Privacy & your data
Last updated: 25 October 2026. Operator: Samuel Arko.
Privacy contact: A public support address has not been configured. Public launch is not ready.
Accounts
Touchline stores your account ID, display name, email and verification status, linked sign-in provider records and active sessions in Cloudflare D1. Email passwords are stored as hashes. Sign-in uses session cookies. Authentication rate-limit records help protect accounts. Email verification, password recovery and deletion confirmation are sent through Resend. Google or Apple receives your sign-in request when you choose that method; those providers have their own privacy policies.
Device careers
Career progress and up to five recovery copies are stored in this browser’s IndexedDB. Local settings and the last online account ID are stored on this device, including an identifier used to reopen the same profile offline. Browser data is not shared automatically between devices. Clearing site data can delete device careers; export a backup first. Sign out on shared devices. Offline access to a previously opened profile is not an additional password lock.
Your personal cloud
Google Drive saving is optional and uses the Google account you explicitly connect. Game files are written to your own Drive using the app-file scope; Touchline does not gain general access to unrelated Drive files. The Drive access token is kept in memory by the game rather than persisted in browser storage. iCloud backups are manual files you choose to save. These providers’ storage terms and privacy policies apply.
Previous hosted saves
New operator-hosted career uploads are disabled. Older D1/R2 careers remain available only to their signed-in owner for migration. Account deletion removes those hosted records and snapshots. Personal Drive files, exported files and device careers are separate and must be removed separately by you.
Purpose and retention
Account information is used to provide sign-in, recover accounts and keep storage profiles separate. It is retained until account deletion. Sessions and verification records expire according to the authentication service. Device data remains until you delete it or clear browser storage. Personal cloud data remains until you delete it there. Provider infrastructure may maintain operational logs and backups under its own retention arrangements. This game does not add advertising trackers or sell personal information.
Your choices
Use Saves & storage to export or delete device/Drive careers. Use Account settings to recover access or request verified account deletion. Delete files from other browsers/devices and personal cloud separately. Contact the operator for account data access, correction, deletion or privacy questions. Rights and complaint routes depend on the law applicable to you.
Hosting and providers
Cloudflare hosts the service; Resend delivers account emails; optional Google/Apple services handle their selected functions. Their processing may involve countries outside your own. No claim of a particular data-residency guarantee is made here.