Privacy

Who operates Touchline

The operator and data controller is Zahi Cohen, an individual developer operating under the Muchita AI name from Israel. For privacy questions and requests, email support@muchita.ai.

What the game uses

The football simulation and graphics run on your device. The current game does not send solo match scores to a player-account or ranking service.

• Hosting and security. Cloudflare hosts the website and processes ordinary connection information, including IP addresses, browser/device information, requested URLs and traffic/security information, to deliver and protect it. Cloudflare may run a browser security challenge and set security cookies.
• Your game choices. Browser storage remembers sound, vibration, left-handed controls and whether to show the controls guide. These choices are not advertising identifiers.
• Online seat recovery. Joining a match stores a random room-specific identifier in your browser and sends it to the match server to recover your seat after a reload. The server also handles a page identifier, seat assignments and departure times.
• Support and privacy messages. If you email us, we receive your email address, message and attachments to handle your request. Avoid sending passwords or payment details. Parents should contact us on behalf of children under 13.

Online play and saved preferences are optional. You are not legally required to provide game information. Ordinary connection information is needed to serve and secure the website; blocking those connections can prevent it from loading. Blocking browser storage can prevent preferences or seat recovery from being remembered.

Online matches

Before creating or opening a match connection, the game asks whether you are under 13 or 13 or older. That choice stays in the current page's memory, is not sent to the match server and is not saved between visits. It is a self-declaration, not verified age or parental consent. Choosing under 13 leaves you playing against the computer.

Online play exchanges connection information and game state with the other player. Cloudflare pairs the two seats and relays connection negotiation, and game packets when a direct connection is unavailable. Cloudflare and Google STUN services help establish direct connections. The other participant may receive your network/IP-address information through WebRTC.

Use private invite links with people you trust. Anyone holding or receiving a forwarded link can join; the game does not verify that an opponent is your friend. There is no player text, voice or video chat, and the game does not request microphone or camera access.

Browser storage and retention

Game preferences stay in your browser until its site data is cleared. Saved room-recovery records have a 24-hour lifetime; expired records are removed when you next visit the game or reconnect. Existing records from older versions receive that lifetime on their first visit to this release. A live page can keep its connection identifier while you continue playing. If local storage is unavailable, room recovery may instead last for the tab session or current page. Clearing site data removes saved choices and seat-recovery information.

The match server schedules cleanup of stored seat/departure information after one day. Live connections retain connection identifiers while they remain open; a departure record created after an earlier cleanup receives a new one-day cleanup schedule. Leaving a match closes your connection. Cloudflare's SQLite recovery history can retain earlier room contents for up to 30 days. Room cleanup does not delete provider security records.

Persistent Worker application logs are disabled for this release. Cloudflare's separate network/security records have their own retention criteria, including service operation, security investigations and legal obligations, described in its privacy policy. Its cookie documentation explains security-cookie purposes and lifetimes.

Touchline support/privacy correspondence is deleted within 12 months after a request is resolved, except information needed for a specific legal obligation, dispute or security investigation. Such retained information is limited to that purpose and deleted when it is no longer needed. Unsolicited messages received directly from a child under 13 are used only for a one-time response and deleted promptly afterward, unless a specific safety or legal obligation requires otherwise. Ongoing support for a child must go through a parent. Mailbox deletion is handled by the operator; it is not an automatic game feature.

Providers and international processing

Cloudflare, Inc. provides hosting, security and match-room services. Google provides the STUN connection service used for online play, under its privacy policy. This use of Google is separate from Google Analytics or advertising, which are not enabled.

Information may be processed outside Israel, including in the United States and other locations where providers operate. Cloudflare's Data Processing Addendum describes its processor obligations and transfer safeguards, including applicable standard contractual clauses. Contact us for information about safeguards relevant to your data.

We use game information to operate and secure the service, remember your requested choices and handle support/privacy requests. We do not use it for targeted advertising or sell it. We may disclose necessary information when law requires it or to address a specific security or legal incident.

For children and parents

Children can play against the computer. Online matches are restricted to ages 13+ for this launch. There are no child accounts, public player profiles or stored rankings. We do not ask children for names, email addresses, birth dates, photographs or precise location in the game.

For a child's computer-opponent play, network/security information is used to deliver the website, perform network communications and protect the service. Saved preferences remember choices on the device. Identifiers used for those internal operations are not used to contact a child, for behavioral advertising or to build an individual profile for other purposes. Solo game state stays on the device, there are no account, analytics or advertising features, and selecting under 13 prevents the online room and connection services from being opened. Room identifiers are specific to each room and are not reused across rooms for tracking.

A parent can ask to review, correct or delete identifiable child information held by the operator, or refuse further collection/use, by emailing support@muchita.ai. We may need enough information to locate a record and verify the request. Clearing the browser's site data removes local choices; a parent can prevent future requests by stopping access to the website. We cannot operate the website without its necessary hosting/security connections.

Cloudflare is the provider processing the hosting/security information described above. Under-13 users who select their age group do not create a match connection or contact the online STUN services.

Your rights

Depending on applicable law, you may request access, correction, deletion or restriction of identifiable information, object to processing based on legitimate interests, and receive portable data where that right applies. Contact support@muchita.ai. We may need to verify the request and may retain information where a legal exception applies.

Where European or UK data-protection law applies, necessary hosting, security, requested online communications and request handling rely on legitimate interests in providing a safe, functioning game and resolving requests, with attention to children's rights. Processing required by law relies on that legal obligation. You can complain to your local data-protection authority. In Israel, applicable access and correction rights are available under the Protection of Privacy Law.

Changes

The effective date shows when this notice was updated. Accounts, rankings, analytics or advertising will require an updated notice and the applicable privacy, age and consent controls before they are enabled.