Last updated: September 2026
Third and One ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our football management simulation platform.
We implement appropriate security measures to protect your personal information. Your data is encrypted in transit and at rest, and we follow industry best practices for data protection.
We use Google for authentication, and Apple when you use Sign in with Apple in the iOS app. Their handling of information during authorization is governed by their privacy policies. We do not sell your personal information to third parties.
We do not store passwords — sign-in is handled by Google, or by Apple in the iOS app. We do not use advertising or third-party analytics trackers.
Your active account information is kept while the account exists. Account deletion immediately removes local profile, notification, sign-in-session and provider-identity records and scrubs personal fields from account, invitation and audit history. A pseudonymous account placeholder remains where shared gameplay history needs a stable participant reference and as the non-identifying creator reference on revoked invitation records. Invitation notes, redemption links, active invitation authority, ban attribution and audit payloads are removed.
If an Apple authorization from the iOS app still needs provider revocation, we retain a minimal encrypted and pseudonymous retry record: the encrypted provider credential, its credential-owner identifier and a keyed digest of the Apple subject. It is used only to complete revocation, never for gameplay or marketing, and the retry record is destroyed after Apple confirms revocation. When Apple sends a verified terminal account-deletion or consent-revocation event, a separate keyed security watermark is retained to prevent that terminated Apple identity from being replayed; it does not contain the raw Apple identifier, email, name or plaintext credential.
Random one-time authorization challenge identifiers are removed after expiry plus ten minutes, and signed Apple event receipt identifiers are retained for 30 days to reject replay. Operational telemetry is configured for 30 days. Database backups are retained for 7 days, after which deleted data ages out of those backups.
You can access, correct or delete your personal information at any time. Deletion is self-service and does not require contacting anyone: go to your profile and choose “Delete account”.
Deleting scrubs your email, name, profile picture, provider identity and active sessions and cannot be undone. Every team logo and player headshot you uploaded is deleted, and the teams and players that showed one go back to their default logo and headshot. The limited Apple revocation and security records described above are the exceptions. Because this is a multiplayer game, any team you own reverts to computer control. An active league you commission transfers only to a qualified active member; if none exists, that league is archived rather than granting authority to an arbitrary participant. Shared gameplay history and the creator reference on revoked invitation records remain under an anonymized placeholder and no longer expose your profile identity.
If you are in the UK or EU, these are your rights of access, rectification and erasure under the UK GDPR / GDPR (Articles 15, 16 and 17).