Privacy

The short version

• No photo is uploaded to the web page. Photos, badges and flags you choose are read by your own browser and shown on your own screen. They do not leave your device.
• The card maker pages have no adverts and no tracking, and they do not set cookies. When you sign in to the website, the site's own login sets a cookie to keep you signed in (see Accounts and team pages below).
• Everything you save is a ZIP file on your own device. We never receive it, and the website keeps no copy of your players, their names, their stats or their pictures.
• What the website does keep is small: your account (including when you last signed in), the name and two colours of each team page you make, and, on a club plan, the email address of each manager you invite and which team they look after.
• Apart from the routine record our web host keeps of every visit, we only receive what you choose to send us: an order through our payment provider, or an email you send.

Photos and pictures

When you choose a photo for a card, or a club badge or flag, your browser reads the file from your device and draws it on the card. The picture is held in your browser's memory while the page is open. It is not sent anywhere.

Everything the card maker does with a picture happens on your device as well: moving and zooming it, taking the background out, painting touch-ups, and printing. Nothing is processed on a server.

When you close or refresh the page, the pictures are gone from it. The original files stay wherever you keep them, such as your phone or computer.

Choosing a folder of pictures

We suggest you keep all your pictures in one folder. After you open a saved file, Pictures folder lets you point the card maker at that folder so each picture is found by its file name. Your browser may use the word “upload” when you pick a folder; that is its standard wording. The page only reads, on your device, the pictures your saved file names. Nothing is sent anywhere.

Saved files

You can save a player, family, team or club as a ZIP. A ZIP holds a data file (.json) and copies of the pictures you used, and it is put together on your device. It is saved to your device and is never uploaded. The data file holds names, positions, stats, colours, settings, awards and shirt numbers, and the file name and size of each picture. If you share a ZIP, you are sharing the pictures in it.

A Pro-Team or Pro Club file also holds the team's games (dates, opponents, scores), the settings you saved for each game and the ratings you gave players. It is saved to your device in the same way.

The card maker can still open an older .json file saved by an earlier build, but it no longer saves one.

Names, shirt numbers and stats can be personal information, especially for children. Because the ZIP is the only copy, keep it safe. If you share a saved file or a printed card, share it only with people who should have it.

What the website keeps

The website does not keep your teams. There is no “save on this website” and no list of saved teams. This is deliberate, so that the names and numbers of your players, who are often children, are not stored on a server.

What is kept

• Your account: your name or username, email address, password (stored scrambled, never in readable form), the plan and end date of your subscription, and the time you last signed in. The last sign-in time is kept for every account, managers included.
• Each team page you make: its name, its two kit colours, which kind of page it is (a single page, a club page or a team page) and who owns it. That is all. It holds no player, no stat, no photo and no game.
• On a club plan, each manager you invite: their email address, their name if you typed one, and the team page or pages they look after. The website makes a new login for them. An address that already has an account on the site is refused, so nobody is made a manager without their own consent. The invitation is an email sent by the website's own email system. It says who invited them, to which club and team, and contains a link for the manager to choose a password.
• If two-step login is switched on, your two-step login plugin keeps what it needs to check your code.

Who can see it

A team page opens only for its owner, the manager assigned to it and the site's administrators. Someone who is not signed in is sent to the sign-in page, and anyone else is told the page is not found. It is not listed, not searchable and is marked not to be indexed by search engines. The people who run the site (its administrators) can also reach the site's database, as with any website.

Deleting it

Use Delete this page on a team page, or Remove beside a manager, in your dashboard. When an account is deleted, its pages and the manager logins made for it are deleted too. The site's personal-data export lists a person's pages, the managers they invited, the teams they manage, their last sign-in and any plan set by hand. The erase tool removes their pages, the managers they invited (and a manager's own login if it was made for a club) and any plan set by hand, and leaves the account itself to the site's usual erase tool. If the site's owners remove the plugin, everything it kept is removed with it. Your own ZIP files are on your device, so delete those yourself.

Children's names

Because the website keeps no player names, a team page itself holds no children's data beyond a team name, which is usually a club or age group (for example “North Town FC U12”). Your ZIP files do hold names, so follow your club's own rules on children's data when you store or share them. The people who run the site decide why and how long account details are kept, and are responsible for them under data protection law.

What we do receive

When you visit

Like any website, our web host receives a routine record of each visit: your internet address, the time, and the page you asked for. It is used to run and protect the site.

Fixtures spreadsheets

In the Pro-Team and Pro Club versions you can choose an Excel or CSV file of fixtures. Your browser reads it on your device to fill in the games. The file is not uploaded and not kept: only the games you end up with are saved, in the ZIP you save to your own device.

Fonts and the QR code script

The pages load their fonts from Google Fonts and the QR-code script from cdnjs (run by Cloudflare). Your browser asks those services for the files directly, so they can see your internet address and browser type, as with any website that uses them. None of your photos or card details are sent to them.

When you buy

Payments are handled by our payment provider. We receive your order details, such as your name, email address and what you bought. We never see your full card number.

When you email us

The "Request a feature" form on the home page opens a message in your own email app, addressed to us. Nothing is sent until you press send in your email app. We use your email and message to reply to you and to consider your idea.

Photos of children

Many cards show children. Ask a parent or guardian before you add a child's photo to a card or share a finished card, and follow your club's own rules on photos and safeguarding. We never see the photos, so this is up to you.

Accounts and team pages

Every subscription gives you a login on one website, and your team pages are on that website. Photos stay in your browser, and the website keeps nothing about your players (see What the website keeps). The site's system holds the account details used to run it, such as your name, an email address, the login and payment records. Signing in keeps you signed in with a cookie from the site, and the cookie is removed when you sign out or it expires.

Your rights and contact

You can ask us what we hold about you, ask us to correct or delete it, or object to how we use it. You can also complain to the Information Commissioner's Office at ico.org.uk.

To contact us, write to hello@example.com.

Changes to this page

If we change how we handle your information, we will update this page and its date.