Last updated: November 2026 · Draft revised 4 November 2026
Translations are provided for convenience. If they differ, the English version applies.
In short
- We handle your account, your profile and the football sessions you upload, to show your analysis.
- GPS routes can reveal where a training session took place. They are private to your account and to your coach and the managers allowed to see them. Followers see maps only if you switch them on; for players under 18 the maps are protected (no real location, shown a day later).
- Your account, GPS routes and photos are stored in the European Union.
- No advertising cookies and no sale of your data.
- The AI Coach's automatically prepared context contains no GPS coordinates, and the application keeps no AI conversation archive.
- Children use PlayerTrack360 with a parent or guardian involved.
- Chat is text only and opens only when both people agree. We read only messages that are reported to us.
- You can ask to access, correct, download or delete your information.
1. About this notice
PlayerTrack360 is operated by Mustafa Alsaeede. For privacy questions or requests, use the contact page. If your club provides your account, it may also be responsible for how your information is used. Ask your club who manages your data.
You can also e-mail contact@playertrack360.com. We answer in English, Swedish or Arabic. No data protection officer has been appointed.
2. Information we handle
We handle information you provide, recordings from your tracker or phone, account details supplied by an authorised coach or manager, and results calculated from your sessions. This includes:
- Your username, password hash, account role, status and sign-in details.
- If you create a recovery code: only a protected fingerprint of it, never the code itself. Failed sign-in and password-reset attempts are counted under a scrambled form of the username and of the network (IP) address, to stop password guessing, and deleted within one day.
- For coaches, football scouts and football agents who sign up themselves: email address (so the Manager can contact them), full name, country, optional phone, and for coaches the club, age groups and optional licence level, for agents the FIFA Football Agent licence number and optional agency, for scouts the club or organisation and optional region. The account can be used at once and is shown to players as "Not verified" until the Manager has verified it with these details. No email is sent.
- For players who are followed: who follows them, what the player shares with each follower, whether sharing is paused, an agent's declaration of a guardian's consent with its time, and a log of what followers viewed (kept 90 days).
- For players with a public page: the name chosen for the page, which sessions are on it, whether maps, playing positions and new sessions are included, the secret part of the link, whether each session is training or a match, and the pitch positions worked out for the page.
- For players aged 13 to 17 with a public page: the email address and language of the parent or guardian who gave written consent, when it was given and withdrawn, who recorded it, and a scrambled copy of the code of each switch-off link sent by email.
- For players aged 13 to 17: the email address of the parent or guardian who approves the account and the language of that email, when the email was sent and when the parent approved, and a scrambled copy of the code in the approval link until the parent answers.
- For the Manager, coaches, scouts and agents: the key of the authenticator app used for two-step sign-in, and for each remembered device a scrambled copy of its code, a name such as “Chrome on Linux”, when it was last used and its end date (30 days). For passkeys, which any account can add: the public part of each passkey, a name and when it was last used; fingerprints and faces never leave your device. Sign-up attempts per network address and AI Coach questions per account are counted under a scrambled form, to limit misuse, and deleted within one day.
- Profile settings, such as playing positions, goals and language, plus an optional photo and the ID of your linked tracker.
- For each tracker: its ID, a secret key that only the tracker and the service hold, which player it is linked to, whether it is marked as lost, and when it was last opened. The one-time link code on its sticker is kept only in scrambled form. The tracker opens only for its player, their coach and the Manager.
- If you record with your phone (Use this phone): positions with their accuracy, and the speed, direction and altitude the phone reports; on Android also the number of satellites and the signal strength; one-second summaries of the phone's motion sensors (accelerometer and gyroscope); the step count, only if you switch it on; the battery level; pauses; where the phone was worn; and the phone model and system version. This is collected only between Start and Stop, never while paused, and never before you start. The microphone, camera, contacts and messages are not used.
- If you import a GPS file (Import GPS file, on iPhone and iPad): the times and positions in the file, and the elevation, speed, direction and accuracy when the file has them, plus the name of the app that made it. The file is read on your phone; names, notes and waypoints in it are not sent, and the file itself is not stored.
- For each Android phone linked for recording: its name (for example “samsung SM-S931B”), the player it records for, who linked it, when it was last used, and a scrambled copy of its upload key. The key can only send phone recordings for that one player.
- The camera is used only when you tap Scan QR code in My tracker, to read the tracker's QR sticker. The picture is read on your phone; it is not stored or sent anywhere.
