The short version. CapSoccer has no accounts, no analytics, no tracking and, in version 1, no ads. We never sell your data. Playing against the bot, on one phone, in the World Cup or in the arcade sends nothing to us. Two features talk to our server, and this page says exactly what they send: playing a friend online and the community Trick Shots levels.
1. Who we are
CapSoccer (“the app”, “the game”) is published by NextGen Coders (“we”, “us”). We decide why and how the information described below is processed, which makes us the “controller” under laws like the GDPR. You can reach us at support@capsoccer.app.
This policy covers the CapSoccer apps for iOS and Android and this website, capsoccer.app.
2. What stays on your phone
Most of what the game remembers never leaves your device. It is stored in the app’s private storage and is removed when you uninstall the app:
- your settings (sound, vibration, score bar position, last rules chosen), win/loss record and Arcade progress and stars;
- your cap looks, the countries you added, and any World Cup in progress;
- the Trick Shots levels you build and have not published, and your best tries on levels;
- the player name you type for the Wi-Fi lobby and for community levels;
- a random install ID and secret token (see section 3), created the first time you use the community.
The game keeps a short diary of bot search timings in memory to keep the bots running smoothly. It stays on your device; nothing is sent anywhere.
3. What we collect, and when
| Feature | What is sent | Why | How long we keep it |
|---|---|---|---|
| Play a friend online (room code) | The room code, the rules you picked, a short code describing your cap look (80 characters at most), and each flick you make (which cap, direction and speed). Your IP address is visible to the server because that is how internet connections work. | To run the match on our server and show your friend your caps. | In memory only, never written to disk. A room is deleted when the match ends and both players leave, when nobody joins within 10 minutes, or 10 minutes after it finishes. |
| Same Wi-Fi play | Your player name (16 characters at most) and cap look, announced to other phones on the same local network while the Same Wi-Fi screen is open or “Visible on Wi-Fi” is on. Matches are then played directly between the phones. | So friends on the same network can see you and challenge you. | Nothing is sent to us. It stops when you close the screen or the app. |
| Community Trick Shots (publishing, voting, reporting, playing) | A random install ID; a secret token (we keep only a one-way hash of it); your player name; the level you publish (its layout and name) and the winning shot that proves it can be beaten; your votes; your reports; and which community levels you played and whether you cleared them. | To publish and list levels, check that a level can be won, stop one person voting twice, let you delete your own levels, and moderate abuse. | Until you delete the level, or ask us to delete your data. Votes and play records are kept as long as the level exists. |
| Rate limiting and security | Your IP address, counted in server memory against daily and hourly limits (for example, how many levels one address can publish a day). | To block spam and abuse. | In memory; reset when the server restarts. Our server and its web proxy may also write short-lived technical logs (time, address, requested path) used only for security and fixing faults. |
| Advertising | Version 1 shows no ads and contains no active advertising code. If we add ads in a later version, we will update this policy and ask for your consent where the law requires it, before any ad data is collected. | — | — |
We do not collect your name, email address, phone number, contacts, photos, microphone or camera data, precise or approximate location, advertising identifier, purchase history, or browsing history. The player name is a nickname you choose; please do not put your real name or personal details in it.
Public by design. A published level, its name and your player name are visible to every CapSoccer player in the community list. Votes are counted but are not shown with names.
4. Why we use it
We use the information above only to run the game’s online and community features, keep them fair and safe, fix problems and meet legal obligations. Where the GDPR or UK GDPR applies, our legal bases are: performance of a contract (providing the features you ask to use), and our legitimate interests in keeping the service secure, preventing abuse and moderating user content. We do not use your data for advertising, profiling or automated decisions that affect you, and we do not combine it with data from other companies.
5. Who we share it with
We do not sell your personal information and we do not share it for advertising. The server that runs online play and the community is hosted on a virtual private server rented from a hosting provider, which processes data on our behalf only to host it. We may disclose information if the law requires it, or to protect the safety of players and the service. We use no third-party analytics or crash-reporting services.
6. How long we keep it
See the table in section 3. In short: online matches live in memory and disappear; community data lasts until the level is deleted or you ask us to remove your data. When you delete a level in the app it disappears from the community straight away; copies may remain in our server’s storage history and backups for a limited time before they are overwritten.
7. Your choices and rights
- Delete your levels any time from Arcade → Create → My Trick Shots. This also removes them from the community.
- Turn off Wi-Fi visibility in Settings, or simply leave the Same Wi-Fi screen.
- Change your player name in Settings.
- Uninstall the app to remove everything stored on your device. This does not delete data already on our server; use the request below for that.
- Ask us to access, correct, export or delete the community data connected to your install, or to restrict or object to how we use it, using the data request page. We answer within 30 days.
Because there are no accounts, we identify your data from your player name and level names rather than your identity, and we may ask you for details only you would know. If you live in the EEA, the UK or Switzerland you may complain to your local data-protection authority. California residents: we do not sell or share personal information as those terms are defined in the CCPA/CPRA.
8. Children
CapSoccer is a general-audience game and is not directed to children under 13 (or under 16 where local law sets that age). We do not knowingly collect personal information from children below that age. If you are a parent and believe your child has published a level or a player name, write to support@capsoccer.app and we will remove it.
9. Security
Connections to our server use encryption (HTTPS and secure WebSockets) on the internet. We keep the install token only as a one-way hash, limit what the server accepts, and keep the data we hold small. No system is perfectly secure, so please do not put sensitive information in a player or level name. Same Wi-Fi play uses a local, unencrypted connection on your own network; use it on networks you trust.
10. International transfers
Our server may be located outside the country where you live, so information from the online and community features can be processed in another country. Where required, we rely on appropriate safeguards for such transfers.
11. Changes to this policy
We will update this page when the app changes in a way that affects your privacy, for example before any version that shows ads. The date at the top shows when it was last changed. For significant changes we will also tell you in the app.
12. Contact
Questions or requests about privacy: support@capsoccer.app. See also our Terms of use and Community guidelines.