In a nutshell
- Playing requires no sign-up. Your progress stays only on your device until you choose otherwise. If you choose Save to the cloud, the game creates a guest account, with no personal data, to store XP, level, records, creations and some settings. You can turn it off whenever you like.
- Online, your opponent and anyone watching see your display name, your club and the player you created.
- The direct connection only turns on if you choose it. With it, your opponent can see your device's IP address.
- If you sign in with Google or Discord, we only store the identifier of your account there. We never see your password and we don't store your email or photo.
- Your daily challenge score only goes on the public leaderboard if you choose Join today's leaderboard. It appears with your display name (or as “Anonymous”) and stays there for 30 days.
- No ads, no purchases, no tracking and no selling of data.
- You can download or delete your data in the game itself.
- Children under 12 can only save progress to the cloud, play online, link an account or join the leaderboard with the authorization of a parent or guardian.
1.Who is responsible
WebSoccerOnline is a free personal project. The person who decides how data is used (the “controller”, under the LGPD) is an individual:
- Controller
- Sidney Braga Correia Filho
- Contact
- [email protected]
- DPO
- The controller himself acts as data protection officer (the “encarregado”, under the LGPD), at the same email. This is the channel for you and for the Autoridade Nacional de Proteção de Dados (ANPD, Brazil's National Data Protection Authority), as required by art. 41 of the LGPD.
2.What data we use and why
It depends on how you play. Each box shows what is used, who sees it, what for, under which LGPD legal basis and for how long.
Playing on your device
Matches against the CPU (including 2 players on the same computer), the Cup, penalty shootouts, training, challenges and the player and club creators.
- What
- Settings (graphics, sound, camera, controls), challenge records, Cup progress, the player and club you created, the cosmetic items you chose, the name you use online, your age confirmation, your choice about the direct connection, your choices about cloud progress and the daily leaderboard, XP and level, your account's access token (if any) and the last match you set up.
- Where it stays
- In your browser's local storage, on this device. If you choose to save to the cloud, part of it also stays in your account: see Account and cloud progress.
- Who sees it
- Only you.
- How to delete
- Clear the site's data in your browser settings (this also deletes the records and creations on this device). To delete what is in the cloud, use Delete account in the game.
Account and cloud progress
The game works without sign-up, and your progress stays on your device. The first time something would be sent (when you finish your first match, challenge or Cup, or when you open the Account screen), the game asks: Save to the cloud or On this device only. Neither option is preselected and, until you choose, nothing leaves your device and no account is created. “On this device only” is remembered and the game doesn't ask again. If you choose to save to the cloud (or sign in with Google or Discord), the game first confirms your age (see section 9) and creates a guest account. It has no real name, email or phone number: it is a random code tied to this device. What was stored on the device is uploaded along with it.
- What
- A random identifier; your display name, if you choose one on the Account screen; XP and level; a log of each XP gain (so nothing is counted twice); challenge records; the player and club you created; settings that apply on any device (controls, camera, ball control and the cosmetic items you chose); and, for each connected device, the date it signed in and the date it was last used. The access token stays only on your device; on the server we only keep a cryptographic hash of it.
- Google or Discord
- Optional, to take your profile to other devices and not lose your progress. From Google we only request basic identification (the “openid” scope) and only store the code that identifies your Google account. From Discord we only read the account identifier (the “identify” scope), discard the rest and revoke the authorization right afterward. We never see your password and we don't store your email, photo, name or friends list.
- Where
- In a Cloudflare database (Durable Objects), probably in the United States (see section 5).
- What for
- To store your progress, take it to other devices, unlock titles and cosmetic items by level and build the leaderboard.
- Legal basis
- Performance of a contract (art. 7, V), at your request: progress only goes to the cloud if you choose.
- How long
- Until you use Delete account. Without use, we delete it automatically: each connected device is removed after 180 days without use; the guest account is deleted when no connected device remains (for example, after Sign out or after 180 days without playing); an account linked to Google or Discord is deleted after 2 years with no activity and no connected device. The XP gain log is deleted after 60 days.
- How to turn off
- Under Account → Cloud progress: when it is off, nothing new is sent and the game stays the same, with XP, level and records on the device; the account and whatever was already uploaded stay in the cloud. You can turn it back on from the same screen.
