Privacy policy

Effective 31 October 2026. Version 1.13.

Squadcard lets a group of friends rate each other after a game and turns those ratings into player cards. That only works if the squad’s data is shared between its members, so, unlike an offline app, Squadcard keeps your squad’s data on a server. This page says exactly what, why, and how to get rid of it.

The short version: we store what the squad needs to play and rate, we never show anyone how an individual person voted, there are no ads and no tracking across other apps or websites (when you sign up we only note where you came from and the page you started on), and you can delete your account from the app or the website.

Who is responsible

Squadcard is run by Ignacio Uliczki, a sole trader trading as Squadcard (“we”), whose principal place of business is Buenos Aires, Argentina. We are the controller for the personal data we collect about people who use Squadcard. Argentina is recognised by the UK and the EU as protecting personal data to their standard, so your data being looked after from there needs no extra safeguards. For any question, or to use any of the rights below, email support@squadcard.app.

What we store

Your account

• Accounts. Organisers sign in, on iPhone or on the web; players may too. With Apple we receive a unique Apple identifier and, only if you choose to share them, your name and an email address (which can be Apple’s private relay address). With Google we receive a unique Google identifier, your name and your email address. We use them only to sign you in and to keep one account across the website and the app; we never get your password.
• Players who vote from a link have no account. Your browser keeps a cookie that says which player you are in that squad, and nothing else.
• Your year of birth, to confirm you are at least 13.
• How you found us, saved once when you make an account: a short label such as “google” or “chatgpt” for the site you came from, or that you signed up in the app or after joining a squad from its link; and, if you signed up on the website, the first page of that visit (such as “/team-generator”; a squad’s or player’s private address is kept only as its kind, never the address itself). Never the full web address, and nothing is stored in your browser for it.

What you and your squad add

• Squad names, crests (and a crest image, if an organiser uploads one), fixtures, venues, the pitch fee and a note an organiser adds to a game.
• Whether you’re in, maybe or out for a game, and, if you set them, that you’re in every week or the day you’re back from being away. Your squad sees your answers.
• Player names, positions, preferred foot and an optional photo for your card.
• Who played, the teams, the score, and any goals or assists entered.
• Votes: the 1 to 10 ratings, player-of-the-match picks and tags you give other players.
• Pitch-fee tracking: amounts a player owes and whether they have paid. Squadcard never moves money; this is a record only. An organiser can add how to pay them (their own payment link or a line of details): everyone in that squad sees it, and the link opens outside Squadcard.
• Reports you make about a player, photo or squad, so they can be reviewed.
• Minigame scores. If you’re signed in, your one counted go a day in each game: the score, your answers or shots, and how long it took. Practice goes, and games played without signing in, aren’t stored.
• Guest players. An organiser can add someone who hasn’t joined (a friend who played once) by name, so the game and its ratings add up. If that’s you and you’d rather not be in it, email us and we’ll remove your name.

What we work out from that

Ratings, player card stats, form, awards, Team of the Week and season summaries.

Technical data

• A push notification token, if you allow notifications on iPhone.
• A browser push address, if you turn on reminders on the website (mostly on Android). It is linked to your place in each squad you’re in on that phone, and deleted when you turn reminders off, leave the squad or the browser drops it.
• Your phone’s time zone and your notification choices (which types you get, and your quiet hours), so reminders don’t arrive at night.
• Standard server logs (IP address, time, the page or request) kept for up to 30 days for security and fixing faults.

Your votes are private

Nobody in your squad, including the organiser, can see how you rated a particular player. The app and the website only ever show averages. We use individual votes to calculate ratings and to spot votes that look like abuse (for example, one person always rating someone 1), which lowers the weight of those votes.

Who can see what

• Members of a squad see that squad’s players, cards, matches, tables, awards and pitch-fee balances.
• Cards you share are public. If you or a squad-mate share a card, Team of the Week or season image, anyone with that link or image can see the names, ratings and photos on it. Search engines are asked not to list them.
• Under 18s are protected by default: their card has no photo, and their shared card link only opens for their own squad; anyone else sees “This card is private” and a link preview shows no name or rating.
• Minigame leaderboards. Your squad’s board shows your score to your squad. The board for everyone shows your score beside a short form of your name (your first name and the first letter of your surname) to anyone who plays.
• We do not sell your data, and there is no advertising in Squadcard.