- Birth year (required for player accounts) and optional player details you choose to add: sex, dominant foot, playing level, training sessions per week, usual match format and other information.
- Height and weight, only if you tick the consent box in your profile. You can remove them at any time by unticking the box and saving.
- Uploaded sessions, dates, durations, GPS routes, movement statistics, records and trends.
- If you use PlayerTrack360 Active: your goal and your daily targets for walking and for running; if you answer it, how each walk or run felt (easy, just right or hard); and, only for the Manage weight goal and only with your consent to height and weight, your weigh-ins (one weight a day). If you switch on reminders: the time, the days and your time zone. Whether you let the Fitness Coach use your activities and your age, height and weight, with the time you switched each on or off.
- If you ask PlayerTrack360 Active for a one-time reminder (from 1 minute to 7 days ahead): its time, until it is sent or cancelled. If you choose a repeating reminder: how often, and the end time.
- Limited account activity, AI questions and recent conversation messages, and messages you send for support.
- If you use chat: who you chat with and who asked, your messages with the time they were sent and read, whom you blocked, the reports you made, that you accepted the chat rules, and for coaches, scouts and agents that they confirmed being 18 or older. For a player aged 13 to 17 who chats with an adult: the parent's or guardian's email address the player gave, and the language of the notice to them.
- If you are a coach and use group messages: the names of the groups you make of your players and who is in each. A player in such a group can see its name and the coach in “Download my data”.
- If you are a coach and make training groups: the group’s name, where and when it trains and more information you write, who is in it, the trainings you plan (date, time, place and a note) and whether only you write in its team chat.
- If you are in a coach’s training group: whether you joined its team chat and when, the messages you write there with their time, and your answers to its trainings (Coming or Not coming, never a reason). Everyone who joined the team chat reads its messages. Your coach sees who answered what; the other players see only how many.
- If you are a coach and write to a group: a message to a player who has no open chat with you yet waits with the chat request and goes into the chat when the player accepts. The player cannot read it before that.
- If you use the contact form: the server passes your name, email address, topic and message, and your username if you are signed in, to our inbox, and sends a receipt to your address. The receipt repeats your message only when you are signed in and it is your account's confirmed address; otherwise it is a short receipt without your message. The website does not keep the message. Repeated sending is counted under a scrambled form of the network (IP) address and of the email address, deleted within one day.
- If you contact us, we receive your email and anything you attach, such as screenshots or photos of a problem. We use them only to answer you. Please leave out passwords, recovery codes and other people's information.
- If you join the test group for the Android app: the email address of your Google account, which Google Groups and Google Play show us. We use it only to give you the test version on Google Play. Leave the group to stop testing.
- If you try the demo (Try the demo on the sign-in screen): no account and nothing you type is stored. To limit misuse, a scrambled form of your network address is kept for up to one day.
3. How information is used
Information is used to provide session analysis, manage accounts, support coaching and protect the service. Account details are needed to sign in, and recordings are needed for analysis. Photos and personalised AI are optional.
Depending on the purpose and account arrangement, processing may rely on a contract, legitimate interests in operating and securing the service, consent, or a legal obligation. The responsible operator or club must confirm the basis for each use. Where consent is used, you can withdraw it without affecting earlier lawful processing.
Height and weight are stored only with your explicit consent, because body measurements can be sensitive, especially for children. Children under 13 need a parent or guardian to agree first. Unticking the consent box and saving deletes them. They are used only to give context to your results; we do not use them to assess your health.
Speed zones (running, high-speed running and sprint) are set for each player. Until at least three of your own sessions show a clear top speed, they come from your birth year and, if you give it, your sex, using published values for your age group; after that, from your own best 1-second speed. Without these details, adult values are used. Each session shows the thresholds that were used.
The birth year is required for player accounts because the service needs it: it sets age-appropriate speed zones and identifies players under 18, whose parent or guardian approves the account first, and children under 13, who cannot have an account during the test period. Sex, height, weight and the other player details remain optional.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Statistics, trends and AI Coach answers are information to help you, not decisions about you.
4. Who can access your information
GPS routes can reveal where a training session took place. Your profile and recordings are private account information. Other players cannot browse them. Authorised coaches can access the players in their group, followers (football scouts, agents or other players) only what each player has switched on for them, managers have broader administrative access, and service operators may access information when needed for support or operation.
