Privacy Policy
This policy explains what information the VR game Touchline ("the game", "we") collects, why, who we share it with and the choices you have. We keep it short because we collect very little.
1. Who we are
Touchline is developed and published by Cookie Tag Studios ("we", "us"). For anything about your data, use our contact form. Where UK or EU data protection law applies, we are the controller of the data described here.
2. What we collect
| Data | Why | Kept |
|---|---|---|
| Game account ID: an anonymous ID created for your headset (a PlayFab player ID). We do not receive your Meta account name, email or password. | To sign you in, keep your progress and apply moderation. | Until you ask us to delete it. |
| Username you choose in the game. | Shown to other players on your nametag, in the roster and in chat. | Until changed or deleted. |
| Match statistics: matches, wins, draws, goals, MVP awards, ranked rating and leaderboard scores (crossbar challenge), weekly-event progress. Your profile (username, these stats, rank and club) can be viewed by other players. | Your stats, your public profile and fair matchmaking. | Until deleted. |
| Club: the club you create or join (name, tag, members, your role). | Showing your club tag and running the club. | Until you leave or the club is deleted. |
| Purchases: when you buy in the Shop or tap Restore purchases, your Meta user ID and a one-time Meta proof are sent to our service, which asks Meta which Touchline items your Meta account owns. We store the Meta purchase ID, the item, your Meta user ID and the Touchline account it was credited to. We never receive payment or card details. | Unlocking items you bought, restoring them, and preventing fraud. | As long as you have the item / account, plus legally required records. |
| Items and badges sent to you (e.g. creator badges, boot styles), and which ones you equip. | To show them on your player. | Until deleted. |
| Reports you send or that are sent about you: player IDs and usernames, category, optional note, match code and time. | Keeping the game safe (moderation). | Up to 12 months, longer if needed for an active ban. |
| Moderation records: bans and voice mutes, their reason and duration. | Enforcing the Code of Conduct. | For the length of the sanction plus 12 months. |
| Contact form messages: what you write, and the username, player ID and reply contact you choose to give. | To answer your request. | Up to 12 months. |
| Error reports: when the game hits an error it sends the error message, where in the game's code it happened, the game version and the headset model. No personal data. | Finding and fixing bugs. | Up to 12 months. |
| Technical data: IP address and connection information processed by our network and hosting providers while you play; basic error logs. | Connecting you to matches, security and fixing bugs. | Short-lived provider logs (typically days to weeks). |
Voice chat. When your microphone is on in a match, your voice is sent live to the other players in that match. It is never recorded or stored by us. You can switch your mic to push-to-talk or off, and mute any player, in the menu. Microphone access needs your permission on the headset.
Text chat is delivered live to players in the match and is not stored by us, except the text you include in a report.
We do not collect your real name, email, location, contacts, payment details, body or face tracking, or eye-tracking data. We do not sell your data and we do not use it for advertising.
3. Who we share it with
- Other players in your match see your username, avatar, badge, boots and hear your voice.
- Microsoft PlayFab stores your game account, username and statistics.
- Photon (Exit Games) relays match network traffic, including voice, between players.
- Cloudflare hosts our moderation service (reports, sanctions, items).
- Meta: the game uses the Meta Platform SDK to check that you own Touchline and to run Shop purchases (Meta handles the payment and tells us which items you own). Meta's own privacy policy applies to your Meta account.
- Authorities, if the law requires it or to protect someone from serious harm.
These providers process data for us under their own security and privacy terms, and may store it outside your country (for example in the EU or US) with appropriate safeguards.
4. Legal bases (UK/EU)
We use your data to provide the game you asked for (contract), to keep players safe and the game secure (legitimate interests) and, for the microphone, with your permission (consent), which you can withdraw at any time by turning the mic off.
5. Your choices and rights
- Change your username, turn your mic off, mute or block players and report abuse, all inside the game.
- Ask us for a copy of your data, to correct it, or to delete your account and data: send us a message through our contact form with your username and a way to reply to you. Your player ID is shown in the game's Settings page. We respond within 30 days.
- Where applicable you can also complain to your data protection authority (in the UK, the ICO at ico.org.uk).
6. Children
Touchline follows Meta's age rules for Quest. The game is not intended for children under 13 and we do not knowingly collect data from them. If you believe a child under 13 is using the game, contact us and we will delete their data.
7. Security and changes
We keep data to the minimum, use encrypted connections, and limit moderation tools to a small number of authorised staff accounts. If we change this policy we will update the date above and, for important changes, tell you in the game.