Privacy Policy

Last updated October 20, 2026

We store limited game data such as run progress, scores, entry-page attribution, and an optional leaderboard nickname. No personal account is required to play.

New game writes do not store a raw IP address in the live application tables. For rate limiting and leaderboard abuse controls, the Worker converts the network address into a secret-keyed HMAC identifier before a game-database write. That value describes a network identifier, not a person or device. Minute rate-limit rows become eligible for removal after two hours, and HMAC identifiers in game-run and leaderboard rows become eligible after 30 days; the Worker clears eligible rows on subsequent game-database activity.

Legacy raw values were scrubbed from the live tables during the HMAC cutover. Cloudflare D1 Time Travel is an always-on recovery system, so pre-cutover database states can remain recoverable for Cloudflare's plan-dependent recovery window (currently up to 7 days on Free or 30 days on Paid). Any restore must repeat the live-table scrub before game writes reopen. Cloudflare may also process standard network information to deliver and secure the service under its own infrastructure policies.

We use Google Analytics 4 to understand aggregate sessions, traffic sources, devices, entry pages, and game events. GA analytics identifiers are not joined to game-database network identifiers at an individual level.

Cookies and identifiers

Google Analytics 4 sets first-party cookies such as _ga and _ga_<container> to distinguish sessions and users in aggregate reports. The game itself does not depend on cookies to run, and you can delete or refuse cookies through your browser settings.

Advertising

We are testing one Adsterra display banner in the game interface. When the banner loads, Adsterra and its advertising partners receive the network and browser information needed to deliver it, such as your IP address, browser information and page URL. They may use cookies or similar technologies for advertising, measurement and fraud prevention. This processing is separate from our game database; its HMAC protections do not cover third-party ad requests.

See Adsterra's Privacy Policy and Cookies Policy for their practices and choices. You can also control or block third-party cookies and advertising requests in your browser. The game remains playable when ads are blocked. Google AdSense is not currently enabled on this site.

Contact

For questions about data on this site, email hello@17-0football.com. You can also read more on the about page and the terms.