Clubs: if your coach belongs to a club that uses PlayerTrack360 club managers, or you are a coach or scout of such a club, the club is responsible for that use of your information, and PlayerTrack360 handles it for the club under a data processing agreement the club accepts first. The club’s managers can see and manage the accounts of the club’s coaches and of the players in their groups, including training sessions and maps, can create and delete those accounts and can record a parent’s consent; for the club’s scouts they can help with signing in and delete the account. They cannot see whom a player follows or shares with, nor which players a scout follows. When you sign up, you can choose one of the clubs that asked to be listed: a coach or scout then waits until a club manager accepts, and a player chooses a coach of that club. Each change club managers make is logged with its time for 12 months, and the club and PlayerTrack360 can read that log. Ask your club for its own privacy notice.
Photos are stored privately and accessed through the service. Coaches and managers can manage photos within their account permissions. Tracker IDs are private account details, not a public device directory.
Sessions recorded with a phone or imported from a GPS file are shared and protected exactly like tracker sessions. A phone can be linked for recording only by the player, their coach or the Manager, and the player can see and remove linked phones in Account & sharing → Account security.
A tracker opens only for the player it is linked to, that player's coach and the Manager. Marking it as lost or found, giving it away and unlinking it need the account password. A tracker marked as lost cannot be opened by anyone.
Your linked coach can see your optional player details, including height and weight if you added them.
Football scouts, agents and other players can follow a player only after the player accepts. Nothing is shared until the player switches it on for that follower: performance (sessions, distances, speeds, sprints, trends, records), football profile (positions, birth year, preferred foot, level, training per week, match format) and maps. Photos, height, weight and free-text information are never shared with followers. Maps of players under 18 are protected: the route is moved away from its real location, so followers see how the player moved on the pitch but not where, and only for sessions that ended more than 24 hours ago. The player sees every follower with their title and a log of what they viewed (kept 90 days), can pause sharing with everyone at once, and can stop sharing at any time. Players under 13 cannot be followed or follow; agents can follow players aged 16 or over and must declare that they hold a guardian's written consent for players under 18 (FIFA rules).
Public player page
A player aged 18 or over, or aged 13 to 17 with the written consent of a parent or guardian (see section 10), can choose to make a public page, for example to share their development on social media. It is off until the player switches it on. Anyone who has the link can open it without an account, so it is public: people can copy, save or pass on what they see. The player chooses the name shown, which sessions are on it (or that new sessions are added), and whether heatmaps, movement on a pitch and playing positions are shown. The page shows the date, numbers and, if chosen, positions on a standard pitch worked out on our server. It never shows GPS routes or coordinates, where a session took place, the time of day, the username, photos or other profile details. The page asks search engines not to list it. The player can make a new link (the old one stops working at once) or switch the page off at any time; switching it off removes what was published. The legal basis is the player's consent (GDPR Article 6(1)(a)), which can be withdrawn at any time by switching the page off. Anyone can report a page through the contact page.
With the link, people can also open the player's Session Analysis, Personal records, Performance trends and, if the player shares it, the football profile, read-only and the way a coach reviews them: only the chosen sessions, dates without time of day, no tracker or device names, and maps only as movement on the pitch, moved away from the real place and turned. They cannot use the AI Coach, download anything or change anything. While they look, a necessary cookie (pt360_link, two hours) remembers the link; it holds only the link code, and visits are not logged.
A chat can be read only by the two people in it. The Manager cannot read chats: only when someone reports a message does the Manager get a copy of that chat up to the report, kept until the report is closed. A phone notification about a new message says only that there is one, never who wrote it or what it says.
To keep the service safe, the Manager can look up any account and see its coach or players, who follows whom, and what each player shares with each follower.
A coach can download the data of a player linked to their group: a JSON file with the player's profile and up to 50 sessions including GPS routes, or a CSV summary without routes. Managers can do the same for players they manage.
5. AI Coach
AI Coach uses Cloudflare Workers AI. Your question and limited recent conversation history are sent to the AI service. Your profile details and compact session summaries are included only if you have switched on “Let the AI Coach use my sessions” (it is off until you switch it on) and the question is about your own performance. You can switch it off at any time; your coach sees your choice but cannot change it. General football questions never include that player context.
