COPA is built by one person, and the privacy story is simple: the game collects as little as possible, shows no ads, and sells no data. Ever.
Playing as a guest (default): your career — runs, stats, collection, Dream Team, match history — is saved in local storage on your own device or browser. It never leaves it.
If you sign in (Google on the web, Apple in the iOS app): your save is also synced to our database (hosted by Supabase) so it follows you across devices. We store your account's email address and a user ID solely to identify your save. Signing in is always optional.
Multiplayer: live matches exchange only gameplay data (drafted cards, moves, results, an optional club name, and optional emote reactions) through our database. Match rows contain no personal information.
Coin packs in the iOS app are processed entirely by Apple. We never see or store your payment details. We record only the App Store transaction identifier, which is used to make sure a purchase is credited exactly once.
Supabase (database, authentication and hosting of saves — their privacy policy), Apple (App Store payments, Sign in with Apple), Google (sign-in on the web), Netlify (website hosting), and Google Fonts (typefaces).
Signed-in players can delete their account and cloud save at any time from More → Delete account & cloud data inside the game. This is immediate and permanent. Guest saves can be removed by clearing the app's data or your browser storage. You can also email us and we'll delete everything we hold about you.
COPA is not directed at children under 13, does not knowingly collect personal information from them, and contains no real-money gambling — poker hands are a scoring mechanic with no wagering.
If this policy changes, the date above will be updated. Questions or requests: support@copagame.com.