- How to delete
- Under Account → Delete account: immediately deletes everything in the cloud (profile, XP, connected devices, the link to Google or Discord and your leaderboard rows) and leaves cloud progress turned off on this device.
Anyone who already had a guest account created automatically by the previous version of the game gets the same question once; until they answer, nothing new is sent. “On this device only” stops syncing, and whatever was already uploaded can be removed with Delete account.
With 2 players on the same computer, XP and records go only to this device's account, which belongs to Player 1; nothing from Player 2 is sent. If you sign in with Google or Discord on a device with guest progress and that Google or Discord account is already linked to another game account, the two are merged: the higher XP is kept, the records are combined and the guest account is deleted.
When you sign in with Google or Discord, those companies process your data under their own policies: Google's privacy policy and Discord's privacy policy.
1-on-1 online play by link
- What
- The display name you type (up to 16 characters), the club you chose, the club and player you created (name, crest, colors and appearance) if you use them, the goal effect and celebration you chose, the room settings, your controller commands during the match and ping measurements. A random token is stored in the browser tab so you can return to the room if the connection drops.
- Who sees it
- Your opponent and anyone watching (up to 8 people with the room link) see your display name, your club, your player and the effects you chose. Spectators never see your IP address.
- Where
- Room servers in Brazil (Fly.io, in São Paulo) and, as a backup, in the United States (Cloudflare).
- What for
- To create the room, bring the two players together, run the match and broadcast it to spectators.
- Legal basis
- Performance of a contract (art. 7, V): you asked to play online, under the Terms of Use.
- How long
- Only while the room exists, in the server's memory. An empty room is discarded within 10 minutes. We don't keep any history of online matches.
Tip: use a nickname. Don't put your full name, phone number, school or address in your display name. Before your first online match, the game asks you to confirm your age (see section 9).
Direct connection between devices
To reduce lag, the two devices can connect directly (using WebRTC technology), without going through the server. For that, each device needs to know the other's IP address, as in any peer-to-peer game. An IP address can reveal your internet provider and your approximate region.
In your first room, the game asks: Direct connection (faster; your opponent sees your IP address) or Server only. Neither option is preselected and, until you choose, nothing related to the direct connection leaves your device. A direct connection only happens if both players have chosen it.
- What
- Your device's IP address and network ports, exchanged with your opponent's device through the room.
- Who sees it
- Your opponent's device and, with some technical knowledge, your opponent. To find out its own address, your browser queries Cloudflare's public STUN server, which receives your IP address but no game data.
- If it doesn't connect
- The match continues through the room server. When available, a Cloudflare relay server (TURN) forwards the encrypted packets; even then your opponent may see your IP address, because it is part of the connection negotiation.
- Legal basis
- Performance of a contract (art. 7, V), at your request: the direct connection only turns on if you choose it.
- How long
- We don't keep any of it. The direct channel is encrypted and closes when the match ends.
How to change it: in the room, turn Direct connection (lower ping) on or off. Your choice applies to you even if your opponent leaves it on, and it is saved on this device.
Daily challenge leaderboard
Nothing goes on the leaderboard unless you choose. On the daily challenge's final screen, the Join today's leaderboard button warns you that your name will appear on the public leaderboard. The leaderboard needs cloud progress to be on: if it is off, the game explains this and offers to turn it on. The first time on this device, it asks for age confirmation first; anyone who has already confirmed for online play, when saving to the cloud or when linking an account isn't asked again.
After the first entry, the option Send my daily challenge attempts automatically stays on and is remembered on this device; you can turn it off on the final screen itself or under Account. If you don't join the leaderboard, your score stays only on the device, as a record, and you can still view the leaderboard.
- What
- Per account and per day, only the best score: the display name at the time it was sent, the score, the time, the length of the attempt (for tiebreaks) and the account's internal identifier. Anyone who hasn't chosen a name on the Account screen appears as “Anonymous”. The attempt's commands are only used in the server's memory, to replay the match and verify the score, and are not stored.
- Who sees it
- Anyone can see the position, display name and score (the top 50 each day). The account identifier never appears.
