Privacy policy

This policy explains what Invincibles stores about you, why, and how to delete it. It covers the iPhone and iPad app and the website at invincibles-football-draft.vercel.app. Invincibles is made by Cheap Beast Studios. We don't sell your data, and an email address is only needed if you choose to save your progress to an account. The manager name you choose is public, so don't use personal information in it.

On your device

The app (or your browser's local storage on the website) holds your manager name, your seasons and stats, your head-to-head results, a Daily you're part-way through, your settings (sound, haptics, notifications, draft options) and a sign-in token. Deleting the app, or clearing your browser data, removes it.

On our servers

To run leaderboards, friends and head to head, the app signs you in anonymously the first time you start a ranked game, open Friends, Head to head or Notifications, or accept an invite. Practice, demo and walkthrough games don't create an account. We then store:

• Your account: a random ID. If you save your progress, also your email address and a password (stored only as a secure hash by our sign-in provider).
• Your profile: your manager name (shown publicly on leaderboards and to friends) and a friend code (private to you).
• Ranked runs: the XI you drafted, your season result and score (public on leaderboards), and the spins and picks we use to verify the run (not public).
• Games started: the seed, formation, league and mode of each ranked game you begin, so it can be verified when you finish.
• Friends: which players you've added with a friend code, and when wrong codes were tried (to stop guessing).
• Head-to-head challenges: who sent a challenge to whom, the spins, both XIs and the result.
• Notifications: if you turn on notifications, your device's push token, used only to tell you about challenges, results and new friends. Turning notifications off removes it.
• Cloud save: if you save your progress to an account, a copy of your stats and game history so you can carry on on another device.
• Reports: if you report a manager name, which name you reported and when.

Our hosting and database providers process your IP address and basic request details to deliver the service and keep it secure. Supabase's sign-in service also keeps the IP address and device or browser of each session.

Who processes it

• Vercel hosts the website.
• Supabase provides the database and sign-in. Data is stored in Supabase's Sydney (ap-southeast-2) region.
• Apple delivers push notifications to your iPhone or iPad, if you turn them on.
• Account emails (codes to confirm your email or reset your password) are sent through our email provider.

Ads, tracking and cookies

Invincibles shows no ads and runs no analytics or tracking code, in the app or on the website. We don't track you across other companies' apps or websites.

How long we keep it

Your account, ranked runs, friendships, challenges and cloud save are kept until you delete them. An anonymous account with no ranked runs and no friends is deleted automatically once it hasn't used the online features for 60 days. Unfinished games are removed after 30 days, and delivered notifications after 7 days.

Your choices

• Delete your account: in the app, go to Stats, then Delete account. This permanently removes your account, email, ranked runs, friendships, challenges, push tokens and cloud save from our servers, and clears your device. You can also email us and we'll do it for you.
• Get a copy: on the Stats page, Download my data saves everything we hold about you, from your device and from our database, as one file. Session logs kept by the sign-in provider aren't included.
• Change your public name: on the Stats page.
• Remove a friend on the Friends page, or hide or report a player from the leaderboard.
• Notifications: turn them off in the app's settings or in your iPhone's Settings.

Children

Invincibles isn't directed at children under 13, and we don't knowingly collect data from them.

Changes

If we change what we collect, we'll update this page and the date at the top before the change goes live.

Contact

For privacy questions or requests, email hello@cheapbeaststudios.com.