In detail, the AI service receives:
- your question (up to 600 characters) and up to 6 recent chat messages (up to 800 characters each);
- your selected language;
- only for questions about your own progress: your playing positions, performance goal and preferred language, your optional player details (approximate age from your birth year, sex, dominant foot, playing level, training sessions per week, usual match format and other information, but never your height or weight), your personal baseline, and summaries of up to 20 recent sessions (session number, date, duration, distance, top speed, sprint count, sprint distance and the sprint threshold used, high-speed running distance, GPS reliability and accuracy, peak acceleration, and counts of gaps and rejected points).
The PlayerTrack360 Active Fitness Coach uses the same AI service. It receives your question, up to 6 recent messages and your language. Only what you switch on in Account is added for each question, as a short summary: with “Let the coach use my activities”, your walks and runs of the last 4 weeks (day, walk or run, minutes, distance, pace and steps) and your daily movement target; with “Let the coach use my age, height and weight”, your approximate age from your birth year, your height and your latest weight. Because this can say something about your health, each is used only with your explicit consent. Both are off until you switch them on, you can switch them off at any time, and they switch off when you remove your height and weight or withdraw your agreement to PlayerTrack360 Active. Your routes, places, name and email are never sent.
Raw GPS coordinates are not included in the automatically prepared AI context. Avoid typing sensitive information or precise locations into questions. The application does not keep an AI conversation archive in its account database; provider processing and retention follow the applicable Cloudflare arrangements. Answers are suggestions and may be wrong.
6. External services
Cloudflare provides cloud hosting, storage and AI, and the check on the sign-up page that a person, not a program, is signing up (Turnstile); that check looks at browser and connection signals and only its result reaches us. Maps use OpenStreetMap and pitch searches use Overpass services; the map software comes from PlayerTrack360's own site. These services can receive connection details such as your IP address. Map requests reveal the area viewed, and pitch searches, including automatic searches, send a location-based search centre rather than a complete route or account identifier. The search centre is rounded to about 100 m.
Emails from PlayerTrack360 (the contact form, its receipt, and the notices to a parent about a chat or a public page) are sent by Cloudflare Email Service from no-reply@playertrack360.com. Emails to contact@playertrack360.com are forwarded by Cloudflare to the operator's mailbox.
If you record with another app, such as Open GPX Tracker, that app is not part of PlayerTrack360 and its own developer is responsible for it. PlayerTrack360 receives only the file you choose to import.
Your account database, GPS routes and profile photos are stored by Cloudflare in storage restricted to the European Union. Each visit to the website is handled at the Cloudflare location nearest to you, which can be outside the European Economic Area. AI Coach questions are answered by Cloudflare’s AI service, whose providers include companies in the United States and the United Kingdom; such transfers rely on the EU–US Data Privacy Framework and the EU standard contractual clauses. The reviewed application has no advertising or data-sale feature. Information may also be disclosed where legally required.
The PlayerTrack360 app for Android is distributed through Google Play, which handles downloads and updates under Google's own privacy policy. Inside the app, PlayerTrack360 opens in your phone's browser (Chrome), as on the website.
If you allow notifications on a phone, your browser gives PlayerTrack360 an address at its push service: Google Firebase Cloud Messaging for Chrome, the Android app and most Android browsers, Mozilla for Firefox, Apple for Safari, or Microsoft for Edge on Windows. We use it only to tell that phone that a deletion notice was sent for your account, and, if you switch on reminders in PlayerTrack360 Active, to remind you at the time you chose. When a notification arrives, the phone asks PlayerTrack360 which of the two it is, using that address only. The message carries no content, so the push service learns only that this phone gets a notification, not your name, your account or why; the words come from your phone. These providers can be outside the European Union.
Reminders in PlayerTrack360 Active come the same way: once a day or repeating (at least 15 minutes apart and at most 24 a day, only between the times you choose), and a one-time reminder after the time you choose.
7. Cookies and local recordings
An essential cookie keeps you signed in. Normal sign-in authorisation lasts up to 24 hours; Remember me allows up to 30 days unless ended earlier. For coaches, scouts and agents, and for the Manager when they choose it, a second essential cookie remembers the device for 30 days after the authenticator code. Browser storage remembers language, selected views and pitch settings, and may hold local phone recordings and location-related calibration information. The application does not use advertising cookies.
On this device the site also remembers the speed you chose for the how-it-works and training videos, which situations you answered right in Train, whether the game clock is on there, and which invitation cards you closed, and until when. The videos are files on our own site; watching them sends nothing to anyone else.
