Privacy

What we store

• Your account: email address, an optional display name and a securely hashed password.
• What you enter: team names and colours, player names, shirt numbers and positions, tactics boards, fixtures, lineups and match plans, including private notes.
• Published briefings: a frozen copy of the parts of a plan you chose to share.

Who can see it

• Everything in your account is private to you. Other users can't see or change it.
• A published briefing can be opened by anyone who has its link. It shows only the sections you included, the lineup (with any roles and instructions you add), set-piece jobs, the sub plan and the match details. It never shows private notes, your full squad list or your account details.
• You can revoke a link at any time. After that it shows “briefing unavailable”.
• Share links are never stored in readable form. We keep only a one-way fingerprint of each link.

Usage statistics

We count a few actions, such as a briefing being published, viewed or exported, to see whether Touchline is useful. These records use a random id per team and contain only counts and formats, never names, notes, email addresses, links or diagrams. They can't be linked back to a team once it's deleted. There are no advertising or third-party tracking cookies. The only cookie keeps you signed in.

Where it lives

Data is stored in a managed Postgres database with sign-in provided by Supabase. The app is hosted on Vercel. Both act as our processors.

Deleting things

• Deleting a team permanently removes its squad, tactics, fixtures, plans and any shared links.
• Archiving a player hides them from new lineups but keeps them in past briefings.
• To delete your whole account, contact the team that runs this site. Self-service account deletion isn't built yet.