Privacy Policy

Last updated 9 September 2026

Select XI has no advertising and no tracking of who you are. Almost everything you do happens on your own device. This page describes the only cases where data leaves it. On the web and in the iOS app alike, an account is optional: it holds your email address and, on the web, the squads you choose to save to it, and you can export and delete it yourself at any time. Everything in the builder works without one.

What stays on your device

The lineup you are building - team name, match info, player names and numbers, positions, kit choices, substitutes and tactical annotations - is stored locally in the app or in your browser's local storage. It is not sent anywhere unless you deliberately share it, and deleting the app removes it.

What is sent when you share a lineup

Tapping Share uploads that lineup to our server so it can be opened from a link. The upload contains the lineup itself plus the optional author name and description you type into the share form. If you leave "Share publicly in Community" switched on, it also appears in the public Community feed.

• Anything you type into the author name or description is public. Do not put personal information there.
• Shared lineups have no expiry. Email us at contact@select-xi.pro with the share code to have one removed.
• Reported lineups can be hidden from the feed by moderation.

What we log

Our server applies rate limits so a single client cannot flood the community feed. To do that it reads the requesting IP address in memory for the duration of the limit window. IP addresses are not written to our database and are not linked to shared lineups. For reliability and abuse handling, our hosting provider retains request metadata, including source IP address and user agent, for 30 days.

Anonymous product counters

To understand which features are used - for example, how many lineups are exported in a week - the website may send a small number of anonymous event counters to our own server (never a third party). Each event is only a name like export_completed, a timestamp, and at most a few generic labels such as the export format. It contains no account id, no email address, no name, no IP address, no device identifier, and no cookie - two events from the same person cannot be linked to each other, or to you.

• The iOS app sends none of these counters itself. Our server does record the same kind of anonymous counter when the app asks it to send a sign-in code, signs you in, exports your data or deletes your account - a name and a timestamp, never your address and never your account id, so the rows say how often a thing happened and nothing about who did it.
• If your browser sends the Do Not Track or Global Privacy Control signal, the counters sent from the web app are not sent at all.
• Counters are aggregate by design. We cannot single out an individual from them, and we do not try.
• Raw event rows are kept for at most 12 months; only aggregate totals are kept longer.

Accounts (optional), on the web and in the app

Signing in is optional on both. On the web it makes Pro's saved squads follow you between devices. In the iOS app it exists so that an account you already have has a front door on your phone, and so that you can export or delete it from there. The builder, exporting, sharing and the Community feed all work signed out, and anything already saved in your browser or on your phone stays there whether you sign in or not.

• The only personal information an account holds is your email address, together with whether Pro is active on the web and the squads you choose to save to it. Nothing else, and no browsing history.
• There is no password anywhere. On the web you type your address and we email a sign-in link; in the app we email a six-digit code instead, because tapping a link would open Safari and leave the app signed out. Both work once, both expire after fifteen minutes, and we store only a one-way hash of them - never the link or the code itself.
• Signing in on the web sets one cookie. It identifies your session and nothing else; it is not used for measurement or advertising.
• Signing in inside the app stores a sign-in token on the phone instead of a cookie. It expires after 30 days, it is only ever sent to our own server, and signing out or deleting the account makes it useless immediately. Deleting the app removes it.
• Signing out signs the account out everywhere, not only on the device you did it from.
• Your address is never included in the anonymous product counters described above, is never written to our logs in full, and is not shared with anyone. We send it to our email provider for the sole purpose of delivering your sign-in link or code.
• You can download everything held on your account, and delete the account yourself, from the account panel in either place — see below.

Downloading your data

Sign in, open the account panel and choose Download my data — on the web it downloads, and in the app it goes to the iOS share sheet so you can save or send it wherever you like. You get a single JSON file containing your email address, when the account was created, whether Pro is active, every squad saved to the account, and the dates of the sign-in links issued for it. It does not contain the sign-in link hashes themselves: a hash is the thing our server checks a link against, not information about you, and putting one in a file that ends up in a Downloads folder or an inbox would serve no purpose.