For coaches, Drill Lab remembers on this device the drills you saved, your session plan, the 3D or top view, and whether its voice is on. The spoken explanations are files on our own site; where one is missing, a voice built into your device may read the text, without sending it anywhere.
The PlayerTrack360 Android app keeps phone recordings, the summaries it makes from them on the phone, your recording settings and the upload key in its private storage on the phone. The upload key is encrypted with the phone’s Android Keystore where the phone supports it. Recordings stay on the phone, also after they are sent, until you remove them. A recording made before you sign in in the app is not sent until you choose the account it belongs to. Recordings and the upload key are not included in phone backups, and uninstalling the app removes everything it keeps.
So that your pages work without internet, PlayerTrack360 keeps a copy of your pages and your own sessions or activities on your phone, in this browser’s storage for the site. Only a player’s own pages are kept: never other players’ pages, and nothing for coaches, scouts, agents, share links or the demo. Signing out deletes the copy. You can switch it off on each phone with Use without internet in Player profile (football) or Profile (Active); switching it off deletes the copy at once.
If you allow notifications on a phone, the site’s service worker stays on that phone to show the deletion notice, also with Use without internet switched off (it then keeps no copy). You can switch the notifications off in Account & sharing → Account security (football) or Profile (Active), or in the browser’s settings.
| Name | Type | Purpose | Duration |
|---|---|---|---|
ft_session | Cookie (HTTP-only, secure) | Keeps you signed in | Until the browser closes, or up to 30 days with Remember me; the sign-in itself expires after 24 hours or 30 days |
ft_device | Cookie (HTTP-only, secure) | Remembers this device after the two-step code (coaches, scouts and agents; the Manager when chosen) | 30 days, or until the password or two-step sign-in changes |
pt360-site-language | Local storage | Remembers your chosen language | Until you change it or clear browser data |
pt360-appearance | Local storage | Players: remembers the colours and text style you chose | Until you change or reset it, or clear browser data |
pt360-quote | Local storage | Remembers which football quote you saw last, so the next one is new (no personal data) | Until you clear browser data |
pt360-active-quote | Local storage | PlayerTrack360 Active: remembers which quote you saw last, so the next one is new (no personal data) | Until you clear browser data |
pt360-progress-kind | Local storage | PlayerTrack360 Active Progress: whether you last looked at all activities, only walks or only runs (no personal data) | Until you change it or clear browser data |
pt360-header-account-v1 | Session storage | Shows your username while pages load | Up to 2 minutes, while the tab is open |
pt360-coach-player | Session storage | Remembers the player a coach is reviewing | Until the tab is closed |
pt360-field-corners, pt360-pitch-preview-rotation | Session storage | Pitch alignment and view settings for a session | Until the tab is closed |
football-tracker-phone-v1 | IndexedDB | Phone recordings made on the Record page (positions and motion summaries) | Until sent, deleted or browser data is cleared |
pt360-files, pt360-player-…, pt360-offline | Cache storage | Offline copy: the site’s files, and your own pages and sessions or activities, so they open without internet | Until you sign out or switch it off, or clear browser data |
pt360-offline-prefs | Cache storage | The language and colours of the short pages shown without internet and of the deletion notice, whether the copy is switched off, and how many notifications are new, for the number on the app icon (only a number, no personal data) | Until you clear browser data |
| Notification address (push subscription) | Browser | Lets this phone show the deletion notice of an account nobody uses, and Active reminders if you switch them on | Until you switch it off on the phone, the push service ends it, or the account is deleted |
pt360-push-asked | Local storage | Remembers for which accounts the question about phone notifications was answered on this device (a short code for each account, not its name; at most 20) | Until you clear browser data |
pt360-bell-sound, pt360-bell-heard | Local storage | The bell: whether it plays a sound for new notifications on this device, and the time of the newest notification it has already played the sound for, so the sound plays only once (only a time, no names or content) | Until you change it or clear browser data |
pt360-reminder-sound, pt360-sounds | Local storage, IndexedDB | PlayerTrack360 Active: the sound you chose for when you open a reminder, and your own music file if you add one. The file stays on this phone and is never sent to us | Until you remove it, another account signs in on this phone, you delete your account here or clear browser data (signing out keeps it) |
pt360-music | IndexedDB | PlayerTrack360 Active Music: the songs you add and their order. They stay on this phone and are never sent to us | Until you remove them, another account signs in on this phone, you delete your account here or clear browser data (signing out keeps them) |
pt360-spotify | Local storage | The Spotify links you save. A tap opens Spotify; this page sends nothing to Spotify | Until you remove them, another account signs in on this phone, you delete your account here or clear browser data (signing out keeps them) |
pt360-music-owner | Local storage | Which account the Music list, the Spotify links and the reminder sound on this phone belong to (its number), so that only that account sees them | As long as any of them is on this phone |
pt360-offline-off | Local storage | Remembers that you switched Use without internet off | Until you switch it on again or clear browser data |
pt360-app-waiting | Local storage | In the Android app: the recordings the app has not sent yet (time, length, distance), shown above Sessions and Activities | Until the app opens the site again, or you clear browser data |
pt360-app-start | Session storage | In the Android app: a one-time key that lets this tab start the app’s recorder without internet | Until the tab is closed |
Clearing browser data can remove local recordings and preferences and sign you out. It does not delete your cloud account or copies on your phone, tracker or other devices.
