Privacy policy

What stays on your device

The game keeps these in the browser’s or the app’s local storage:

• Your saves (up to three) and the list the menu shows them in, with each team’s name and tag, and the saves set aside when a slot is deleted, overwritten or restored.
• Your settings: language, sound, match speed, autoplay, reduced motion and your last match plan.
• How far you got in the tutorial and tips, and the last “What’s new” you saw.
• Your answer about usage statistics and, if you said yes, the events not sent yet (up to 100).
• Feedback that could not be sent yet (up to 20 messages), with your name and email if you typed them.
• The game’s last errors (up to three: the technical message, the screen and the version), until you send them with your feedback or dismiss them.
• Which feedback questions the game has already asked you, and when it last asked.
• In the Android app: counters that limit how often ads appear, your choice in Google’s ad consent form, and, if you bought it, a mark that the ads are off.
• In the Android app, if you use Google Play Games: which achievements have already been sent to your account, noted with your Play Games player ID, and the match achievements still waiting to be sent; and, for each slot, which cloud copy this device last saw and uploaded.
• On the website: an offline copy of the game, so it loads without a connection.
• If you accept usage statistics: Google Firebase identifiers (on the website, _ga cookies and an installation ID in the browser’s storage).

None of it reaches me, except the feedback and statistics described below. If backup is on for your phone, Android may include the app’s data in your Google account backup, so your saves come back when you reinstall or change phones.

To delete it all, clear this site’s data in your browser or uninstall the app. You can manage the backup copy in your Android settings.

If you write to me

The feedback form sends nothing until you press Send. The game may also open it by itself, with a question and three quick answers, at a few moments: after your first season, after a sacking, when you come back after a long break or when you start over on top of a career. It asks three times at most, and never twice in a week. When you press Send, it sends:

• What you write: category, severity (for bugs), message and star rating, plus your name and email if you add them.
• Technical details to reproduce bugs: game version, platform, language, time zone, screen and window size, browser (user agent), whether you were online, the screen you wrote from, how many saves and unsent messages you have, your game settings, the time, and how long the form was open (to filter out bots).
• A summary of the career you have loaded, unless you untick its box: difficulty, era, division, season and week, squad ratings, standings and ranking, finances, titles, staff, facilities and academy, plus the era, division, season and difficulty of each save slot. Never player or team names.
• If you tick its box, the last errors the game kept on your device: the technical message, where in the code it happened, the screen, the version and the time. An error message can include text from your save, such as your team’s name.

It goes to a small server on Vercel, which emails it to my inbox through Resend. It is not stored in any database. I use it only to read it, fix bugs and, if you left an email, reply to you. I never sell or share it.

I keep it in my inbox while it is useful, and I delete it whenever you ask. The legal basis is your consent: sending it is your decision.

• me@joseba.dev

Usage statistics (optional)

They are off until you say yes. The game asks once, on the Home tab after your first week, and the question waits there until you answer. You can change your answer at any time in Settings, under “Usage statistics”.

If you say yes, the game sends events about how your career goes. Each carries only the context it needs, such as era, difficulty, season, week, division or how the tutorial went:

• Saying yes to statistics.
• Starting a career, coming back to it (after how many days away) or abandoning it, which includes starting a new one over its save.
• Finishing a week, a match (watched or simulated, and whether you won), a season (your place, and whether you were promoted, relegated or sacked) or a LAN (how far you got).
• Upgrading the gaming house or the academy.
• An error in the game: what kind, on which screen and in which version — never its message.
• Answering or dismissing a feedback question the game asked: which question, and how it ended — never your answer.
• Sharing a moment of your career: which kind of moment (a title, a comeback…) and how it left the game (the share sheet or a download) — never the image, the club or who you shared it with.
• In the Android app: seeing a full-screen ad (which kind, and at which pause), the outcome of the ad consent form, and how buying or restoring the ad-free purchase ended.

Never player or team names, your email or the contents of your save. The quick tournament sends nothing.

Google Firebase Analytics adds its own automatic events (first open, session start, app update) and collects a random installation ID, the device or browser model and system, the language, the app version and an approximate country inferred from your IP address. It does not read the advertising ID, and its advertising features are off. On the website the tool is served from csmanager.pro and only contacts Google’s servers after you say yes.

Google processes this data on my behalf, only so I can see how the game is used: where people get stuck and which parts they really play. The legal basis is your consent. Event-level data is kept for two months; aggregate reports, which identify no one, may be kept longer.

If you withdraw your consent, nothing more is sent and pending events are deleted. In the app, the installation ID is reset. On the website, the _ga cookies are deleted, but Firebase’s installation ID stays in the browser until you clear this site’s data.

Ads and purchases Android app only

The Android app shows Google AdMob ads: they are how it pays for itself. The website shows none.

