What this covers
17-0 is a football game published by DigitalCraft AI, playable in a browser and as a mobile app. This policy covers the game. The publisher's website, its contact forms and its interactive demos behave very differently and have their own policy at digitalcraftai.com/privacy.
The game does not want your identity, and it is built so that it does not need one. The iPhone and Android apps carry no ads and no advertising identifiers. The browser version at 18-0.co shows ads, described below. There is no tracking across other apps or websites by the game itself, and nothing is sold or shared with data brokers. There is no error monitoring and no session replay in the game. It sends gameplay analytics to one processor, described below.
Playing without an account
You can play without signing in or giving us anything. Casual games are held on your device and never sent anywhere.
What is stored when you play ranked
Ranked play puts a score on a shared leaderboard, so it needs something to attach that score to. The game creates an anonymous account automatically: a random identifier, with no email address, no password, and no name attached to it unless you choose one.
- An account identifier. A random value. It is not derived from your device, your phone number, or anything about you.
- A display name, if you set one. You choose it, it is visible to everyone on the leaderboard, and it can be changed once a month. Until you set one you are given a generated placeholder.
- Your ranked games. The roster you built, the rating and record it earned, and when it was played.
- Reports you file about another player's display name, so the same name is not reported twice by the same person.
- A record of server requests. Each request the game makes is logged with a request identifier, the account that made it, what was asked for, whether it was allowed or refused, how long it took, and which kind of client sent it. This is how forged scores and abuse are detected, and how a disputed leaderboard entry can be checked. It contains no message content and nothing about you beyond the account identifier.
Signing in
Signing in is optional and nothing in the game is gated on it. If you choose to sign in with Apple or Google so your seasons survive losing your phone, that provider tells us the email address on the account. Apple lets you hide it behind a private relay address, and that works here. Signing in attaches the provider to the anonymous account you already have, so the seasons you have already played come with you.
Gameplay analytics
The game records how a session went — spins taken, which positions stall people, how long a pick takes, which mode was played, whether a season was finished or abandoned — so the game can be tuned. This is kept on your device and is also sent to PostHog, a product analytics processor, on servers in the United States.
What is sent
Gameplay events and their settings, the platform you played on, a random identifier generated on your device, and — if you have set one — your display name. Ratings are sent as bands such as 93–96, never as exact values.
What is never sent
Your email address, the identity your Apple or Google account gave us, and the rosters and players you picked.
Why
To understand which parts of the game work — whether people who try a mode come back, where a first session ends, which screens people never reach. It is not used to advertise to you, and it is not combined with anything from another app or website.
Signing out
Signing out clears the identifier on your device, so a later session on the same phone is not attached to the account that left.
This is first-party analytics, not tracking. It measures how this game is used and nothing else. There is no advertising network involved, no identifier shared with one, and no profile of you assembled from other apps or websites.
Ads in the browser version
The browser version at 18-0.co shows an ad below a finished season and, at most every few minutes, between seasons. Every ad resolves at once when there is none to show, and an ad never decides a score. The apps show none of this.
Ads are chosen by Marquee, the publisher's own ad server at mutaafaziz.com, which counts impressions and clicks in aggregate only: no visitor identifier, IP address or device data is recorded. When an ad comes from Google AdSense, Google's own policy applies to it. The full ad policy, including how to opt out of personalised ads, is at mutaafaziz.com/ads/privacy.
Where it is kept
Game data is held on Supabase, in a database hosted in Northern California, United States. If you are outside the United States, playing ranked means that data is stored there.
Gameplay analytics are held by PostHog, also in the United States.
The web build of the game is served by Vercel, and mirrored on GitHub Pages. Both receive the ordinary request information any web server does, including your IP address.
Deleting it
Delete my account is inside the game, on the Account screen. It does not require contacting anyone. It permanently removes your account, your display name, and every ranked game attached to it. Your leaderboard entries go with them, and the gameplay analytics attached to that account are deleted from PostHog on the same request.
One thing survives, and it is worth being plain about. The record of server requests described above is append-only. Nothing, including us, can edit or delete a row once it is written. That is deliberate: a log that could be quietly rewritten could not be used to settle a dispute about a score.
What remains in it is the random account identifier and what that account asked the server to do. After deletion that identifier no longer corresponds to any account, any name, or any game. It is kept because an integrity record that the person it records can erase is not an integrity record.
Children
The game is not directed at children under 13, and we do not knowingly collect anything from them. There is no way for one player to send another a message, and the only thing a player can publish is a display name, which is filtered when it is chosen and can be reported by anyone.
Your rights
Depending on where you live, you may have the right to access, correct, or delete what is held about you, and to object to its processing. In the game, deletion is built in and is immediate. For anything else, write to us.
Because game accounts are anonymous by design, we usually cannot connect a request to an account without the account identifier, which you can find in the game. Asking for it is not an attempt to collect more about you. It is the only link that exists.
Changes
If this changes, the date at the top changes with it, and the history of this page is public in the project repository.