- What for
- To build the leaderboard and prevent cheating: the server replays your attempt and only the score it calculates counts.
- Legal basis
- Performance of a contract (art. 7, V), at your request: only those who choose to join take part. For the anti-cheating check, legitimate interest (art. 7, IX).
- How long
- 30 days; after that the row is deleted. If you delete your account, your rows are removed immediately.
- How to stay out
- Just don't join. After joining, turn off Send my daily challenge attempts automatically (under Account or on the final screen) or cloud progress: nothing new is sent. To avoid appearing under your name, leave the display name blank on the Account screen (you will appear as “Anonymous”). To remove scores that were already uploaded, use Delete account.
Replay clips
Clips are generated on your device and don't go to our servers. The clip's sound is only the game's own: the microphone is not used. Clips only leave the device if you share them yourself; in that case, the rules of the app or site where you post them apply. A clip may show the display names of the players in the match: keep that in mind before posting.
Protection against abuse
- What
- The IP address of anyone who connects to our room, account and leaderboard servers (that is how the internet works) and counts of connections, rooms, accounts created and submissions.
- What for
- To limit abuse, such as creating rooms or accounts in bulk, flooding the leaderboard or overloading the server.
- Legal basis
- Legitimate interest (art. 7, IX, and art. 10): keeping the game safe and online for everyone, with as little data as possible.
- How long
- Only in the server's memory, from a few minutes to about an hour. We don't record IP addresses in a database or in our logs. Cloudflare keeps technical request logs (such as the time, the address accessed and network data) in the service dashboard for a few days; hosting providers may also keep technical logs for a short time, under their own policies.
3.What we don't do
- We don't show ads and don't sell anything in the game. Cosmetic items are unlocked by level, never sold, and there are no loot boxes.
- We don't use advertising cookies or third-party tracking or analytics tools. The game only uses the browser's local storage, in order to work.
- We don't sell, rent or trade personal data.
- We don't build behavioral profiles or make automated decisions about you. The only automatic checks are verifying whether a leaderboard score is valid and replacing offensive names.
- We don't ask for identity documents, addresses, phone numbers or sensitive data.
If we ever start counting visits, it will be in aggregate form, without cookies and without identifying anyone, and this policy will be updated beforehand.
5.Data outside Brazil
Cloudflare, Fly.io, Google and Discord are United States companies. The account, the cloud profile and the leaderboard are kept in a Cloudflare database that is probably in the United States; the backup rooms are also there, and Cloudflare's network serves requests from several countries. The main room server is in São Paulo.
This international transfer happens because it is necessary to provide the service you requested (art. 33, IX, together with art. 7, V, of the LGPD), and these providers offer contractual data protection terms.
6.How long we keep it
| Data | Period |
|---|---|
| On your device | Until you delete it in the browser. |
| Online room | While the room exists; an empty room disappears within 10 minutes. |
| Room reconnection token | Until you close the tab. |
| IP address for abuse limits | From minutes to about an hour, in memory only. |
| Temporary sign-in data | Valid for 2 to 10 minutes (single-use codes); any leftovers are removed in the daily cleanup. |
| Device connected to the account | 180 days without use, or until you sign out. |
| Guest account | Until you delete the account, or until no connected device remains. |
| Account linked to Google or Discord | Until you delete the account, or 2 years with no activity and no connected device. |
| XP gain log | 60 days. |
| Leaderboard | 30 days, or until you delete the account. |
| Providers' technical logs | A few days, under their own policies. |
When you delete your account, we immediately remove the profile, XP, connected devices, the link to Google or Discord and your leaderboard rows. The automatic cleanup runs once a day. If the law requires us to keep something, we keep only what is necessary and only for the required period (art. 16).
7.Your rights
The LGPD (art. 18) guarantees you the right to:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request the anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
- receive your data in an open format, to take it to another service (portability);
- request the deletion of data processed with your consent, and withdraw that consent;
- know who we share your data with;
- know when you can refuse consent and what happens if you refuse;
- object to processing that breaches the law;
- file a complaint with the ANPD, at gov.br/anpd (in Portuguese).
