Privacy Policy

Effective date: 14 July 2026. Last updated: 14 July 2026.

This policy explains how Vortex Games ("we", "us", the "operator") collects, uses and protects personal data when you use Tactical Eleven (the "game" or "service"), an online football management game. It covers our obligations under the EU and UK General Data Protection Regulation (GDPR) and under United States state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

Who we are

The data controller is Vortex Games, established in Spain. For any privacy or data-protection matter, contact us at admin@vortex-gaming.net.

Personal data we collect

We collect only what the game needs to run your account and let you play:

• Account details: your manager (display) name, email address, and a securely hashed password. We never store your password in plain text.
• Gameplay records: your club, squad, fixtures and results, collection of player cards, daily objectives, login streak, coin balance and in-game activity.
• Purchase and Credits-order records: your Credits balance, top-up orders, pack openings and other in-game transactions, together with the wallet history that lists them.
• Technical and security data: the strictly necessary session cookie and CSRF token described in our Cookie Policy, your IP address, and your last-login timestamp.

We do not intentionally collect special categories of data (such as health, political or biometric data), and you should not submit any through the game.

Why we use your data, and our legal bases (GDPR)

Under the GDPR we rely on the following legal bases:

• Performance of a contract: to create and operate your account, run matches, keep your balances and collection, and provide the service described in our Terms.
• Consent: for any optional processing, such as non-essential cookies if we add them in future, or marketing if we ever offer it. You may withdraw consent at any time.
• Legitimate interests: to keep the game secure, prevent fraud and abuse, debug and improve the service, and enforce our Terms, where those interests are not overridden by your rights.
• Legal obligation: to keep records we are required by law to keep, and to respond to lawful requests.

Retention

We keep your personal data for as long as your account is active. If you close your account, or ask us to erase your data, we delete or anonymise it within a reasonable period, except where we must keep certain records (for example, transaction records for tax, accounting or fraud-prevention purposes) for as long as the applicable law requires. Backups are overwritten on a rolling schedule.

International transfers

Where we transfer personal data outside the European Economic Area or the United Kingdom, we rely on an appropriate safeguard, such as an adequacy decision or the European Commission's Standard Contractual Clauses, and we apply additional measures where needed. You may request a copy of the relevant safeguard by contacting us at admin@vortex-gaming.net.

Your rights under the GDPR

If you are in the EEA or the UK, you have the right to:

• access the personal data we hold about you;
• have inaccurate data rectified;
• have your data erased ("the right to be forgotten");
• restrict our processing of your data;
• data portability, receiving your data in a portable format;
• object to processing based on our legitimate interests; and
• withdraw consent at any time, without affecting processing already carried out.

To exercise any of these rights, contact admin@vortex-gaming.net. We will respond within the time limits set by law. We may need to verify your identity first. You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data properly.

United States and California privacy rights

This section applies to residents of California and of other US states with comparable privacy laws. It uses the categories defined by the CCPA/CPRA.

Categories of personal information we collect

• Identifiers: manager name, email address, account identifier and IP address.
• Internet or network activity: gameplay records and session information.
• Commercial information: Credits orders, pack purchases and wallet history.
• Customer records: the hashed password and account credentials used to secure your login.

We collect this information to provide and secure the game, operate your account and transactions, prevent fraud and abuse, and comply with law, as described above. We disclose personal information only to service providers (such as hosting and, once enabled, payment processing) that act on our instructions under contract.

We do not sell or share your personal information

Tactical Eleven does not sell your personal information, and does not share it for cross-context behavioural advertising, as those terms are defined by the CCPA/CPRA. Because we do not sell or share, there is nothing to opt out of today; if this ever changes, we will update this policy and provide a working "Do Not Sell or Share My Personal Information" choice before doing so.

Your California rights

• Right to know what personal information we have collected and how we use and disclose it.
• Right to delete personal information we have collected, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of any sale or sharing of personal information (which, as stated, we do not do).
• Right to non-discrimination: we will not deny you service, charge a different price, or provide a different quality of service because you exercised a privacy right.

To exercise these rights, contact admin@vortex-gaming.net. You may use an authorised agent to submit a request on your behalf; we may ask the agent for proof of authorisation and may ask you to verify your own identity directly. We will respond within the time limits set by applicable law.

Children

Tactical Eleven is not directed to children under 13, and we do not knowingly collect personal information from anyone under the minimum age. You must be at least 13 to hold an account. In the European Union, the minimum age for consent to information-society services ranges from 13 to 16 depending on the member state; where a higher age applies to you, that age is your minimum. We comply with the US Children's Online Privacy Protection Act (COPPA). If we learn that we have collected data from a child below the applicable age without the required consent, we will delete it. Parents or guardians who believe their child has provided us with data may contact us at admin@vortex-gaming.net.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above and, where the change is significant, provide a more prominent notice.

Contact

For any question about this policy or your personal data, contact admin@vortex-gaming.net. See also our Terms of Service, Cookie Policy and Responsible Play pages.