Privacy policy

Last updated 1 September 2026

The short version. We store your email address and the drills you make, so they can follow you between your laptop and your phone. They are kept on servers in Frankfurt, inside the EU. We don't sell them, we don't advertise, and nobody at 11Tactics reads your sessions. You can download everything or delete the lot at any time, and if you delete your account it is gone for good.

Who is responsible

11Tactics is run by an individual sole trader based in Bulgaria, and is the data controller for everything described here. For anything at all about your data — a copy of it, a correction, or deletion — email info@11tactics.com. We answer within 30 days, and usually far sooner.

What we store, and why

Your account

Your email address, and a password that is hashed — put through a one-way function so that what we hold cannot be turned back into your password. Nobody at 11Tactics can see it, and neither can anyone who stole the database. If you sign in with Google we receive your email address and nothing else; we never see your Google password.

We keep this because an account is the whole point: it is what lets the same drills open on your laptop and your phone.

Your work

The folders, sessions and drills you create, their names, any notes you write, and a small preview image of each drill. This is yours. We store it so it can sync between your devices, and for no other reason.

Your devices

A subscription is for one coach, so we record which device is currently using your account — a generated identifier plus a rough description your browser volunteers, like "Chrome on Android". It is deliberately vague: it is there so you recognise it, not so we can identify a machine. It is overwritten each time you sign in somewhere new, and never builds a history.

Which features you use

We count how often each part of the app gets used — how many drills were made, how many times something was exported, which pitch sizes get picked. It is how we decide what to build next and what to drop, and without it we would be guessing.

It is kept as daily totals, not a diary. What we hold is "on 14 March, this account exported 3 PDFs" — never a timeline of when you did what. That distinction is the whole design: a timestamped list of everything a person did is a surveillance record whatever it was gathered for, and a daily count answers the question without being one.

It never includes anything from inside a drill. Not its name, not your notes, not where you put the players — only that a thing of that kind happened, and how many times.

If your browser sends a "do not track" or Global Privacy Control signal, we count nothing at all. You can also just ask us to switch it off for your account: email info@11tactics.com.

What we deliberately do not collect

• No advertising, no ad networks, no tracking pixels.
• No selling or sharing your data with anyone, for any price.
• No reading your drills. They are stored for you, not looked at by us.
• No location, no contacts, no access to anything else on your device.
• No third-party analytics company. The usage counts above are ours, stay on our own servers, and go nowhere else.
• No AI. Nothing you write or draw is sent to any AI service.

Where it is kept, and who processes it

A handful of companies handle data on our behalf. Each is bound by contract to process it only as instructed, and every one of them keeps EU data inside the EU.

Cookies

One cookie, called tb_session. It holds the token that proves you are signed in, so the server can tell whether to give you the board. It expires with the sign-in itself and is not used for anything else.

That is a strictly necessary cookie — the site cannot work without it — so there is no consent banner. There is nothing to consent to, because there is nothing else being set.

The app also uses your browser's local storage to keep a copy of your work on the device. That never leaves your computer except as part of the sync described above, and it is what lets the board keep working when you are standing on a pitch with no signal.

How long we keep it

• While your account is open — your work stays exactly where you left it.
• When you delete a drill — it is removed from our servers on the next sync, from every device.
• When you delete your account — everything goes with it, permanently, within 30 days. There is no archive and no undo.

Your rights

Because we are in the EU and so is your data, the GDPR applies in full. You have the right to get a copy of what we hold, correct it, delete it, take it elsewhere, or object to what we do with it.

Most of these you can exercise yourself without asking: your drills export as files from inside the app, and deleting is a button. For anything else, email info@11tactics.com. It is a small operation, so it is a person who reads it.

If you think we have handled your data badly and we haven't put it right, you can complain to your national data protection authority. In Bulgaria that is the Commission for Personal Data Protection.

Children

11Tactics is a tool for coaches, and accounts are not intended for anyone under 16. Coaches routinely plan sessions for children — that is the job — but nothing in this app asks for a player's name, and we would rather you didn't put one in. Use squad numbers and positions.

If something goes wrong

If data is ever exposed in a way that could put you at risk, we will tell you and the relevant authority within 72 hours of finding out, and say plainly what happened rather than burying it.

Changes

If this policy changes in a way that actually affects you, we will email you about it rather than quietly editing the page and changing the date.

Written to describe honestly how the software really works, rather than copied from a template. If you are reading this as a club or organisation with your own compliance requirements, get in touch and we will answer specifics.