1. Introduction
This policy explains what personal data Title Rivals collects, why we collect it, how we use it, and the rights you have over it. By creating an account or using the service, you agree to this policy. If you do not agree, please do not use Title Rivals.
Title Rivals is operated by Nizam Chishti, an individual based in the United Kingdom. Under UK and EU data protection law, this means we act as the data controller for the personal data described below. You can reach us at any time through the in-app Help & Support page.
2. Information We Collect
- Account details: your name, email address, and an encrypted (hashed) password.
- Gameplay data: clubs you manage, tactics, squads, matches, transfers, messages you send, bug reports, and feature ideas you submit.
- Technical data: IP address, browser user-agent, and session timestamps, used to keep you signed in and to protect against abuse.
- Page visit history: a short-lived record of which pages you visit within Title Rivals (path, route name, response status, and timestamp) so we can investigate support enquiries and detect abuse. We deliberately do not store IP address or browser user-agent on these rows, and we automatically delete them after 30 days.
- Push notification tokens: if you choose to enable push notifications, we store a device token issued by your browser so we can deliver alerts.
- Acquisition signals: if you arrive at the registration page from a marketing link (e.g. utm_source) or an external website, we record those values onto your account at sign-up time so we can understand where new managers came from. We do not set any cookie or store anything in your browser to do this.
We do not collect payment details or special-category data. Title Rivals is not advertising-funded.
3. How We Use Your Information
- To run the game — authenticate you, simulate matches, deliver in-game messages and notifications.
- To operate competitions fairly — for example, showing your club's results to your league rivals.
- To present public ranking surfaces. Your manager name, club name, and aggregate match statistics may appear on pages that visitors and search engines can read without signing in (such as the global rankings page). You can opt out at any time from the Profile tab in your account settings; while opted out, your manager appears anonymously as "Private Manager" on those public surfaces and your name is excluded from the structured data that search engines index.
- To respond to bug reports, feature ideas, and support enquiries you send us.
- To protect the integrity of the game — detecting abuse, cheating, or violations of the Terms of Use.
- Title Rivals staff may review messages — including private league chat — to investigate abuse reports and protect the integrity of the game. Each content review is logged in an internal audit trail. We do not notify users of individual reviews, but we also do not monitor for any purpose other than safety, moderation, and abuse prevention.
We do not sell your personal data to third parties, and we do not use it for advertising.
Our lawful bases under UK GDPR are:
- Contract: processing your account and gameplay data is necessary to provide the service you signed up for.
- Legitimate interest: protecting the integrity of the game (anti-abuse, anti-cheat) and improving the service.
- Consent: where you have given it, such as enabling push notifications or receiving game emails (kickoff reminders, results, prep deadlines). You can withdraw consent at any time from the Notifications tab in your account settings, which lets you opt out of any category individually or pause everything optional at once.
4. Cookies and Local Storage
Title Rivals only uses storage that is strictly necessary to run the service. We do not use advertising cookies, tracking pixels, or third-party analytics. Because of this, we do not show a cookie consent banner.
- Session cookie: keeps you signed in across pages.
- CSRF token: protects against cross-site request forgery attacks on forms.
- Language cookie: remembers your chosen language so the interface stays in your preferred locale between visits.
- Local storage preferences: remembers small UI choices you make (e.g. whether a panel is open or a prompt has been dismissed).
You can clear these at any time from your browser settings. Clearing the session cookie will sign you out.
5. Third-Party Services
We rely on a small number of service providers to run Title Rivals. Where your data is processed by them, it is processed only to deliver the service:
- Laravel Cloud — hosting, database, and queue infrastructure.
- Firebase Cloud Messaging (Google) — only if you enable push notifications; used to deliver alerts to your device.
- Laravel Nightwatch — server-side performance and error monitoring. No browser-side tracking.
- Email delivery provider used to send password resets, account emails, support replies, and game emails you have not opted out of (such as kickoff reminders, match results, and prep deadline alerts).
Some of these providers, such as Firebase Cloud Messaging, are based outside the UK and the European Economic Area (EEA). Where personal data is transferred internationally, the provider relies on appropriate safeguards approved under UK and EU data protection law — typically the UK International Data Transfer Addendum and EU Standard Contractual Clauses.
6. How Long We Keep Your Data
- Account and gameplay data is retained while your account is active.
- If you request account deletion, we will remove your personal information within a reasonable time. Anonymised match results may be retained to preserve league history.
- Technical logs are kept only as long as needed to operate and secure the service. Page visit history is automatically deleted after 30 days.
7. Your Rights
Under UK and EU data protection law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your account and associated personal data.
- Receive a copy of your data in a portable format.
- Object to or restrict how your data is processed.
To exercise any of these rights, contact us via the in-app Help & Support page.
You can also limit the public visibility of your manager at any time by toggling "Show my manager publicly" off in the Profile tab of your account settings. This is a self-serve control and does not require contacting us.
You also have the right to lodge a complaint with a data protection supervisory authority. In the United Kingdom this is the Information Commissioners Office (ICO) at ico.org.uk. If you are in the EU, you can contact the supervisory authority in your country of residence.
8. Children
Title Rivals is intended for users aged 13 and over. We do not ask for date of birth and we do not actively verify age, but you must not register if you are under 13. If you believe a child under 13 has created an account, please contact us and we will remove it.
9. Automated Decisions
We do not make automated decisions about you that have legal or similarly significant effects. The match engine produces in-game results based on your tactics and squad, but these are gameplay outcomes only — they do not affect your legal rights or any decision outside the game.
10. Security
We use industry-standard measures to protect your data, including encrypted passwords, HTTPS transport, and access controls on our servers. No online service is completely immune to risk, so please also take care of your own account security: use a strong password and do not share your login.
11. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last updated" date above. Continued use of Title Rivals after changes means you accept the updated policy.
12. Contact
For any privacy questions or requests, reach us through the Help & Support page inside the game.