8. Manager activity log
Managers can review account creation dates, recorded-session dates and durations, sign-in history for up to 90 days, and the approximate active website/app use of coaches, scouts, agents and managers for up to 30 days. Active use is not recorded for players. Older audit entries are removed during relevant service operations. Activity estimates reflect visible pages with recent interaction, not exact attendance or background use. The Android web experience and mobile browser share a category.
For each sign-in, the activity log also keeps the country the connection came from (for example Sweden), as reported by Cloudflare, so the Manager can spot sign-ins from unexpected places and see a world map of totals per country. It does not collect IP addresses, cities, exact places or background location. Hosting and map providers can still receive connection information.
Links shared on social media can end with a label such as ?ref=instagram. When someone opens such a link, the service adds one to a weekly total for that label, and one to a second total if that visitor then creates an account. Only these totals per week and label are kept, for one year. They are not linked to any account, and nothing is stored on your device for them.
9. Retention, security and deletion
Account, profile and session information currently remains until removed through the service or account deletion. Support, security-log and provider backup periods still need confirmation. Local copies remain until removed on the relevant device.
| Information | Current retention |
|---|---|
| Account, profile, sessions and routes | Until removed through the service or account deletion |
| Accounts nobody uses (no sign-in, saved session or phone upload for 2 months) | The Manager may send a deletion notice in the app and delete the account with all its data if it is still unused 30 days later; the notice date is kept until the account is used again or deleted |
| A session you delete | Removed from the application database when you delete it |
| Sign-in history and sign-in country (Manager activity log) | 90 days |
| Active-use estimates (Manager activity log) | 30 days |
| Social media link counts (weekly totals per link) | One year |
| Sign-in authorisation | 24 hours, or up to 30 days with Remember me |
| AI Coach conversations | No archive in the application database; provider handling follows Cloudflare's arrangements |
| Coach, scout and agent sign-up details and email | Until the account is deleted |
| Parent's email and consent record (under-13 sign-ups) | Until the account is deleted; a sign-up that nobody confirms is deleted after 30 days |
| Authenticator key (Manager, coaches, scouts and agents) | Until it is reset or the account is deleted |
| Remembered devices (coaches, scouts and agents; the Manager when chosen) | 30 days, or until the password or two-step sign-in changes |
| Passkeys | Until removed in Settings, or until the account is deleted |
| Tracker register (ID, key, link to a player) | Until the Manager removes the tracker; the link ends when the player unlinks it or the account is deleted |
| Phone notification addresses (deletion notice, Active reminders) | Until switched off on the phone, the push service says the phone is gone, or the account is deleted |
| Linked Android phones (upload key) | 90 days after the last use, until removed in Account & sharing → Account security, or until the account is deleted |
| Chats and their messages | While the two people are connected; you can delete your own messages (an adult cannot delete those sent to a player under 18). A chat that is closed, declined, blocked or whose follow or group ended is deleted 30 days later, an unanswered request after 30 days, and all chats with the account |
| Chat reports (the copy of the chat up to the report) | Until the Manager closes the report |
| Group messages waiting for an answer | Until the player accepts, when it becomes a chat message as above. Deleted when the request is declined, withdrawn or closed, after 30 days without an answer, or with either account; at most 20 for each request |
| Team chat messages | 12 months after they were sent; earlier when the writer deletes them, the coach removes them or deletes the group, or the writer deletes their account |
| Trainings and the answers to them | 12 months after the training; an answer earlier when the player leaves the group or deletes their account, and everything with the group |
| Chat groups of a coach (names and members) | Until the coach deletes the group or their account; a player leaves a group when they leave the coach’s group or delete their account |
| Club log (what club managers changed) | 12 months, then deleted; deleted earlier with its club |
| Request to join a club | 30 days after the club answers; 60 days if nobody answers; deleted earlier with the account or the club |
| Contact form messages | Not kept by the website; in the operator's mailbox as for email |
