Privacy

The short version

• No photo is uploaded to the web page. Photos, badges and flags you choose are read by your own browser and shown on your own screen. They do not leave your device.
• The card maker pages have no adverts and no tracking, and they do not set cookies. When you sign in to the website, the site's own login sets a cookie to keep you signed in, and a second small cookie recognises your device (see Accounts and team pages below).
• Everything you save is a ZIP file on your own device. We never receive it, and the website keeps no copy of your players, their names, their stats or their pictures.
• What the website does keep is small: your account (including when you last signed in, the devices you sign in on and a short record of recent sign-ins), the name and two colours of each team page you make, and the email address of each assistant coach or club manager you invite and which page they look after.
• Apart from the routine record our web host keeps of every visit, we only receive what you choose to send us: an order through our payment provider, or an email you send.

Photos and pictures

When you choose a photo for a card, or a club badge or flag, your browser reads the file from your device and draws it on the card. The picture is held in your browser's memory while the page is open. It is not sent anywhere.

Everything the card maker does with a picture happens on your device as well: moving and zooming it, taking the background out, painting touch-ups, and printing. Nothing is processed on a server.

When you close or refresh the page, the pictures are gone from it. The original files stay wherever you keep them, such as your phone or computer.

Opening an older file with its pictures

We suggest you keep all your pictures in one folder. If you open an older saved file, choose Open a saved file and select it together with its pictures, so each picture is found by its file name. Your browser may use the word “upload” when you pick files; that is its standard wording. The page only reads, on your device, the pictures you choose. Nothing is sent anywhere.

Saved files

You can save a player, family, team or club as a ZIP. A ZIP holds a data file (.json) and copies of the pictures you used, and it is put together on your device. It is saved to your device and is never uploaded. The data file holds names, positions, stats, colours, settings, awards and shirt numbers, and the file name and size of each picture. If you share a ZIP, you are sharing the pictures in it.

A Pro-Team or Pro Club file also holds the team's games (dates, opponents, scores), the settings you saved for each game and the ratings you gave players. It is saved to your device in the same way.

The card maker can still open an older .json file saved by an earlier build, but it no longer saves one.

Names, shirt numbers and stats can be personal information, especially for children. Because the ZIP is the only copy, keep it safe. If you share a saved file or a printed card, share it only with people who should have it.

What the website keeps

The website does not keep your teams. There is no “save on this website” and no list of saved teams. This is deliberate, so that the names and numbers of your players, who are often children, are not stored on a server.

What is kept

• Your account: your name or username, email address, the plan and end date of your subscription, and the time you last signed in. The last sign-in time is kept for every account, assistant coaches and managers included. Subscribers have no password: they sign in with a one-time link sent to their email address, and the website keeps only a one-way fingerprint of each link until it is used or runs out (15 minutes, or one day for an invitation). The site's administrators have a password, stored scrambled, never in readable form.
• Your devices and sign-ins: so that each plan’s number of devices can be applied and a new device can be noticed, the website keeps a list of the browsers you have signed in on (a label such as “Chrome on Windows”, the first and last time used, and only the first three parts of the internet address, never the whole address) and a log of your last 60 sign-ins, which is deleted after 90 days. You are emailed when a new device signs in.
• Each team page you make: its name, its two kit colours, which kind of page it is (a single page, a club page or a team page) and who owns it. That is all. It holds no player, no stat, no photo and no game.
• Each assistant coach or club manager you invite: a Pro-Team can add up to 2 assistant coaches, and a club plan managers. The website keeps their email address, their name if you typed one, and the page or pages they look after, and makes a new login for them. An address that already has an account on the site is refused, so nobody is made a manager without their own consent. The invitation is an email sent by the website's own email system. It says who invited them, to which club and team, and contains a link that signs them in.
• If two-step login is switched on, your two-step login plugin keeps what it needs to check your code.

Who can see it

A team page opens only for its owner, the assistant coaches or manager assigned to it and the site's administrators. Someone who is not signed in is sent to the sign-in page, and anyone else is told the page is not found. It is not listed, not searchable and is marked not to be indexed by search engines. The people who run the site (its administrators) can also reach the site's database, as with any website.

Deleting it

Use Delete this page on a team page, or Remove beside an assistant coach or manager, in your dashboard. When an account is deleted, its pages and the manager logins made for it are deleted too. The site's personal-data export lists a person's pages, the managers they invited, the teams they manage, their last sign-in, their devices and sign-ins, and any plan set by hand. The erase tool removes their pages, the assistant coaches and managers they invited (and such a person's own login if it was made for that purpose), their devices, sign-in record and sign-in links, and any plan set by hand, and leaves the account itself to the site's usual erase tool. If the site's owners remove the plugin, everything it kept is removed with it. Your own ZIP files are on your device, so delete those yourself.

Children's names

Because the website keeps no player names, a team page itself holds no children's data beyond a team name, which is usually a club or age group (for example “North Town FC U12”). Your ZIP files do hold names, so follow your club's own rules on children's data when you store or share them. The people who run the site decide why and how long account details are kept, and are responsible for them under data protection law.

What we do receive

When you visit

Like any website, our web host receives a routine record of each visit: your internet address, the time, and the page you asked for. It is used to run and protect the site.

Fixtures spreadsheets

In the Pro-Team and Pro Club versions you can choose an Excel or CSV file of fixtures. Your browser reads it on your device to fill in the games. The file is not uploaded and not kept: only the games you end up with are saved, in the ZIP you save to your own device.

Fonts and the QR code script

The pages load their fonts from Google Fonts and the QR-code script from cdnjs (run by Cloudflare). Your browser asks those services for the files directly, so they can see your internet address and browser type, as with any website that uses them. None of your photos or card details are sent to them.

When you buy

Payments are handled by our payment provider. We receive your order details, such as your name, email address and what you bought. We never see your full card number.

When you email us

If you write to us, we receive your email address and your message. We use them to reply to you and to consider any idea you send.

Photos of children

Many cards show children. Ask a parent or guardian before you add a child's photo to a card or share a finished card, and follow your club's own rules on photos and safeguarding. We never see the photos, so this is up to you.

Accounts and team pages

Every subscription gives you an account on one website, and your team pages are on that website. You sign in with a link sent to your email address. Photos stay in your browser, and the website keeps nothing about your players (see What the website keeps). The site's system holds the account details used to run it, such as your name, an email address, the login and payment records. Signing in keeps you signed in with a cookie from the site, and the cookie is removed when you sign out or it expires. A second small cookie, named mdc_dev, holds a random number so that the site can recognise the same browser next time. It lasts up to 400 days and is only set for people who sign in.

Your rights and contact

You can ask us what we hold about you, ask us to correct or delete it, or object to how we use it. You can also complain to the Information Commissioner's Office at ico.org.uk.

To contact us, write to admin@procardbuilder.com.

Changes to this page

If we change how we handle your information, we will update this page and its date.