• A banner at the bottom of the screen, below the navigation bar.
• A full-screen ad at some pauses: a new season, the end of a LAN and some returns from a match.
• Sometimes, a full-screen ad when you come back to the app after a while.
• Never during a match, in the first week of a career or in the quick tournament, and always within a limit on how many you see.

Before requesting any ad, the app shows Google’s consent form where the law requires it (for example, in the European Economic Area, the UK and Switzerland). There you decide whether Google may use your data for personalised ads; if you don’t agree, the ads you see are not personalised. You can change your choice at any time in Settings, under “Ad privacy” (it appears when the form applies to you).

To show and measure ads and to prevent fraud, Google collects the device’s advertising ID, your IP address (and from it an approximate location), information about the device and the app, and how you interact with the ads. Google does this as an independent controller, under its own policy. The ads never learn anything about your save.

Ads are limited to content suitable for teenagers. You can reset or delete your advertising ID in Android’s settings. Without a connection there are no ads, and the game plays the same.

The app also has one thing to sell: a single purchase that removes the ads for good. Google Play charges it and handles the payment — I never receive your card details, your name or your address, only an anonymous order in Play Console. The purchase belongs to your Google account, not to this device or to a save, so it comes back whenever you sign in with that account. All that is kept on your device is a mark that says the ads are off.

• How Google uses this data

The website Website only

• Vercel hosts csmanager.pro and processes your IP address to serve the pages.
• Cloudflare Web Analytics counts visits and the screens they open. Once the page has loaded, a script from Cloudflare sends the address of each screen (without anything after “?”), the page you came from, your browser, system and device type, and how fast the page loaded; Cloudflare infers an approximate country from your IP address and discards the address without storing it. It sets no cookies, stores nothing on your device and identifies no one. The legal basis is my legitimate interest in knowing how many people visit the game and how well the website works.
• Fonts and every other file come from csmanager.pro itself: apart from that script, nothing loads from third parties unless you accept usage statistics.
• The donation link opens Ko-fi, and the link at the foot of the menu opens joseba.dev, my own site: both are separate sites with their own policies.

The Android app Android app only

The app only goes online for the ads, for the purchase, to send feedback, for your Google Play Games achievements and saves and, if you said yes, for statistics. Offline it plays exactly the same.

It asks for these permissions:

• Internet access and network status.
• Keeping the device awake for a moment while data is sent.
• The advertising ID and Android’s ad services (ad ID, attribution and topics), for the ads.
• Making purchases through Google Play.
• Running a foreground service: a library declares it, and the game doesn’t use it.

It doesn’t touch your camera, microphone, contacts, photos or location, and it doesn’t read where you installed it from. The app sends no crash reports by itself: it keeps its last errors on your device, and they only leave it inside feedback you send or, if you accepted statistics, as a count with no text. Google Play collects the app’s crash reports, and handles downloads and updates, under its own policy. After a title, a promotion or a LAN win, the app may ask Google Play to show its window for rating the game. Google Play handles the rating: the app never knows whether you rated it or what you wrote.

If you use Google Play Games, the app signs in with your profile and sends it the achievements you earn, and your progress on the ones that count up, such as seasons played. The first time, it also sends the ones your career had already earned. Google Play Games stores and shows them, under its own policy. The app only reads your Play Games player ID and name, to show your name in Settings and to avoid sending the same thing twice. Without Play Games, or signed out, the game plays exactly the same.

If you use Google Play Games, the app also keeps a copy of each save slot in your account (in Play Games’ “Saved games”), with the team’s name, the era, the season and the week; Google also records the phone’s model and the date. It uploads it on its own when you leave the game and when a season turns, and only brings it to this phone when you ask for it in Saves. I don’t see it: Google keeps it in your account, under its own policy. You can delete the copy of an empty slot from Saves, and all the game’s data in Play Games from Play Games’ settings.

Who handles data

These are the services involved. The ones that work for me only process data on my instructions; independent controllers decide how they use it, under their own policies.

Most of these companies are based in the United States, so data may be processed outside the European Union, under the transfer safeguards set out in their terms.

Children

CSManager is not aimed at children under 13, and I don’t knowingly collect their data. The game doesn’t ask your age. If you are under the age at which your country lets you consent on your own (14 in Spain), don’t send feedback or accept statistics without a parent’s or guardian’s permission. If I find out I have received a child’s data without it, I will delete it.

Your rights

I, Joseba Osés, am the controller of this data. You have the right to:

• Access the data you have sent me, correct it or have it deleted.
• Object to or restrict how I use it, and get a copy in a portable format.
• Withdraw your consent at any time, in Settings, without affecting what happened before.
• Complain to your data protection authority (in Spain, the AEPD).

To exercise them, write to me at me@joseba.dev. Usage statistics carry nothing that tells me who you are, so for those, withdraw your consent in Settings.

• me@joseba.dev
• AEPD

Changes

I will update this policy when the game adds something that affects it, such as optional accounts. The date at the top shows the version in force.

This policy is available in nine languages. If a translation differs from this English version, the English version prevails.