Gaffer privacy
Nipomo Soccer Club. Last updated 14 September 2026.
Gaffer is a fantasy football game run by Nipomo Soccer Club for its own
players, most of whom are between thirteen and eighteen. This page says exactly
what the app stores, what it does not, and how to get rid of it.
What Gaffer stores about a player
| What | Why |
| A sign-in identifier from Google or Apple |
So the same person gets back to the same squad. |
| A display name, shown as a first name and last initial |
So a league table can be read. |
| The squad picked, the eleven played each week, and the points scored |
That is the game. |
That is the whole list of what Gaffer itself stores.
The one thing the sign-in service holds
Signing in is handled by Firebase Authentication, a Google service, in a
project owned by Nipomo Soccer Club. Firebase keeps its own account record for
each sign-in, and for a Google account that record includes the email address on
it. Gaffer never reads that address, never stores it in its own database and
never sends anything to it. Apple sign-in is not asked for an address at all, so
for an Apple account there is none, and Hide My Email means the club never learns
one even if you use it elsewhere.
We list an email address on the App Store privacy label because of this
record, not because Gaffer asks you for one. Deleting your account from inside
the app removes that record too.
What Gaffer does not have
- No password. Sign in is through Google or Apple only.
There is no password to guess, reuse or phish.
- No messages. No chat, no direct messages, no comments,
no free text field a player can type into that another player can read. A
team name has to be approved by an adult before anyone else sees it.
- No photos, no video, no location, no contacts, no microphone.
- No advertising identifier, no analytics SDK, no tracking.
Nothing is shared with a data broker or an advertiser, because nothing is
shared with anyone.
- No email newsletters. The app does not send mail.
Where it lives
In Google Cloud Firestore, in a project owned by Nipomo Soccer Club, in the
United States. It travels over HTTPS. Club officers can see a player's squad
and score, which is the point of a league. Nobody else can.
Professional players
The footballers you pick are professionals in public competitions, and their
match statistics come from a licensed data feed. Gaffer stores no personal
information about them beyond name, club, position and what they did in a
match.
Deleting an account
You can delete your account yourself, from inside the app. Open
Account and tap Delete account, in the iOS app
or on this website. There is no waiting period, no form, and no reason has to be
given.
Deleting removes your account, the record that your Apple or Google sign-in
was ever used here, and the Firebase sign-in record described above. It takes
effect at once: every device you are signed in on is signed out the moment it
happens, because the account is checked on every request rather than trusted
from a token.
What is kept, and why. Weeks that have already been scored
stay in the league record, with your name removed from them. They are not kept
for us; they are the results of the people you played. Deleting them would
silently change somebody else's finished Saturday because a third party left,
and that is a worse outcome for everyone including the person leaving. The
players you had picked go back on the board for somebody else to take.
If you would rather somebody did it for you, or you cannot get into the app,
email admin@nipomosoccer.com from the
address the account signs in with, or ask any club officer.
Children
Gaffer is built for club players under eighteen and the controls above are
the reason it looks the way it does: federated sign-in, no free text, no
photographs, no messaging, and adult approval on anything a player could use to
name themselves. A parent or guardian can ask what is stored about their child,
or have it deleted, at the address above.
Changes
If this page changes, the date at the top changes with it.
Nipomo Soccer Club,
admin@nipomosoccer.com