Privacy by design

Friends and weekly challenges

Optional online features store friend relationships and challenge participation and scores. Friend comparisons require both players to enable the separate comparison-sharing setting, which starts off.

Voluntary feedback

Guests and signed-in players can send a category and message, optional contact email or support code, and selected diagnostics after reviewing them. These submissions are used to investigate and respond to support requests.

Sharing and reviews

Sharing a career card is voluntary. Your selected player name, fictional club, position, character artwork and career statistics can appear in the shared card. The sharing app handles it under its own policy. Studio links open a browser only when selected. Previous Apple review-prompt date and version are stored locally; Elevenward does not know whether you post a review.

Content updates

When online, Elevenward can check a public manifest and download verified football-world content without an account. This content check does not upload a career save. Active careers keep their existing world definition.

Guest careers

Career snapshots and the recovery journal stay on your device. A guest sends no career save to Beopity.

Optional accounts

Optional Apple or Google sign-in uses provider account identifiers and any email supplied by the provider. Accounts can synchronize versioned career snapshots, private Hall of Fame archives, purchase entitlements, and sharing and analytics preferences.

Public leaderboards

New signed-in accounts publish a career score and position after cloud sync unless sharing is turned off. Existing accounts start private until you enable sharing. This account setting carries across devices; turning it off removes your entries. Your career name stays private. You may claim one moderated public username or use a generated alias; other players can report a username and hide it on their device.

Purchases

Apple or Google and RevenueCat process purchases and verification. RevenueCat uses an app purchase identifier for guests and the Elevenward account identifier when signed in. Purchase history and entitlement information support functionality and purchase analytics. Elevenward does not store payment-card details.

Analytics

First-party product analytics and scrubbed error categories are disabled until consent. When enabled for a signed-in account, events are linked to its account identifier; they are not anonymous. Advertising and cross-app tracking are not used.

Retention and deletion

Account deletion removes identities, sessions, saves, leaderboards, entitlement cache, and consent records. Store transaction records remain with the storefront where required.

Contact

Privacy questions: howethstudio@gmail.com.