Privacy
Last updated 7 September 2026
Pocket League is a private game made for one family. It is not a business, it shows no advertising, and it has nothing to gain from collecting anything about you.
What stays on your device
By default, everything. Player names, cards, decks, game history and league records are stored in your browser on the device you played on. If you never sign in, none of it is ever sent anywhere, and clearing your browser data deletes it permanently.
What happens if you sign in
Signing in with Google is optional and exists only to copy your games off this phone. When you sign in we receive an identity token from Google and read exactly two things from it: your Google account’s unique id and whether the email on it is verified. We use the id to know which family a saved game belongs to.
We do not receive or store your Google password, your contacts, your calendar, your files, or anything else in your Google account. The permissions requested are the minimum Google offers for sign-in.
Once signed in, the profiles, cards, decks and completed games on that device are copied to a private database. Only an account on the parent list can read them. Copying them off is all that happens today — see below for what that does and does not protect you from.
Photographs of cards
The app can photograph a physical trading card so you can add it to a collection. Automatic card reading is switched off. While it is off, the full-size photograph is used to make the small picture for the card and is then discarded. It is not sent to us and it is not kept.
One exception, and it stays on your own phone. If the app cannot reach us to ask whether reading is available — you are offline, or it is the first moment after opening — the full-size photograph is kept on the phone. It stays there. Learning later that reading is switched off does not delete it: at most twenty are held, the oldest making way for the newest, and clearing the app’s data removes them all. None of them are ever sent while reading is off.
If a parent turns it on, that full-size photograph is sent to an outside company’s service to read the printing on the card, and the answer comes back as text. We do not keep it. What that company does with it is governed by their terms, not by this app, and we are not in a position to promise you otherwise.
The small picture on each card is a different thing, and it is stored. If you are signed in, your cards are copied to the family’s private space, and each card carries its little picture with it. That is how a card looks like your card rather than a blank. Nobody outside the family list can read any of it. If you are not signed in, nothing leaves the phone at all.
Children
A child’s “profile” in the game — the nickname and colour they play under — is created by a parent and kept on the device. It is not an account and needs no sign-in.
Separately, some of the children do have their own Google accounts and a parent has added them to this household. Signing in backs up what is on that phone — its cards, decks and finished games — to the family’s own space, so a lost or wiped phone is not a lost collection. Everyone on the list writes to the same space, and nobody outside it can see any of it: an account that has not been added is refused, and every stored row is scoped to the household it belongs to.
What signing in does not do yet is fill a new phone from that backup. The app uploads; it does not yet download. Install the game on a second device today and it starts with the standard set of cards, not the family’s. This page says so rather than describing the feature we intend to build, because a promise about where your data goes is worth nothing if it describes something that has not been written.
The device is the boundary. Anyone holding an unlocked phone with the game on it can open the settings and change or delete cards. There is no separate passcode inside the app: a code every child watches a parent type protects nothing, while making the app harder to use. Signing in to the cloud is the one thing that does require a parent’s Google account.
What the app measures, and where it stays
The app keeps a small record of how games go — how many were started and finished, how long they took, how varied each player’s choices were, and anything that went wrong. A parent can see it under Insights and export it.
None of it leaves the device. There is no analytics service and no reporting endpoint; the record lives in the same browser storage as your cards and is capped so it cannot grow without limit. It exists so the game can be improved from what actually happened rather than from guessing — and it records profile ids, never a child’s name.
What we never do
- No advertising, and no advertising identifiers.
- No analytics, no tracking pixels, no cookies for tracking.
- No selling or sharing of anything, to anyone, for any purpose.
- No location data, no contacts, no microphone.
- No face recognition, and no attempt to identify people in photos.
Deleting your data
Clearing the site’s data in your browser removes everything held on that device. To have anything held in the backup deleted, email the address below and it will be removed.