| Follows and the follower access log | Follows until stopped or an account is deleted; the access log 90 days |
| Public player page and its sessions | Until the player switches it off or removes a session, or the account is deleted; pitch positions only while maps are shown |
| A parent's or guardian's approval of an account (players aged 13 to 17) | Kept as proof of the approval until the account is deleted; an account that nobody approves is deleted after 30 days |
| A parent's or guardian's consent for a public page (players aged 13 to 17) | Kept as proof of the consent, also after it is withdrawn, until the account is deleted; the switch-off links until the consent ends |
| How an activity felt (PlayerTrack360 Active) | Until the activity is deleted, the Active agreement is withdrawn or the account is deleted |
| Weigh-ins (PlayerTrack360 Active, Manage weight) | Until you delete them, withdraw the consent to height and weight or the Active agreement, or delete the account |
| Reminder settings (PlayerTrack360 Active) | Until you change them, withdraw the Active agreement or delete the account |
| One-time reminder (PlayerTrack360 Active) | Until it is sent or you cancel it |
| Support messages, security logs, provider backups | Still to be confirmed |
Because they can see players' data, the Manager, coaches, scouts and agents sign in with a password and a code from an authenticator app. Coaches, scouts and agents give the code only on a new device; that device is then remembered for 30 days. The Manager can choose to remember a device in the same way. Any account can also add a passkey (fingerprint, face or device PIN) and sign in with it. Remembered devices and passkeys are listed in Settings, where they can be removed at any time; changing or resetting the password removes all passkeys.
Passwords are stored as hashes, and account permissions restrict access. Keep your password private and report suspected misuse.
You can delete your own account at any time in Account & sharing → Delete my account, after confirming your password. The Manager account cannot delete itself. Only you and the PlayerTrack360 Manager can delete your account; coaches, scouts and agents cannot delete anyone else's account. You can also ask the Manager to delete it. Deletion permanently removes the account and its application-held profile, photo, sessions, routes, records, trends and sign-ins. This cannot be undone through the application. Separate downloads, device recordings and provider backups are not erased by cloud account deletion. Hiding a tracker recording may not immediately erase its stored contents.
Accounts that nobody has used for 2 months (no sign-in, no saved session and no phone upload) may be deleted by the Manager, with all their recordings and data. First the Manager sends a deletion notice, which appears in the app’s notifications. The account can be deleted only if nobody has used it in the 30 days after the notice; signing in again keeps it and ends the notice. We do not send emails. If you allowed notifications on a phone, that phone also shows the notice as a notification; otherwise it is seen only when the app is opened. Download your data first if you want a copy.
On the Tracker tab you can also format your tracker, which erases every recording on it. Only the player the tracker is linked to can do this, only when every recording on it is saved in the account, and only after entering the password.
When a tracker is given to another player, it erases every recording still on it the first time the next player connects it.
10. Children and families
Parents or guardians should understand how a child's recordings are collected and shared. For consent-based online services offered directly to children, the threshold is 13 in Sweden and can be higher elsewhere in the EU/EEA.
During the current test period, sign-up and accounts created by coaches are for adults (18 or older) only. Players under 18 can join later, through their coach and with a parent's or guardian's consent.
A player aged 13 to 17 who signs up, or whose account a coach, a club manager or the Manager creates, must give a parent's or guardian's email address. Because only the birth year is known, this applies to every player who may still be under 18. We email that parent a link: the account cannot be used until the parent opens the link, reads what PlayerTrack360 does and approves the account. The parent can also say no, which deletes the account. We record the address, the language, when the email was sent and when the parent approved, as proof of the approval. An account that nobody approves within 30 days is deleted. Children under 13 cannot have an account during the test period.
When a coach creates an account, the player is linked to that coach only after signing in and accepting the coach's invitation. When a coach or the Manager creates an account for a child, they must have the parent's or guardian's agreement first. How the agreement is checked is still being reviewed.
