Privacy
Privacy at 17-0 Draft
This page says what the site keeps in your browser, what our server counts, and who else is involved. It describes what the site does today.
What this site is
17-0 Draft is a free football draft game in your browser. You pick 11 legends and try to win all 17 matches. Fan-made, not affiliated with UEFA.
Who runs this site
17-0 Draft is a fan-made project run from Switzerland. It is responsible for the data described on this page. Contact: ucl17zero@gmail.com. A postal address will be added shortly.
What we don't collect
- There are no accounts and no sign-up.
- The game never asks for your email address or phone number.
- We don't give you an ID, and we use no tracking cookies.
- There are no ad networks and no social media trackers on the site.
- We don't store your IP address with our game counts.
What stays in your browser
Your Daily results, streak, stats and saved best XI stay in your browser only and are never sent to us. Here is everything the site keeps on your device:
| Name | Type | What it holds | When | How long |
|---|---|---|---|---|
| ucl170:retention | Type: Browser storage (localStorage) | What it holds: The day of your first visit and your last visit. Where you first came from, as one word from a fixed list (for example x, google, share or direct). A creator code, if your first link had one. A flag that says a return after 7 days was already counted. | When: When a page first loads | How long: Until you clear site data |
| ucl170:daily:<date> | Type: Browser storage (localStorage) | What it holds: Your Daily result for that day: wins, draws, losses, how far you got, your 11 picks, the match results and your squad rating. | When: When you finish a Daily | How long: Until you clear site data |
| ucl170:daily:stats | Type: Browser storage (localStorage) | What it holds: Your Daily stats: games played, titles, 17-0s, current and best streak, how far each run got, and your last 30 Dailies. | When: When you finish a Daily | How long: Until you clear site data |
| ucl170_personal_best_v1 | Type: Browser storage (localStorage) | What it holds: Your best finished run: the result, the 11 players with their ratings, the chance figures for that XI, the game mode and the day it was saved. | When: When a finished run is your best so far | How long: Until you clear site data |
| ucl170:probe | Type: Browser storage (localStorage) | What it holds: A test value. It is written and removed straight away, to check that storage works. | When: When the game reads its saved data | How long: Removed at once |
| ucl170_daily | Type: Cookie, set by our server | What it holds: Today's Daily date and a flag that says you finished it, with a signature so it can't be faked. Everyone who finished the same Daily gets the same value, so it holds no ID. Your browser only sends it to this site, and page scripts can't read it. | When: When you finish the Daily | How long: 36 hours |
What our server sees
Game counts
To count visits and returning players, your browser sends a short note to our server the first time you open the site each day, when you come back the next day or after 7 days or more, and when you start a draft, finish a run, finish a Daily or tap a share button.
Each note holds only words from fixed lists: what happened, how many days since your first visit (as a range, like "day 1" or "8 days or more"), the game mode, where you first came from, a creator code if you had one, and how you shared. For finished runs outside the Daily, it also says how far the run got (17-0, title, final, knockouts or league phase). It never holds your picks or scores. For the Daily, we only count that it was finished, not how it went.
Our server checks your browser type against a fixed list, only to sort the count into "people", "bots" or "our own tests". It does not store your IP address, your browser type, cookies or any ID. The counts are kept in Cloudflare Workers Analytics Engine, which keeps them for 3 months.
The Daily
When you open the Daily, the game asks our server if this browser already finished today's Daily. Our server only reads the cookie in the table above. When you finish, it sets that cookie. This stops casual replays. It is not a guarantee: a new browser gets a new try.
The game also has a Daily leaderboard, but it is switched off. While it is off, nothing about you is sent for it. It would store the name you type and your result in a database run by Supabase. We will update this page before it is ever switched on.
Share and challenge links
A share or challenge link holds a short code: the game version, the mode, a number for the random draw, and which card you picked at each step. It holds nothing about you. Our server turns the code back into the result page and its preview image. We don't save the code. Cloudflare keeps a cached copy of the image.
Hosting
Cloudflare hosts the site. Like any web host, Cloudflare receives every request, including your IP address and browser type, to deliver pages and protect the site. Cloudflare handles this under its own privacy policy. We have our own server logs switched off.
Cloudflare also adds its Web Analytics script to our pages. It loads from static.cloudflareinsights.com and sends Cloudflare the page address, the page you came from, how fast the page loaded and your browser type. It counts visits without cookies.
If a page fails to load, your browser may send a short error report to Cloudflare.
Why, and on what basis
We use this data to run the game, save your progress in your browser, stop Daily replays, keep the site secure and count visits in aggregate. Saving your game in your browser is part of the features you use. Counting visits and running the site securely are in our legitimate interest in running a free game (for visitors in the EU/EEA: GDPR Art. 6(1)(f)). You don't have to give us anything: there are no accounts, and the game works without the visit counter.
Other companies
- Cloudflare hosts the site, runs Web Analytics and stores our game counts. Cloudflare is a US company and may handle data in other countries, including the US. It is certified under the EU-US and Swiss-US Data Privacy Framework, and its data processing terms include the EU Standard Contractual Clauses as a fallback. Cloudflare keeps hosting and Web Analytics data under its own privacy policy: https://www.cloudflare.com/privacypolicy/
- football-data.org supplies football stats. Our server fetches them once a week. Nothing about you is sent.
- Our fonts and images come from this site. Apart from Cloudflare's Web Analytics script, no other company's scripts, fonts or images load in your browser.
- Some links take you to other sites when you tap them: X and WhatsApp (to share), 82-0.com and football-data.org. Those sites have their own privacy rules.
How to clear it
Clear the site data for ucl17-0.com in your browser settings. This deletes everything in the table above: your Daily results, streak, stats, best XI and the cookie. It can't be undone. A private window deletes it when you close the window.
To stop the visit counter, block site data for ucl17-0.com in your browser settings. The game then can't save your results.
Your rights
You can ask us what personal data we hold about you and ask us to correct or delete it, or object to how we use it. We hold nothing that identifies you, so in most cases we can only confirm that. You can complain to the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch) or, in the EU/EEA, to your local data protection authority.
Changes to this page
If what the site keeps or sends changes, we update this page.
Last updated: 29 October 2026
Contact
Questions about privacy, or a request about your data? Email ucl17zero@gmail.com or message us on X at @UCL17zero.