How to exercise them
- In the game, on the Account screen: turn cloud progress and automatic sending to the daily leaderboard on or off, Download my data (a file with the account, connected devices, profile, XP gains, your leaderboard rows and whatever is only on the device), Delete account and change your display name. In the online room, turn the direct connection on or off.
- On your device: clear the site's data in the browser.
- By email: any other request, at [email protected]. We reply within 15 days (art. 19).
Since we don't know who you are by name, we may ask you to confirm your request from inside the game, to make sure the account is yours. Parents and guardians can make requests on behalf of children and teenagers.
8.Security
- All communication with the site and the servers is encrypted (HTTPS and WSS), and so is the direct channel between devices.
- The servers only accept connections coming from the game's site, check every message and limit the rate of each connection.
- The account access token stays only on your device; on the server we only keep a cryptographic hash of it. Signing in with Google and Discord uses protections against forged links.
- We keep the minimum: no passwords (sign-in is handled by Google or Discord), no documents and no sensitive data.
- Only the controller has access to the providers' dashboards.
No system is 100% secure. If a security incident occurs that may cause significant risk or harm, we will notify the ANPD and the people affected, as required by art. 48 of the LGPD.
9.Children and teenagers
WebSoccerOnline is made for a broad audience, including children and teenagers: fictional content, no chat, no ads, no purchases and no loot boxes. We follow art. 14 of the LGPD and the Estatuto da Criança e do Adolescente (ECA, Law No. 8,069/1990, Brazil's Statute of Children and Adolescents), always in the best interest of those who play.
- Minimal collection. No one needs to provide personal data to play, and no feature requires more data than is strictly necessary (art. 14, §4).
- Age confirmation. Before the first online match, saving progress to the cloud, linking Google or Discord and the first time joining the leaderboard, the game asks you to choose “I'm 12 or older” or “I'm a parent or guardian and I authorize”. Neither option is preselected; the answer stays only on the device and applies to all of these cases.
- Under 12. Playing against the CPU and training don't ask for personal data, and progress stays on the device. Saving progress to the cloud (in a guest account with no identification — see Account and cloud progress), playing online, linking Google or Discord and appearing on the leaderboard require specific authorization from at least one parent or legal guardian (art. 14, §1).
- Teenagers (12 to 17). They can use the online features, always in their best interest (art. 14 of the LGPD and ANPD Board Statement — Enunciado CD/ANPD — No. 1/2023). We recommend guidance from their parents or guardians.
- Google and Discord have their own minimum age and account rules.
- Parents and guardians: since we don't ask for documents, we can't confirm the age of who is playing and we rely on your supervision. We recommend keeping an eye on online play, using a nickname and choosing “Server only” in the room. If a child played online, joined the leaderboard or linked an account without authorization, delete the account in the game or write to [email protected]: we will delete the data.
For players under 12
You can play against the computer and train as much as you like, without giving any of your data: your progress is saved on the device. Before saving your progress to the cloud, get the person who looks after you. Before playing online with someone, signing in with Google or Discord or sending your score to the leaderboard, get your dad, your mom or whoever looks after you and ask them to read this page with you. Use a nickname, never your real name (not even for the player you create), and don't tell anyone where you live or go to school.
10.Changes to this policy
When the game changes, this policy changes with it. The version and date are at the top of the page. Important changes will be announced in the game or on the site before they take effect. If any change depends on your consent, we will ask for it again.
History
- 1.2 (October 7, 2026): cloud progress and the daily leaderboard now depend on your choice: until you choose, nothing leaves the device and no account is created (including for those who already had an automatically created guest account); “On this device only” is remembered; describes how to turn things off (Account → Cloud progress and automatic sending to the leaderboard) and how to delete (Delete account); age confirmation now also applies to saving to the cloud.
- 1.1 (October 7, 2026): now describes the automatically created guest account and cloud progress, the automatic deletion periods, the leaderboard (what is stored, 30 days, “Anonymous”, automatic sending), the direct connection only after your choice, STUN only from Cloudflare, what we read when you sign in with Google and Discord, 2 players on the same computer and cosmetic items.
- 1.0 (October 7, 2026): first version.
This English translation of version 1.2 was published on October 8, 2026.
11.Contact
Questions, requests or complaints: [email protected]. You can also contact the ANPD.
See also the Terms of Use.