Content updated for the new version · 12.10.2026
This policy explains what information Toy Soccer Cup handles when you use toysoccercup.com, the game at toysoccercup.com/play, the Android and iPhone apps, and the versions of the game published on other gaming sites (together, the "Service"). The game is for everyone, children included, so it is built to work with as little data as possible, and this page tells you plainly what that is.
The controller of your data is Miguel Ángel Villar Alarcón, the independent developer who makes Toy Soccer Cup. For anything related to your privacy, write to toysoccercup@gmail.com.
Guest play needs no registration form. A local Club belongs to this device. Linking Google or Apple identifies and recovers the Club; the provider verifies access. We store a hashed provider identifier, not your personal name or email. Apple’s token required to maintain and revoke the link is stored encrypted.
Local saves include squad, qualities, development, School records and saved plays. The Club document can synchronise with the account when the service is available. Device comfort preferences stay local. Check linking and synchronisation before deleting data.
| Data | What for | How long |
|---|---|---|
| Earlier editions: Account: random player ID, secret key, nickname, avatar and date created | Recognise your account and let you recover it on another device | While the account exists |
| Guest Club and linked account | Guest play needs no registration form. A local Club belongs to this device. Linking Google or Apple identifies and recovers the Club; the provider verifies access. We store a hashed provider identifier, not your personal name or email. Apple’s token required to maintain and revoke the link is stored encrypted. | While the account exists |
| Squad, qualities, development, coins, unlocked items, league, School and saved plays; device settings and, in apps, age band. | Local saves include squad, qualities, development, School records and saved plays. The Club document can synchronise with the account when the service is available. Device comfort preferences stay local. Check linking and synchronisation before deleting data. | While the account exists |
| Competition: ranking points, scores and results, daily challenge streak, your club (name, crest, team qualities), Weekly Cup entries and matches, friends | Leaderboards, finding you a fair opponent, the Weekly Cup and the friends list | While the account exists. The name of a Weekly Cup champion stays in the Hall of Fame (see section 5) |
| Game usage events: sessions, time played, matches started and finished, screens visited, ads requested and watched | Find what breaks or bores and improve the game. They stay on our server and are not used for advertising | Events: 13 months (screens visited: 30 days). Totals per account: while the account exists |
| Sign-up origin: where you first played (website, app or gaming site), the platform, and the browser or device description your browser sends (user-agent) | Know which versions work and spot abuse | While the account exists |
| Anti-fraud checks: a random installation identifier and, when someone uses an invitation, the IP address, both stored only as an irreversible hash | Stop people inviting themselves to collect rewards | While the account exists |
| "No ads" purchase (Google Play / App Store): purchase token, order number, product and date | Keep ads switched off and restore the purchase | While the account exists |
| Notifications (only if you switch them on in a browser): the delivery address your browser gives us | Remind you, for example, that your Weekly Cup match is open | Until you switch them off or the browser cancels the subscription |
| Telegram or CrazyGames (only if you play there and sign in): your user ID on that platform, and on Telegram your language | Sign you in with that account | While the account exists |
| Technical logs: IP address, date and time, page requested and browser, plus game-service logs that may show your player ID and nickname | Security, preventing abuse and fixing errors | Web server logs: 14 days. Game-service logs: up to 3 months |
| Emails you send us | Answer you | As long as needed to deal with your message |
What we don't collect: your real name, email address, phone number, postal address, photos, contacts, precise location or microphone. Nicknames pass a filter that blocks insults and obvious personal data (such as phone numbers or email addresses).
On toysoccercup.com and in the apps, we are the ones who decide what is collected, as described here. If you play Toy Soccer Cup on another gaming site (for example CrazyGames, GamePix, Poki, Playgama or YouTube Playables) or inside Telegram, that site is also responsible for what it collects, including its own advertising and analytics, under its own privacy policy. Our game still talks to our server there to provide the online features that version offers, and we don't load Google Analytics in those versions.
The current game’s visible identity is your Club: name, crest, level and results shown in profiles and competitions. Historical champions may retain their edition’s nickname and avatar.
Your nickname, avatar, ranking points, scores, club name and crest, and your place in the Weekly Cup bracket are visible to other players. The nickname and avatar of each Weekly Cup champion are published in the Hall of Fame on this website, as they were on the day they won. If a champion deletes their account, we replace their name there with "Deleted player".
On the website and in the browser version, ads are served by Google (AdSense, Ad Manager and the H5 Games Ads programme). In the European Economic Area, the United Kingdom and Switzerland, a consent platform from Google appears first so you can accept or reject personalised advertising; if you reject it, the ads you see are not personalised. How Google uses data: policies.google.com/technologies/partner-sites.
The Android and iPhone apps show ads through Google AdMob: a banner while a match is being played, a full-screen ad between matches (at most one every 2 minutes, and never before your first match) and reward videos, which only play if you choose to watch one. Early in the game the apps ask for your year of birth on a neutral screen; we keep only the resulting age band, never the year. Players who say they are adults may receive personalised ads, which use the device's advertising identifier; in the European Economic Area, the United Kingdom and Switzerland, only if they accept them in Google's consent form. Children, teenagers and anyone whose age we don't know only get non-personalised ads, and their advertising identifier is not sent.
On iPhone and iPad, iOS also asks its own permission before the advertising identifier (IDFA) can be used (the App Tracking Transparency dialog). We only show it to players who have said they are adults. If you decline, the game works exactly the same and the ads are simply not personalised.
On supported apps, No ads is a one-time purchase handled by Google Play or App Store. It removes between-match ads and grants the benefits of video actions without watching. The game shop’s own waiting times remain. The game displays availability, price, status and purchase restoration.
The apps ask for no permissions beyond internet access: no location, contacts, photos or microphone. Like any internet service, the advertising provider can infer an approximate location (country or city) from your connection's IP address.
Our own game statistics (row "Game usage events" in section 3) are processed on our server, shared with no one and not used for advertising. On the website and the browser version we also use Google Analytics through Google Tag Manager to see, in aggregate, how people find and use the site. In the European Economic Area, the United Kingdom and Switzerland it doesn't store cookies until you accept them in the consent platform. Details in the cookie policy.
We don't sell or rent data to anyone, and we don't share it with data brokers.
Some of these providers (Google, Cloudflare, Apple) may process data outside the European Economic Area, for example in the United States. They do so under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
Toy Soccer Cup is suitable for children, and it is designed so that a child can play without giving any personal data: no name, email or phone, no free chat, a nickname filter, and no personalised advertising for children. In the apps, children are never asked for the iOS tracking permission. We recommend that children play with their parents' or guardians' knowledge. If you are a parent or guardian, you can delete your child's account from Settings → My account, or write to us with the nickname and we will do it for you.
You have the right to access your data, correct it (you can change your nickname in the game), delete it, restrict or object to its processing, take it with you (portability), and withdraw your consent. The quickest way to delete everything is Settings → My account → Delete my account: it erases your account, progress, club, scores, Weekly Cup entries, friends and game statistics from our server and from your device, and it can't be undone.
For anything else, write to toysoccercup@gmail.com with your nickname. Never send us your account code: it is the key to your account, and we will never ask you for it. To check that the account is yours, we may ask you to do something in the game, such as changing your avatar to one we name. We reply within one month. You also have the right to complain to the data protection authority of your country.
All connections to the Service are encrypted (HTTPS). Your account is protected by a secret key, the anti-fraud identifiers are stored only as irreversible hashes, and only the developer has access to the server and the database.
If this policy changes, we will update the date at the top of this page, and we will announce important changes on the website.