Drafts and squads saved in your browser or in the iOS app never reach our server, so they are not in the file. They are yours already, on the device.

Deleting your account

Sign in, open the account panel — in the app, the account button in the header — choose Delete my account and type your email address to confirm. It happens immediately and cannot be undone. If you cannot sign in, email contact@select-xi.pro from the address on the account and we will do the same thing by hand.

Deleting removes, permanently:

• your account record, including your email address;
• your Pro entitlement for the web, and any payment reference stored against it;
• every squad saved to the account, on every device;
• every sign-in link on record for the account;
• your entry on the Pro-interest waitlist, if you had joined it with the same address.

You are signed out everywhere at the same moment. The session cookie and the app's sign-in token are both signed tokens our server does not otherwise keep, so a copy of either taken beforehand stops working too — there is no account left for it to point at.

What deletion does not remove on your phone: the lineups and drafts saved in the iOS app, which were never on your account and never reached our server, and Select XI Pro if you bought it in the app — that purchase belongs to your Apple Account, is held by the App Store, and is neither recorded on your Select XI account nor ours to remove.

What deletion does not remove: lineups you shared to the Community feed. Those are not linked to your account, and never have been. A shared lineup is held against a one-way hash of a management token kept in the browser that published it — the same whether you were signed in or not — so there is no way for us to look up "the lineups belonging to this account", and deleting the account cannot find them. They stay published under whatever author name you typed on the share form. This is also the honest outcome for anyone who has remixed one of them: a public lineup that vanishes takes the lineage of every remix built on it with it. To have a shared lineup taken down, email contact@select-xi.pro with its share code, and we will remove it from the Community feed and from its link.

Two other things survive, because neither identifies you: the anonymous product counters described above (they carry no account, no address and no user id, so there is nothing in them to find), and the record that a payment event was processed, which is an internal event id with no personal data attached.

Deletion is immediate in our live database and nothing is held in a recycle bin. We do take routine database backups, which are kept for up to 30 days and then discarded; a deleted account can therefore still exist inside a backup until that backup rolls off. Backups are only ever used to recover from a failure, and a deleted account is not reinstated from one.

Purchases

In the iOS app, Select XI Pro is a one-time in-app purchase handled entirely by Apple. We never see your name, payment method or Apple ID. The app records only whether the unlock is active, on the device itself, and never sends that to our server. It is not attached to a Select XI account, and it works whether or not you sign in. Restoring a purchase asks Apple, not us.

On the web, whether Pro is active is recorded against your account on our server, because that is what lets your saved squads follow you between devices. Pro on the web is a one-time purchase, not a subscription. When it is available on this site, payment is handled by PayPal: your card details never reach us, and all we keep is the PayPal transaction id alongside your account so a receipt can be matched to it.

What we do not do

• No passwords anywhere, and no required account - an optional account is an email address and a single-use link or code, nothing more.
• No advertising, ad identifiers or cross-app tracking.
• No third-party analytics or crash-reporting SDKs in the app.
• No cookies for measurement, and no fingerprinting. The only cookie we ever set is the sign-in session on the web, and only if you sign in.
• No selling or sharing of data with third parties, and nothing an advertiser or data broker ever sees.

Children

Select XI is a tactics tool intended for a general audience and does not knowingly collect personal information from anyone, including children. The only free-text fields that become public are the optional author name and description on a shared lineup.

Your choices

You can use the entire builder without sharing anything and without an account. If you have shared a lineup and want it deleted, send the share code to contact@select-xi.pro and we will remove it. If you have an account, you can download everything on it and delete it yourself from the account panel, as described above.

Changes

If this policy changes materially, the updated date above changes with it and the new version is published here before it takes effect.

Contact

Hawkeye Tech — contact@select-xi.pro