Privacy and Data Policy | Copero Game

Who is responsible and what this covers

Copero Game is the controller of the processing described in this policy. The service is available at coperogame.com and privacy requests can be sent to [email protected]. This policy covers the public website, the browser game, shared result and challenge links, optional analytics and support messages.

You can play without an account, payment or public profile. We do not operate a player database, sell personal data or use gameplay data for advertising, credit, employment, betting or automated decisions that produce legal or similarly significant effects.

Data kept on your device

An active career is stored in sessionStorage for the current tab so a refresh does not erase it. The PNG result card is generated locally. Theme and analytics choices are stored in localStorage, and the language selector may use a session preference cookie named NEXT_LOCALE. These items remain in your browser until the tab closes, you change the setting or you clear site data, depending on the item.

Copero Game does not routinely receive the career stored in your browser. Browser sync, extensions, device backups and a shared URL are controlled by you or by the relevant browser provider and may operate outside this policy.

Site delivery and technical logs

The site is delivered through a hosting and content-delivery provider, currently Cloudflare Pages. Like other internet services, that provider may process IP address, requested URL, date and time, browser or device information, traffic-routing data and security signals to deliver files, prevent abuse and maintain availability. A requested URL may include a query string.

Copero Game does not maintain a separate account log or server-side career database. Hosting and security records are handled under the provider agreement, retention settings and legal obligations. Cloudflare publishes its own privacy policy for end-user traffic processed through customer sites.

Shared result and challenge links

A result link contains a Base64URL-encoded summary: shirt name and number, nation, position, preferred foot, game mode, career totals, five scoring dimensions, score, peak rating, verdict, final fictional club and trophy or award counts. Encoding is not encryption. Anyone with the link can decode, copy or forward it.

A challenge link contains game mode, nation, position, preferred foot and a structure seed. It does not contain the completed choices or full career. Opening either kind of link makes the full URL available to the recipient, their browser and the hosting network needed to serve the request. Avoid a real name or sensitive information as a shirt name. We cannot delete copies saved by recipients or services outside our control.

Optional analytics and cookies

Google Analytics and Plausible are optional. Neither analytics tool is loaded before you accept analytics in the privacy panel. If you reject, the game continues normally. Your choice is saved locally and can be changed through Analytics settings in the footer. Withdrawing consent removes Google Analytics cookies that are accessible to this site and reloads the page to stop further analytics.

After consent, Google Analytics may receive the page path without the result or challenge query string, gameplay event names such as start, completion or sharing, game mode or entry route, approximate location, and browser or device information. Google may set first-party cookies such as _ga and _ga_<container-id> for client and session measurement. Advertising signals and ad personalisation are disabled. We do not send shirt names, career totals, choices or result-card content as analytics properties.

After consent, Plausible measures hostname and path, referrer, browser, operating system, device type and approximate region, and receives the same limited event names and non-personal game properties. Plausible states that it does not use cookies or persistent identifiers, does not store raw IP addresses and discards ordinary query parameters. We still gate it behind the same choice so you control all optional measurement in one place.

Purposes and legal bases

We process the minimum technical request data needed to deliver and secure the service on the basis of providing the service you request and our legitimate interest in operating a safe, reliable website. Browser preferences are used to remember settings you request. Optional analytics is based on consent where consent is required, including for Google Analytics cookies under applicable European ePrivacy rules. You may withdraw that consent at any time without affecting earlier lawful processing.

If you email support, we process your email address, message and any device or diagnostic details you choose to send to answer the request, protect the service and keep an appropriate record. Do not send passwords, government identifiers, health information or other sensitive data. We may also process limited information when necessary to meet a legal obligation or establish, exercise or defend legal claims.

Providers, transfers and retention

Hosting or security data may be processed by Cloudflare; consented measurement data may be processed by Google Analytics and Plausible. These providers may use subprocessors. Google and Cloudflare operate internationally, while Plausible states that its hosted visitor data remains in the European Union. Where applicable, transfers rely on provider contractual safeguards such as approved standard contractual clauses or another lawful transfer mechanism.

The active career normally ends with the tab session. Local preferences remain until changed or cleared. Google Analytics user-level and event-level retention for a standard property is configured for no more than 14 months; aggregate reports may remain longer. Plausible metrics and hosting logs follow the relevant service settings and are kept only while needed for measurement, delivery, security or legal duties. Support correspondence is kept only while needed to resolve the matter and maintain a reasonable security or legal record.

Your privacy rights

Depending on where you live and which law applies, you may request confirmation and access, correction, deletion, restriction, portability, information about recipients, or objection to certain processing. You may withdraw consent at any time. EEA and UK users may also complain to their local data-protection authority. Brazilian users may exercise the rights in Article 18 of the LGPD and complain to the ANPD.

Where the California Consumer Privacy Act applies, California residents may request to know, access, correct or delete covered personal information and may exercise applicable opt-out and non-discrimination rights. Copero Game does not sell personal information or share it for cross-context behavioural advertising, and does not knowingly use sensitive personal information for an additional purpose requiring a right to limit.

Send a request to [email protected]. We may ask for enough information to verify the request and protect other people. Because there is no account and most data is local or aggregated, we may be unable to connect an analytics record to you; we will explain this rather than collect extra identification unnecessarily.

Children, security, changes and contact

Copero Game is intended for users aged 13 or older and is not directed to younger children. We do not knowingly create profiles for children or collect their contact details through the game. A parent or guardian who believes a child sent personal information can contact us for review and deletion.

We use data minimisation, local processing, encoded input validation, HTTPS and hosting security controls, but no internet service can promise absolute security. Report a privacy or security issue to [email protected].

We will update the review date when this policy changes. If a material change requires fresh consent, optional analytics will remain disabled until that choice is obtained. Questions, rights requests and complaints can be sent to [email protected].