Players aged 13 to 17 can chat with their coach, with scouts who follow them, with agents who follow them (only from 16, and with a guardian's written consent) and with other players. Before such a player starts a chat with an adult, they give a parent's or guardian's email address, and that parent or guardian gets one short email with the adult's name and role, never the messages. The adult must be a verified coach, scout or agent, or a player aged 18 or over, and cannot delete what they sent to the player.
A player aged 13 to 17 can have a public page only with the written consent of a parent or guardian, given to PlayerTrack360, for example by email. The PlayerTrack360 Manager records it with the parent's or guardian's email address and language, the date and who recorded it. When the player switches the page on, the parent or guardian is told by email first, with the page's link and a link that switches the page off and withdraws the consent at once; if that email cannot be sent, the page stays off. The page of a player under 18 never shows the birth year, and movement on the pitch appears only for sessions that ended more than 24 hours ago. The legal basis is consent (GDPR Article 6(1)(a)): the player's own, by switching the page on, and the parent's or guardian's as an extra safeguard; either can be withdrawn at any time, and the page then goes off at once. Players under 13 cannot have a public page.
For young players: your football sessions belong to you. In the app, only you, your own coach and your club manager can look at them, and the map of where you played is kept private. A public page is possible only if you switch it on and your parent or guardian has agreed in writing; it never shows where you played or your birth year. If you want something changed or deleted, ask a parent or your coach to contact us.
About chat: a chat only opens when you say yes. Never send private photos, never move to another app, and press Report or tell an adult you trust if a message worries you.
11. Your rights
Under applicable data-protection law, you may request access, correction, deletion, restricted processing or a portable copy of eligible information. You may also object to legitimate-interest processing or withdraw consent where used. These rights are subject to legal conditions.
Use the contact page or contact the responsible club. Identity checks may be needed. Requests normally receive a response within one month; any permitted extension will be explained. You can also complain to IMY or your local data-protection authority.
12. Updates
We may update this notice as the service changes. Important changes will be communicated appropriately, and consent requested where required.
29 October 2026: PlayerTrack360 Active can now keep how each activity felt, weigh-ins for the Manage weight goal, and reminders by phone notification, as described above. Nothing new is shared with anyone else, and nothing is sent to the AI Coach.
29 October 2026, later the same day: PlayerTrack360 Active can also send one reminder at a time you ask for (in 5 minutes, 1 hour or 2 hours). Only that time is kept, until the reminder is sent or cancelled.
29 October 2026, later the same evening: reminders can now repeat (at least 15 minutes apart, at most 24 a day), a one-time reminder can be set from 1 minute to 7 days ahead, and you can choose a sound for when you open a reminder, including your own music, which stays on your phone. Reminders now also come on days you have already been active.
30 October 2026: PlayerTrack360 Active has a Music tab. The songs you add and the Spotify links you save stay on your phone and are never sent to us.
30 October 2026, later the same day: your Music list and your reminder sound now stay on your phone when you sign out, for when you sign in again with the same account. They are removed when another account signs in on that phone or when you delete your account there.
30 October 2026, in the evening: a coach can put their players into named groups and write to a group at once. Each player gets the message in their own chat with the coach, under the same chat rules. Only the group names and members are kept.
2 November 2026: when a coach writes to a group and a player has no open chat yet, the message now waits with the chat request and shows in the chat when the player accepts. Until then only the coach can see it, and it is deleted if the request is declined or not answered within 30 days.
3 November 2026: players aged 13 to 17 can have an account once a parent or guardian approves it with a link in an email; children under 13 cannot have an account during the test period.
3 November 2026: a club can have club managers, who look after the accounts of the club’s coaches, scouts and players for the club. The club is responsible for that use and accepts a data processing agreement first. Their changes are logged for 12 months. A club can ask to be listed on the sign-up page; a coach or scout who chooses it waits until the club accepts.
3 November 2026, late: a coach’s groups can now have trainings that the players answer with Coming or Not coming, and a team chat that everyone in the group who joins reads. Answers and team chat messages are kept for 12 months.
4 November 2026: the bell can play a short sound for new notifications (switch it off in the bell), and in the iPhone Home Screen app or an app installed on a computer the app icon shows how many notifications are new. Both are kept only on your device; nothing new is sent to us.
4 November 2026, evening: the question about notifications on a phone is now asked once for each account that signs in there, not once for the whole phone. The phone keeps a short code for each account that answered, not its name.