Privacy policy

Draft — pre-launch. This policy describes how The Dugout handles information when you visit our marketing site or play the game client. It may change before public launch; we will update this page when it does.

Who we are

The Dugout is a browser-based football management simulation. This marketing website at thedugout.app (and staging equivalents) presents product information only. The playable game runs at separate URLs such as play.thedugout.app.

What this site collects

The marketing site itself does not require an account and does not run first-party analytics in v1. We do not intentionally collect personal data through contact forms on this site today.

Like most websites, our hosting provider (Cloudflare) may process standard server and security logs — for example IP address, user agent, and requested URL — to deliver pages, mitigate abuse, and maintain service reliability.

Game client and accounts

When you choose to play, you are redirected to the game application, which uses Firebase Authentication for sign-in. Account data is processed to operate your manager account, secure access, and provide the service. Game progress and related records are stored in our backend systems as part of normal gameplay.

Cookies and local storage

This marketing site may store a theme preference in your browser’s local storage. We do not use advertising or cross-site tracking cookies on the marketing site in v1. The game client may use additional storage required for authentication and session management.

How we use information

  • Provide, secure, and improve the game and related services
  • Respond to support requests when you contact us
  • Comply with legal obligations and enforce our terms

Retention

We retain account and gameplay data for as long as your account is active or as needed to provide the service. You may request deletion by contacting us; some records may be retained where required by law.

Third parties

  • Cloudflare — hosting and CDN for the marketing site
  • Firebase (Google) — authentication for the game client
  • Infrastructure providers — database, email, and storage used by the game API

We do not sell your personal information.

Children

The Dugout is not directed at children under 13. We do not knowingly collect personal information from children. Contact us if you believe a child has provided us data.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data. Contact us to exercise these rights.

Contact

Privacy questions: [email protected]

Changes

We may update this policy. Material changes will be reflected on this page when we publish the final version.

Last updated: July 2026