Privacy Policy
Last updated: October 4, 2026
Who we are
The nonamesoccer.com website and the Noname Soccer game are developed and published by Halil İbrahim Kalkan as an individual. "We" in this policy means him. He is the data controller for your personal data.
What we collect on the site
We use Google Analytics 4 to understand how the site is used. Google Analytics collects:
- Pages visited, visit duration and where the visit came from (referring site),
- Device type, operating system, browser and screen size,
- Approximate location (country / city level),
- A few click events: the download buttons, "Try in browser", the browser warning being shown, the trailer link and the announcer samples.
Google Analytics 4 does not log or store IP addresses. We do not collect anything that identifies you directly, such as your name or email address. Data is kept for the period set in Google Analytics, at most 14 months.
Cookies and browser storage
Google Analytics sets the _ga and _ga_S97V2HGG4T cookies in your browser. They are used to tell repeat visits apart and last 2 years by default. You can delete or block cookies in your browser settings at any time.
The site also keeps these preferences only in your browser's local storage (localStorage); they are never sent anywhere:
- Your language (TR / EN; the browser version also starts in it the first time you open the game),
- That you have seen the browser version warning and chose to continue in the browser,
- That you acknowledged the cookie notice.
The game
Noname Soccer has no accounts and no data collection of its own. Game settings are stored only on your device: in your user profile folder for the desktop builds, and in your browser's storage for the browser version. The game does not send this data to us or anyone else.
Online matches: When you play online, the room code, the game version and the connection setup details pass briefly through Supabase Realtime to bring the two games together; they are not stored, and both games leave the channel once connected. The match itself then runs directly between the two players (WebRTC, peer to peer), and only control inputs are sent. Because of this, the two players can see each other's IP address. Google's and Cloudflare's STUN servers are used to set up the connection and see your IP address too. Online play has no accounts, rankings or match statistics.
Finding a random opponent: When you choose "Find an opponent", the game puts an entry into a waiting queue in a Supabase database: a random ticket number made up for this search, your room code, a code for the game version, and a rough region (one of four, worked out from your device's time zone). No name or account is stored. An entry is deleted as soon as you are matched or cancel, and at the latest a minute after your game stops asking. To prevent abuse, the queue also records the requester's IP address and the time of each new search and accepts at most 60 searches an hour from one IP address; these records are used only for this limit and are deleted after an hour.
Connection relay (TURN): On some networks the two games cannot connect directly. The match's control inputs are then relayed through Cloudflare's TURN server, and Cloudflare sees both players' IP addresses. Before a room opens, the game gets a short-lived access credential for this server (valid for at most 2 hours) from a small server function on Supabase. To prevent abuse of this service, the function records the requester's IP address and the time of the request in a Supabase database and accepts at most 20 requests an hour from one IP address. These records are used only for this limit, and those older than a day are deleted.
Version check: The desktop build downloaded from the site reads nonamesoccer.com/version.json once per launch to tell you when a new version is out. No game data is sent with this request. The Microsoft Store version does not do this check; the Store delivers its updates.
Third parties
- Google Analytics (Google LLC): the visit statistics described above. Data may be processed on Google's servers outside your country, including in the United States.
- YouTube: the trailer is embedded from
youtube-nocookie.com. When you play the video, YouTube's own privacy rules apply. - GitHub: the site is hosted on GitHub Pages and the desktop builds are downloaded from GitHub Releases. GitHub may keep server logs (including IP addresses) to operate the service.
- Supabase: brings the two players of an online match together, keeps the short-lived queue for random opponents and hands out the TURN credential (as described above). Supabase may keep server logs (including IP addresses) to operate the service.
- Google and Cloudflare STUN servers: tell your game its public IP address and port so an online match can connect directly.
- Cloudflare TURN: relays the control inputs of an online match between the two players when they cannot connect directly (as described above).
- Microsoft Store: if you install the game from the Microsoft Store, installation and updates are covered by Microsoft's own privacy statement.
Your rights
Under the EU General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK), you have the right to access your data, ask for it to be corrected or deleted, and object to its processing. You can stop Google Analytics from collecting data about you by blocking cookies in your browser or with Google's Analytics opt-out add-on.
Children
The site and the game are open to everyone, and we do not knowingly collect personal data from children.
Changes
We may update this policy from time to time. The current version is always on this page, with the date at the top.
Contact
For privacy questions or requests, please open an issue on GitHub.