Football Genius: Privacy policy

On your device

The game saves your language, nickname, avatar, sound and haptic preferences, and offline best scores on your device. It also caches the latest cloud wallet for display and saves pending requests for safe retry. Cached balances cannot authorize spending. Offline solo and shared-device modes remain available. Nearby multiplayer uses local discovery and game messages that are not encrypted; use a trusted private Wi-Fi network. Cloud rewards, emote ownership, reputation and gifts require an internet connection.

Online multiplayer and Firebase

Online play, cloud rewards, purchases and gifts require Google sign-in, or Sign in with Apple on iOS. Guests can play solo, shared-device and nearby local modes. Firebase Authentication receives the identity supplied by your chosen provider, including your provider user ID, name and email address (which may be an Apple private relay address). The game never receives your Google or Apple password. Provider email addresses are private and are not shown to other players.

Cloudflare Workers and SQLite-backed Durable Objects run worldwide matchmaking, private rooms, connected solo practice and daily challenges. Cloudflare receives your Firebase user ID, in-game nickname and avatar, room participation, answers, drawings, actions and results. The server decides deadlines, scores, results and rewards. Room participants can see your in-game identity and activity. Gift recipients use user IDs to distinguish identical nicknames.

Cloudflare stores your persistent wallet, coins, reputation, wins and losses, emote/card ownership, equipped emotes, quests, daily records and gift receipts. Receipts include sender and recipient IDs and in-game names, gift type, price and time. HTTPS and secure WebSockets protect cloud traffic. Firebase and Cloudflare may process IP addresses and connection information for operation and security.

Predictions and reminders

Cloudflare stores your match score predictions and awards leaderboard points after delayed verification against the final match results. Predictions never award coins, cash or reputation. Leaderboards show in-game nicknames, avatars and points. Fixtures are fetched by the server without sending your predictions or identity to the data source.

Optional return and daily/streak reminders are scheduled locally on your device after notification permission. Your reminder preference and schedule stay on the device. You can turn them off in Settings; no remote push service is used.

Advertising

Google AdMob serves advertisements. On Android, ads are requested only after Google’s User Messaging Platform permits them. Ad content is limited to parental-guidance or below. The SDK may process device identifiers, IP addresses and approximate location, ad views and taps, product interactions, and crash, performance or other diagnostics for advertising, measurement and fraud prevention. No precise location permission is requested. On iOS, the game does not track you and shows no cookie or consent form: it never asks for Apple tracking permission, every iOS ad request is nonpersonalized and made without access to the advertising identifier (IDFA), and the publisher first-party identifier is disabled. In the EEA, the UK and Switzerland, Google serves only limited ads on iOS, which use no personal data for personalization and use cookies or local storage only to detect fraud. On Android, where required, ad privacy choices are available in Settings; ad consent is optional and gameplay remains available when declined. The game does not use Firebase Analytics or Crashlytics. Rewarded ads that grant coins or daily bonuses use Google’s signed server-side verification. Google sends Cloudflare the user ID, a one-use reward ticket, ad unit, transaction ID and completion time. Coins are credited only after this confirmation; the device’s ad callback cannot grant cloud currency.

Store purchases

Where available, Apple or Google handles payment for coin packages and removing ads. The game sends the signed purchase proof, product ID and an account-binding identifier to Cloudflare for verification before granting an entitlement. Transaction identifiers are stored as hashes to prevent a purchase being credited twice. The developer does not receive your payment card details. Store product availability and prices are shown by the platform.

Retention and deletion

Wallets, ownership, prediction records and leaderboard totals remain until account deletion. Completed daily history is limited to 366 days; gift and operation receipts remain for up to 90 days and are cleaned on subsequent wallet activity. Unused ad reward tickets expire after an hour and ticket records are cleaned after a day. Match rooms expire within two hours, idle lobbies within 30 minutes, and completed results within five minutes.

In Settings, choose “Delete account and player data” and confirm. Google or Apple may ask you to authenticate again. Apple access is revoked, then associated Cloudflare rooms, wallet, ownership, reputation, daily and quest records, predictions, public profile, and identifiable gift/operation receipts are erased before Firebase Authentication is deleted. Legacy anonymous account deletion also cleans its Firebase room records. Affected rooms end for all participants. Internet is required; failures keep access available for retry. Successful deletion clears local player data and pending requests while retaining language and preferences. You may later sign in to start a new account.

Non-reversible hashes of deleted user IDs and purchase transaction IDs remain as anti-replay records, without the deleted wallet, nickname or purchase owner. Providers may retain service, security, store and advertising records under their policies. Operating-system backups may retain local copies. Uninstalling does not delete server records. Use in-app deletion or contact support; never send passwords or sensitive documents.

Audience and choices

The game is intended for people aged 13 and older and is not directed at children under 13. Solo and shared-device play are available without online multiplayer. Nicknames should not include sensitive personal information. If you believe a child has supplied personal information, contact us. Depending on your location, you may have rights to access, correct or request deletion of personal information, or to object to certain processing. Contact us to make a request.

Contact and policy updates

For game support, privacy questions or deletion requests, email osamawalid2222@gmail.com. The developer is Osama Hasan. If this policy changes, the revised page will show an updated date. Material changes will be explained when required.