Why we use it

• To run the service you asked for (squads, voting, cards, teams, notifications). The legal basis is performing our agreement with you.
• To keep it safe and working (abuse checks, moderation of reports, security logs). The legal basis is our legitimate interest in a service that is fair and safe to use.
• To know how people find Squadcard (the “how you found us” label, only ever counted together). The legal basis is our legitimate interest in knowing which ways of reaching people work.
• Guest players’ names and ratings: our and the squad’s legitimate interest in recording the games they played. They can object at any time (see above).
• To handle your purchases, if you buy Squad Pro, Player Pro or a card design. Player Pro and card designs belong to your account, so these purchases are linked to it.

Payments

Squad Pro, Player Pro and card designs are bought through Apple’s App Store, or on the website from our reseller Kelviq. We never see your card details. RevenueCat tells us what you bought in the app, and Kelviq (or Dodo Payments, for website plans bought before November 2026) what you bought on the website (whether a subscription is active, until when), using the purchase record and your account's identifier.

Services that process data for us

• Vercel: hosts the website and the server, and stores photos and crest images you upload.
• Neon: runs the database, hosted in the European Union.
• RevenueCat: manages subscriptions and purchases.
• Kelviq: our reseller and Merchant of Record for website orders. As the seller it collects your payment and billing details (such as your name, email, country and payment method) and handles tax, receipts and refunds, under its own privacy policy.
• Dodo Payments: our reseller and Merchant of Record for website plans bought before November 2026, which it still renews and bills, under its own privacy policy.
• Apple: Sign in with Apple, push notifications and App Store purchases.
• Google: Sign in with Google.
• Zoho: our support email. Anything you send to support@squadcard.app is stored there.
• Your browser’s push service (Google for Chrome on Android, Mozilla for Firefox, Apple for Safari): delivers website reminders. The message is encrypted so only your browser can read it.

Beyond these services, we only share personal data with professional advisers (such as lawyers and accountants) when we need their advice, and with the police, courts or other authorities where the law requires it or to protect someone’s rights or safety.

Each service above processes data only to provide its service to us. Some are based in the United States; transfers there from the UK and EU rely on the EU–US Data Privacy Framework and its UK extension where the provider is certified, and otherwise on the EU standard contractual clauses with the UK addendum.

Cookies

We only use cookies the service needs, so we don’t ask for consent: one per squad saying which player you are, your sign-in session, two small hints that show “Hi, name” and your Pro badge before the page loads, and, only on the checkout page, Kelviq’s cookies for taking payment and preventing fraud. No advertising or analytics cookies.

What we don’t do

No advertising, no ad networks, no third-party analytics or tracking SDKs in the app, and no tracking across other companies’ apps or websites. This website counts page views with Vercel Web Analytics, which sets no cookies and doesn’t identify you. Squadcard does not ask for App Tracking Transparency permission because it does not track you.

Camera and photos

Squadcard asks for the camera only when you choose to take a photo for your card. Photos you pick from your library go through Apple’s photo picker, which gives Squadcard only the image you choose. On iPhone the background is removed on your device before upload.

How long we keep it

• Your data stays as long as your account or your squad exists.
• Deleting your account (Settings in the app, Account settings on the website, or by emailing us) removes it permanently after a 30-day grace period in case it was a mistake. Your votes are kept only as anonymous numbers, so your squad-mates’ ratings don’t change; they can’t be linked back to you.
• On the web, “You and your data” in a squad deletes your details straight away: your name becomes “Former player”, your birth year is deleted, you leave the squad, and the votes you cast become anonymous numbers. The same page lets you download everything we hold about you (JSON). See how to delete your data.
• An organiser can remove a player, and a player can leave a squad at any time.
• Server logs are deleted after 30 days. Backups roll over within 30 days.

Your rights

Wherever you live, you can ask for a copy of your data (the app and the website also have an export button, which gives it to you as a file you can take elsewhere), ask us to correct or delete it, object to how we use it, or ask us to restrict it. Ratings are worked out automatically, but nothing Squadcard decides about you has legal or similarly serious effects. If you are in the UK or EU you also have the right to complain to your data protection authority (in the UK, the ICO; in the EU, the one where you live). If you are in California, you have the right to know, delete and correct your information; we do not sell or share it for advertising. We will answer within 30 days.

Children

Squadcard is for people aged 13 and over. We don’t knowingly collect data from younger children, and if we learn we have, we delete it. For players under 18 we keep things private by default: no card photo, a card link only their squad can open, no messaging, no location and no advertising. We designed these following the UK Age Appropriate Design Code.

Security

Everything travels encrypted (HTTPS). Sign-in and player links use long random tokens, and the database keeps only a scrambled (hashed) copy of them. Backups are encrypted. If a breach puts your data at risk, we’ll tell the regulators who need to know within 72 hours and tell you without delay.

Changes

If this policy changes in a way that matters, we’ll say so in the app before it takes effect. The version and date at the top always show the current one.