LEGACY XI

Privacy Policy

Publisher: Legacy XI Creators
Privacy questions and data requests: legacyxisupport@gmail.com
Effective Date: August 12, 2026
Last Updated: September 12, 2026

1. Summary

LEGACY XI is a football-management game. You can play the whole game without an account, without giving us an email address, and without an internet connection. If you do that, your careers stay on your device.

Two optional things send data off your device: a Legacy Account (we store your email address and a backup of your careers so you can continue them on another device), and analytics (if you consent, gameplay statistics go to Google Analytics).

You can turn analytics off, and delete your account and its cloud saves, from inside the game at any time. We do not sell your personal data.

2. Who we are

LEGACY XI is published by Legacy XI Creators.

For any privacy question, data access request, or deletion request, email legacyxisupport@gmail.com. Account deletion is also available inside the game, and is described on our account deletion page.

3. What we collect, and when

3.1 If you play without an account (the default)

DataWhere it goes
Your career saves (clubs, players, results, league tables)Your device only, in local storage
Your language choice and whether you accepted the termsYour device only

Nothing in this section is transmitted to us.

3.2 If you create a Legacy Account

DataWhy
Email addressTo create your account, sign you in, and send password-reset emails
PasswordHandled and stored by Google Firebase Authentication. We never see or store it
Account ID (Firebase UID)Identifies which cloud saves belong to you
Cloud career savesA compressed copy of your careers, plus a short summary (club name, season, week, legacy points, matches played) shown when your device and the cloud disagree about which career to keep

Your email address and account ID are also stored on your device so the game can show who is signed in.

Your careers contain only game data — fictional clubs and fictional players. The game has no name field, no chat, and no free-text input other than the email and password used to sign in.

3.3 If you consent to analytics

We send gameplay events to Google Analytics, such as: app opened, career started, match started, match finished, transfer completed, season finished, language changed, and an ad viewed. The values attached are game values — club, score, league position, transfer fee, week, year. No personal data is attached to any analytics event.

3.4 Collected automatically by Google when analytics is on

When analytics is enabled, Google's own SDKs also collect information we do not choose or control, including:

We describe this as pseudonymous, not anonymous: it is not linked to your name, but it is an identifier that can distinguish your device.

3.5 Advertising

Ads are served only in the LEGACY XI mobile apps (Android and iOS), through Google AdMob. The apps show two kinds of ad: optional rewarded ads you choose to watch (“Meet with investors”) and a single interstitial between seasons. The web version of the game shows no ads.

AdMob may collect an advertising identifier, your IP address, device information, and ad interaction data, and may use them for ad delivery, frequency capping, measurement and fraud prevention. On iOS, access to the advertising identifier is requested through Apple's App Tracking Transparency prompt; you can decline.

3.6 What we never collect

We do not collect contacts, photos, microphone or camera data, health data, precise location, or payment information. There are no in-app purchases.

4. Why we use it

5. Legal bases (where the UK/EU GDPR applies)

6. Third-party services

These services are used by the current code and receive data as described.

ServiceProviderWhat it receivesWhen
Firebase AuthenticationGoogleEmail, password, account ID, sign-in IP and timestampsOnly if you create an account
Cloud FirestoreGoogleYour cloud career saves and their summaryOnly if you create an account
Google Analytics / Firebase AnalyticsGoogleGameplay events, pseudonymous identifiers, IP, device infoOnly with your consent
Firebase InstallationsGoogleA per-installation identifierWith analytics
Firebase configuration endpointGoogleApp identifier, IPOn startup, when analytics initialises
Google FontsGoogleYour IP address and browser informationOn every load of the game, to fetch two typefaces
Google AdMobGoogleAdvertising identifier, IP, device and ad interaction dataWhen you use the Android or iOS app
Cloudflare (web version hosting)CloudflareStandard server request logs, including IPOn every load of the web version

Google acts as our processor for Authentication and Firestore. For Analytics and AdMob, Google also processes data for its own purposes as a controller — see Google's privacy policy.

Please note: Google Fonts is contacted when the game loads, before you accept anything. It is used only to download two typefaces, but Google receives your IP address as part of that request. This page itself loads no fonts and makes no third-party requests.

7. How long we keep it

8. Your choices and rights

Inside the game:

By email, at legacyxisupport@gmail.com, you can ask us to confirm what data we hold about you, provide a copy of it, correct it, or delete it. Depending on where you live you may also have the right to object to or restrict processing, to data portability, and to complain to your local data protection authority.

To opt out of personalised advertising you can also use your device settings (Android: Ads settings; iOS: Tracking / Personalised Ads).

9. Children

LEGACY XI is intended for a general audience. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at legacyxisupport@gmail.com and we will delete it.

10. International transfers

Google and Cloudflare process data on servers that may be outside your country, including in the United States. Where required, those transfers rely on the providers' own safeguards, such as Standard Contractual Clauses.

11. Security

Passwords are handled entirely by Google Firebase Authentication and are never visible to us. Cloud saves are stored so that only the signed-in account that created them can read or write them. No system is perfectly secure, and we cannot guarantee absolute security.

12. Changes to this policy

If this policy changes materially, we will update the effective date above and, where appropriate, notify you in the game.

13. Contact

Legacy XI Creators
legacyxisupport@gmail.com