Privacy Policy

Starting11 is built on the principle of minimal data collection. We believe you should be able to create and share football lineups without compromising your privacy. We only collect the data necessary to provide our services and respect your rights at every step.

We collect minimal information to provide our services. For users who choose to create an account, we store only the standard OAuth data required for authentication (typically your email address and basic profile information from your chosen login provider). For guest users, we collect no personal information whatsoever.

Any information we collect is used solely to provide and improve our services. This includes enabling you to save your lineups, track your creations, and personalise your experience. We never sell, rent, or share your personal information with third parties for marketing purposes.

Starting11 is cookieless by design. We use Cloudflare Web Analytics for understanding which pages load well and how fast — it sets no cookies, doesn't track you across sites, and is GDPR-clean out of the box. The only cookie set on this site is the Clerk session cookie that keeps you signed in if you've created an account; it's strict-necessary, expires when you log out, and is exempt from the EU/UK ePrivacy consent banner requirements. We do not use third-party advertising cookies, behavioural-tracking cookies, or cross-site identifiers.

The lineups you create are stored to enable sharing and saving functionality. Public lineups (those you choose to share) are visible to other users and may appear in recent lineups sections. You maintain full control over your creations and can delete them at any time.

We retain your data only as long as necessary to provide our services. Account data is kept while your account remains active. Inactive accounts and associated data may be automatically deleted after extended periods of inactivity, with appropriate notice where possible.

If you're in the UK or EU you have the following rights, all of which we honour: (a) Access — get a copy of the data we hold on you; (b) Rectification — correct anything we have wrong; (c) Erasure — delete your account and all associated data ("right to be forgotten"); (d) Restriction — pause our processing of your data while a dispute is resolved; (e) Portability — receive your data in a machine-readable format and move it elsewhere; (f) Objection — object to specific processing activities. To exercise any of these, email us; we'll respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local EU supervisory authority.

We share only what is strictly necessary to operate the service. (a) Clerk Inc. — handles authentication, stores your email + display name + OAuth tokens. Their privacy policy: https://clerk.com/legal/privacy. (b) Cloudflare Inc. — provides DNS, CDN, and cookieless analytics. Their privacy policy: https://www.cloudflare.com/privacypolicy/. (c) Hetzner Online GmbH — hosts our application servers + database in Germany. Their privacy policy: https://www.hetzner.com/legal/privacy-policy. We do not share data with advertisers, data brokers, or analytics providers beyond Cloudflare Web Analytics.

We implement appropriate security measures to protect your information against unauthorised access, alteration, disclosure, or destruction. Our systems are designed with privacy and security as core principles, not afterthoughts.

Should we introduce advertising in the future, it will be minimal, non-intrusive, and respect your privacy. We commit to never using invasive tracking or data collection for advertising purposes. Any future advertising will be clearly identified and easily distinguished from our content.

Starting11 uses OAuth providers (such as Google or GitHub) for authentication. These services have their own privacy policies that govern how they handle your information during the login process. We encourage you to review their policies as well.

Starting11 is designed for general audiences and we do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify users of any material changes through our website and update the effective date below. Your continued use of Starting11 after changes become effective constitutes acceptance of the revised policy.