Last changed 1 October 2026. This page says what Mudcrown keeps about you, why, for how long, and what you can ask for. It is written under the General Data Protection Regulation (GDPR) and the Polish Personal Data Protection Act.
WHO IS RESPONSIBLE
The controller is KB Info Krzysztof Bialowas, Poland. Write to privacy@mudcrown.com about anything on this page. There is no data protection officer; the operator answers in person.
WITHOUT SIGNING IN, NOTHING LEAVES YOUR DEVICE
Your career is saved on your device, in the browser's storage or the app's data, and is never sent anywhere. There are no ads, no analytics and no tracking. Clearing that storage removes the career.
WHAT IS KEPT WHEN YOU SIGN IN
Signing in is only for carrying your careers between your devices, a phone and a browser for example. Nobody else sees anything of yours: there is no leaderboard, no market between players and no chat.
• Your sign-in: the account id the sign-in provider (Google, Microsoft or GitHub) gives, kept only as a one-way scramble (a hash) that names the folder your saves are in.
• Your name: the provider also gives the name of your account there (for Google and Microsoft, your e-mail address). The game shows it in the Online box, so you can see who is signed in. It is not stored with your saves and not put in the game's sign-in token: the app keeps it on your device beside its sign-in, and the site only while the page is open.
• Your careers: a copy of up to 3 careers as the game saves them (the manager name you chose, your club, squad, results and choices), with the time each was last saved and whether from a phone or a browser.
• Technical logs: the hosting keeps connection logs (IP addresses) for a short time for security.
WHY, AND ON WHAT BASIS
• To keep your careers for you and hand them to your other devices, as you asked by signing in (performance of a contract, GDPR art. 6(1)(b)).
• To keep the service safe (legitimate interest, art. 6(1)(f)): the technical logs and limits on how often a device may save.
• To meet legal duties (art. 6(1)(c)) where the law asks.
• Nothing is sold, no advertising is shown, no profile is built and no decision about you is made by automated means.
WHERE, AND WHO ELSE SEES IT
The data is stored in the European Union (Microsoft Azure, West Europe). The processors are Microsoft (hosting, the sign-in and the storage), Cloudflare (the domain's name servers, and forwarding the mail sent to privacy@mudcrown.com; the game's traffic does not pass through it) and the sign-in provider you chose. Where a processor may reach data from outside the EU, it does so under the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
WHAT STAYS ON YOUR DEVICE
The game stores your career and your settings on the device, and, when you sign in, a sign-in token and your account's name (in the app) or one cookie (on the site). If a saved career cannot be read (it is damaged, or from a newer version of the game), a copy of it is kept aside on the device so that nothing overwrites it, until you delete it on the title screen. These are strictly necessary for the game you asked for, so no consent is asked (ePrivacy Directive art. 5(3)); signing out removes the token, the name and the cookie.
HOW LONG
• A career in your account: until you delete it, or until it has not been saved for 2 years, when it is deleted by itself.
• Deleting your account (a button in the game, under Online) deletes every career in it at once and signs you out. Every sign-in token issued before it stops working at once, so the app on your other devices asks you to sign in again. To keep it so, a marker stays: the one-way scramble of the account id and the time of the deletion, nothing else, deleted by itself after 2 years; on another browser still signed in to the site, sign out there too. The career on the device you are using stays there.
• Technical logs: a few weeks, then dropped.
YOUR RIGHTS
You can ask what is kept about you, have it corrected, have it deleted, have its use limited, receive a copy of what you gave in a machine-readable form, and object to the uses based on legitimate interest. Deleting a career or your account is a button in the game; for anything else write to privacy@mudcrown.com. The operator answers within one month. If you think your data is handled wrongly you may complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl) or to the authority of the EU country you live in.
AGE
Signing in is for people aged 16 or older, the age at which a person in Poland may agree for themselves. Anyone may play without signing in. If a younger person has signed in, write and the account is removed.
CHANGES
When this page changes, the date at the top changes with it.