Clubography

Privacy Policy

Last updated 10 August 2026

You can play Clubography without telling us who you are. There is no sign-up wall. If you never sign in, we never learn your name or your email address.

This policy explains what we collect, why we collect it, and how to get rid of it. It covers the Clubography app on Android and iOS, and the clubography.app website.

Who we are

Clubography is made by ENineApps, a small independent studio in the United Kingdom. For data protection law, we are the "controller" of the information described here.

What we collect

If you just play

The app signs you in anonymously so your streak and scores survive a restart. That gives you a random account number. It is not linked to your name, your email, or anything you have on your phone.

Your game results — the day's score, whether you solved it, your streak, and which puzzles you have played.
A random account ID generated by Firebase.
App settings, stored on your device.

If you sign in

Signing in with Google, Apple or email is optional. It exists so your progress moves to a new phone and so friends can find you. It gives us:

Your email address and, if your provider supplies one, your display name.
Sign in with Apple lets you hide your real email. We are fine with that and it works normally.

If you pick a handle or add friends

Your handle is public by design. Other players see it on leaderboards, so pick something you're happy for them to see.
Your friends list, which is the account IDs of people you have added.

In the background

How the app gets used, and basic device information, through Firebase Analytics. That means which parts of the game get opened, your device model and operating system, your language, and roughly which country you are in, worked out from your IP address rather than from GPS. We use it to see what works and fix what doesn't.
Where your install came from, through AppsFlyer, so we know whether you turned up from a friend's challenge link or an advert. On Android that uses your advertising ID, which you can reset or block in your device settings whenever you like.
Crash reports and how fast the app runs, through Firebase Crashlytics. If the app falls over we get the line it fell over on, plus your device model and operating system. It is not tied to your account or your name, and it exists for one reason: so a crash on your phone is a crash we can fix.

What we never collect: your precise location, your contacts, your photos, your camera or microphone, health data, or payment details. Clubography is free and has nothing to buy, so we never see card information.

Why we collect it, and our legal basis

What	Why	Legal basis (UK/EU GDPR)
Scores, streaks, handle, friends	To run the game, keep your progress and show leaderboards	Performance of a contract
Account and sign-in details	To keep your account yours and move it between devices	Performance of a contract
Usage and device analytics	To find out which parts of the game work and fix the parts that do not	Legitimate interests
Crash reports and performance	To find out that the app broke, and where, so it can be fixed	Legitimate interests
Install attribution and advertising ID	To measure whether shares and adverts actually bring players in	Consent, where your device or the law requires it; otherwise legitimate interests

Where we rely on legitimate interests, we have weighed that against your privacy. You can object at any time using the contact address above.

Who we share it with

We do not sell your data, and we never have. We share it only with the companies that make the app work:

Who	What for
Google (Firebase)	Accounts, the database holding your scores, analytics, and remote settings. Firebase privacy
Google (Crashlytics)	Crash reports, so faults get fixed. Firebase privacy
AppsFlyer	Working out where installs came from. AppsFlyer privacy
Apple and Google	Only if you choose to sign in with them, or when you download the app

We may also disclose information if the law requires it.

Where your data goes

Our providers store and process data on servers that may sit outside the United Kingdom, including in the United States. Where that happens, transfers are covered by the safeguards those providers offer, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

How long we keep it

Game data and account details — for as long as you use Clubography. Ask us to delete your account and we remove them.
Analytics — retained by Firebase on a rolling basis, currently up to 14 months, then deleted automatically.
Accounts nobody comes back to. Delete the app without signing in and that account gets cleared out in routine tidying.

Your rights

If you are in the UK or the EU, you can ask us to:

tell you what we hold about you, and give you a copy;
correct anything wrong;
delete your account and everything attached to it;
restrict or object to how we use it;
withdraw consent where you gave it.

Email privacy@clubography.app and we will respond within one month. There is no charge.

If we get it wrong you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EU.

If you are in California, you have similar rights to know, delete and opt out. We do not sell or share personal information as those terms are defined by the CCPA.

Deleting your account

Open Settings in the app and tap Delete my account. That removes your account, scores, streaks and friends list. Leaderboard entries are removed or anonymised so nobody else's history breaks.

If you no longer have the app, email privacy@clubography.app from the address you signed in with, or tell us your handle, and we'll do it for you.

Children

Clubography is a general audience football game. It is not aimed at children under 13 and we do not knowingly collect their data. If you believe a child has given us information, contact us and we will delete it.

Turning things off

Analytics and attribution — reset or block your advertising ID in Android settings, or turn off "Allow Apps to Request to Track" on iOS.
Notifications — control them in the app's Settings screen, or in your phone's system settings.

Security

Data is encrypted in transit and at rest by our providers. Access to the database is restricted by security rules, so one player can't read another player's account. We hold no card details and no passwords ourselves.

Changes to this policy

If we change what we collect, we will update this page and change the date at the top. Significant changes will be flagged in the app rather than published quietly.