification token | To send match-day and deadline notifications (only if you allow notifications) | Google Firebase Cloud Messaging |
| Advertising identifier (Apple IDFA / Google Advertising ID) and ad-interaction data | To show and measure ads. Personalised only with your consent; otherwise non-personalised | Google AdMob |
| Coarse device and usage data used by the ad SDK — device model, OS version, IP-derived coarse location, ad events | Required by the ad network to serve and measure ads and prevent fraud | Google AdMob |
| Purchase data — store transaction id, receipt/token, product id and purchase status for “Remove Ads” | To verify your purchase server-side and remove ads for your account. We never receive your card or bank details — those are handled entirely by Apple / Google | Apple App Store / Google Play; our own server (Supabase) |
| Diagnostics and crash data — error reports, stack traces, device and OS information | To find and fix bugs and keep the App stable | Sentry |
| Consent choices — your GDPR consent and iOS App Tracking Transparency selections | To respect your privacy choices and prove we obtained consent | Stored on your device / by Google’s consent SDK |
We do not collect precise GPS location, contacts, photos (beyond an avatar you choose to upload), health data, or biometric data.
3. Advertising and your consent
We use Google AdMob to show interstitial ads between screens. Before the first ad, we show Google’s User Messaging Platform (UMP) consent form where required (for example in the EEA and UK), and on iOS we show Apple’s App Tracking Transparency prompt.
- If you consent, you may see personalised ads based on an advertising identifier.
- If you decline, you still see non-personalised ads, which is necessary to keep the game free.
- You can change your mind at any time — see “Your choices and controls” below.
Google acts as an independent controller for some advertising data. See How Google uses information from sites or apps that use its services and the Google Privacy Policy.
4. Who we share data with
We share data only with the service providers needed to run TBG, and only for the purposes above. They act as our processors (or, for advertising, as independent controllers):
- Supabase — app hosting, database and authentication. supabase.com/privacy
- Google — AdMob (ads), Firebase Cloud Messaging (notifications), Google Play Billing (Android purchases) and Google Play (distribution). policies.google.com/privacy
- Apple — App Store and StoreKit (iOS distribution and purchases). apple.com/legal/privacy
- Sentry (Functional Software, Inc.) — crash and error monitoring. sentry.io/privacy
We may also disclose data if required by law, to enforce our terms, or to protect the rights, safety and property of our users or us. We do not sell your personal data.
5. Legal bases (EEA / UK GDPR)
- Performance of a contract — creating your account, running the game, and processing the “Remove Ads” purchase.
- Consent — personalised advertising, cross-app tracking (iOS ATT), and push notifications. You may withdraw consent at any time.
- Legitimate interests — keeping the App secure, preventing fraud and abuse, fixing crashes, and serving non-personalised ads to keep the game free.
- Legal obligation — keeping purchase/tax records and responding to lawful requests.
6. International transfers
Our providers may process your data in the United States and other countries whose laws may differ from yours. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
7. Data retention
- Account and gameplay data — kept while your account exists; anonymised when you delete your account, subject to the exceptions below.
- Purchase records — kept as long as needed to honour your entitlement and to meet tax and accounting obligations (up to 7 years, as required under Dutch law).
- Crash/diagnostic data — kept for a limited period per Sentry’s retention settings (up to 90 days).
- Advertising data — retained by Google AdMob per its own policies.
8. Security
We use managed, industry-standard providers and access controls. Money and account entitlements are validated and stored server-side, not trusted from the device. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.
9. Children
TBG is not directed to children under 13 (or under 16 in the EEA where a higher age applies), and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
10. Your choices and controls
- Ad consent — withdraw or change your advertising consent through your device settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Google → Ads), and, where we provide it, through the in-app privacy options. You can also reset your advertising identifier in your device settings.
- Notifications — turn push notifications on or off in your device settings.
- Remove Ads — a one-time purchase removes interstitial ads for your account.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your data, to data portability, and to withdraw consent.
- EEA / UK: you may also lodge a complaint with your local data protection authority (in the UK, the ICO — ico.org.uk).
- California (CCPA/CPRA): you have the right to know, delete and correct your personal information and to opt out of “sharing” for cross-context behavioural advertising. We do not sell personal information; you can opt out of personalised-ad “sharing” using the consent and device controls in section 10.
To exercise any of these rights, or to delete your account and associated data, email us at durezzistudio@proton.me. We will respond within the timeframe required by law.
12. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, provide a more prominent notice in the App.
13. Contact
Questions about this policy or your data: Matteo Duroy — durezzistudio@proton.me.