Privacy Policy
Last updated: September 6, 2026
FootBored is a card-based digital football game at game.footbored.com and in its app-store editions. This page describes everything we store and why. The short version: we keep the minimum needed to sync your games, and nothing else.
Data on your device
Saves, replays, seasons, and lifetime stats are cached in your browser's (or app's) local storage so the game works offline. Playing as a guest (the web's "skip for now" option) stores nothing on our servers — your data lives only on that device until you sign in. Your account keeps the synced copy; deleting the account leaves the local copy untouched.
Your account
If you sign in (required in the app-store editions), we store:
- Email address — your sign-in identity and the address password-reset links go to.
- Password — stored only as a salted hash (PBKDF2-SHA256, 100,000 iterations). We cannot read your password.
- Google sign-in (optional) — we store the Google account identifier and email Google provides; we never see your Google password.
- Display name — the name you chose, shown to opponents in online games.
- Game data — your saves, seasons, replays, and lifetime stats, so they follow you across devices.
Online games
Live multiplayer games run through our game server (Cloudflare Workers). Game rooms hold the moves of the current game and your display name while the game is live, and are wiped shortly after the room empties. Chat messages are relayed to your opponent and are not stored after the room is wiped. Chat is private to the two players in a game. A word filter masks abusive language, you can mute your opponent for the game (the name stays muted in future games on that device), and Report sends the opponent's recent lines to us for review. Reports are handled by a human within 7 days.
Feedback
The Feedback form sends what you type, an optional reply email, and enough to reproduce a problem: app version, platform, screen size, browser or device details, and, when sent from inside a game, that game's seed and play-by-play. Reports go into our private issue tracker (hosted by GitHub, which processes them on our behalf) and are deleted on request.
Analytics
The app ships no analytics or crash-reporting SDK. If we ever turn on Cloudflare Web Analytics for the web version, it is cookieless and does not track you across sites. No advertising, no ad identifiers, no tracking cookies, no sale of data.
Deleting your account and data
In the app: Settings → Account → Delete account. This permanently removes your account and everything attached to it from our servers: email, password hash, display name, cloud saves, sync records, and sessions. Games stored locally on your device remain yours. Deletion is immediate and irreversible.
Without the app: email support@footbored.com from the address on your account with the subject "Delete my FootBored account". We delete the account and all of the data above within 7 days and reply to confirm. Nothing is retained afterwards; there is no backup copy to restore from.
You can also delete individual saved games and replays inside the app at any time without deleting your account.
Children
FootBored is a general-audience game. We do not knowingly collect personal information from children beyond the email used to create an account.
Contact
Questions or data requests: support@footbored.com.