Privacy and terms

Summary

• Without signing in, your save stays only in your browser. The only things that leave your device are the anonymous statistics described below (you can turn them off).
• If you sign in with Google, we store your name, photo and game save so you can continue on any device.
• We don't sell data, don't show ads and don't use tracking cookies. We count visits and matches anonymously (no account, no cookie) to know whether the game is working; you can turn this off in Settings.
• Daily Cup and League rankings: only signed-in players appear, and the public only sees the trainer and club names you chose in the game, never your Google name, email or photo.
• You can delete your account and everything in the cloud at any time, in Settings.

Who we are

Soccermon is a non-profit fan game, created by Miguel Cunha, open source under the AGPL-3.0 license. Pokémon and all related names, images and sounds are © Nintendo, Game Freak, Creatures Inc. and The Pokémon Company. This project is not affiliated with or endorsed by them.

What we collect

Playing as a guest (without signing in): your save stays in your browser's storage (IndexedDB and localStorage): cup, profile, settings, records, Pokédex and discovered moves. The save itself is not sent to us; only the anonymous events described right below leave your device (they include loose numbers, such as how many cups you've played, how many Pokémon you've seen and which settings you changed).

Anonymous statistics (everyone, signed in or not):

• Visits, through Vercel Web Analytics and Speed Insights: page opened, referring site (e.g. came from LinkedIn), country, device type and browser, and loading speed. It doesn't use cookies and doesn't identify you.
• Game events: things like "cup started", "match ended 3–1 in the quarter-finals", "Pokémon picked in the draft", "screen opened", "setting changed" (including the language), "club color chosen", "signed in with Google" and errors (without addresses or emails). At the start of the session we also send the site you came from (only the domain, like linkedin.com, or the link's utm_source), how many cups you've played and how many Pokémon you've seen. Each event carries only a random session code (it disappears when you close the tab), the game version and the device type. They never carry your name, email, account or IP.

To stop sending game events, turn off Settings → Your data → Anonymous statistics.

Save backup: the file from Settings → Download backup is generated and downloaded on your own device. It doesn't go through our servers.

Signing in with Google:

• the name, email and photo of your Google profile, and an account identifier (provided by Google at sign-in);
• the game save: cup in progress, settings, records, profile (the coach and club names you type, tag, color and avatar), Pokédex, discovered moves and career numbers.

We don't ask for access to contacts, files or any other data in your Google account.

Daily Cup and League (signed in only):

• Daily Cup: the score of each match of the day, the team you fielded and the orders you gave (to check the result).
• League: the team you sign up (it becomes the "ghost team" other players face, coached by the computer), your Elo and the season's matches (opponent, score and orders).
• What is public, to anyone who opens the ranking: the trainer name and the club name, tag and color you typed in the game's Profile, the day's score, Elo, division and the season's wins and losses. Whoever faces your team in the League also sees its Pokémon. With no trainer name, it shows "Treinador". Your Google name, email and photo are never public.
• Without signing in, the Daily Cup works the same, but nothing goes to the ranking.

What we use it for

Only to make sign-in work, save and sync your progress between devices and show your name and photo inside the game. The anonymous statistics tell us how many people play, where the game freezes or gets too hard and what to improve. Your data is not sold, shared for advertising or used to build behavior profiles.

Where it's stored

• Supabase: sign-in and database (profile, save and the anonymous game events).
• Vercel (hosting) and Supabase (database): like any server, they log technical access data (such as IP address and browser) for a short time, for security and operation. These logs are not part of the game statistics.
• Google: authentication, when you choose to sign in with Google. Sign-in happens on a Google page (or through a "Sign in with Google" button loaded from its servers), and Google receives the technical data of that connection.

Each player can only read and change their own save; nobody else has access to it through the game. From the rankings, the game only shows the public columns described above.

How long

As long as your account exists. If you delete your account, the sign-in, profile and save are removed immediately. The Daily Cup stays in the ranking for 12 months (each match's team and orders are removed after 30 days) and League matches for 3 months (the season's Elo stays). Deleting your account removes you from the rankings right away. Anonymous game events are deleted automatically after 12 months; since they aren't linked to you, there's no way to tell which ones are yours.

Your rights (LGPD, Brazil's data protection law)

You can access, correct and delete your data. To delete everything, open the game and go to Settings → Account → Delete my account. Your name and photo come from Google: if you change them there, the game shows the new ones at your next sign-in. Other privacy questions can be sent through the project's GitHub repository (without posting personal data in public).

Cookies

We don't use tracking or advertising cookies. The browser stores only the game save, the random session code (only while the tab is open) and, if you sign in, the sign-in session.

Terms of use

• The game is free, with no purchases and no ads, offered as is, with no guarantee of continuous operation. It may change, lose saves in big updates or go offline at any time.
• Don't use the game to attack, overload or try to access other players' data.
• The code is AGPL-3.0. Third-party sprites, sounds and data follow the licenses listed in the game's credits, several of them for non-commercial use only.
• Pokémon is a trademark and property of the companies mentioned above. If any rights holder asks, the content will be removed.