Privacy Policy
Last updated 17 October 2026
In short: the game keeps only what it needs to run. There are no analytics, no advertising and no tracking cookies, and we never sell your information.
Who we are
Where Legends Grow ("the game", "we", "us") is a free online football manager at wherelegendsgrow.com, also available inside the Bread app. It is run by Wiktor Starczewski. This policy explains what information the game uses, why, and the choices you have.
What we keep
| Information | What it is | Why |
|---|---|---|
| Account identifier | If you sign in with Bread, a public ID derived from your wallet's signing key. If you sign in with Google or Apple, the account ID that Google or Apple sends us. | To recognise you when you sign in. |
| Your game | Your club's name, nationality, crest and kits, your players, tactics, matches, results, tasks, Fame and in-game purchases with Fame. | To run the game. |
| Messages | Mail and chat messages you send to other managers. | To deliver and show them. |
| Assistant | Questions you ask the assistant manager, and its replies. | To answer you and show your conversation. |
| Market | The Miden account you use for trading, and your listings, bids and trades. | To run the market. |
| Session cookie | One cookie, wlg_session, which keeps you signed in for up to 7 days. | To keep you signed in. |
| Connection data | Your IP address, which reaches our server with every request. | To protect the game from abuse, such as floods of requests. It is not stored in the game's database. |
We don't ask for your name, email address, phone number, date of birth, location, contacts or payment details.
Stored on your device
Besides the session cookie, your browser keeps a few entries in local storage: in-progress market and assistant top-up steps, and some game preferences. They stay on your device, and you can clear them in your browser settings at any time.
Signing in with Google or Apple
When you sign in with Google or Apple, we ask only for your account ID, and it is the only thing we keep. We don't request your name, email address, profile photo, contacts or any other data from your Google or Apple account.
We use that identifier only to sign you in. We never use it for advertising and never share it. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
What we don't do
- No analytics, advertising, tracking pixels or third-party trackers.
- No selling, renting or trading of your information.
- No profiling, and no marketing emails.
- No posting or acting on your behalf with your Google, Apple or Bread accounts.
The blockchain is public
Market trades are transactions on the Miden blockchain, currently on its testnet. Transactions, the accounts involved and the market's on-chain records are public and permanent. Nobody, including us, can change or delete them.
Services we use
We share information with these services only so they can do their part in running the game:
| Service | What it does |
|---|---|
| Render | Hosts the game and its database in Frankfurt, Germany. |
| Cloudflare R2 | Stores backups of the game's database and the 3D match recordings. |
| Groq | Writes the assistant manager's replies. It receives your question and the parts of your club needed to answer it, such as your squad, tactics and recent results. |
| Miden network | The public blockchain that records market transactions. Miden's testnet services also check and prove those transactions. |
| Google and Apple | Sign you in, only if you choose them. |
Some of these companies are based outside the European Union, mainly in the United States. We may also disclose information when the law requires it.
How long we keep it
- Account, club, messages and assistant conversations: for as long as your account exists.
- 3D match recordings: 32 days. Results and player statistics stay with your club.
- Backups: replaced automatically. The oldest copy is seven days old.
- Connection data: held briefly in server memory. It can also appear in our hosting provider's short-lived technical logs.
Your choices and rights
You can ask us for a copy of your information, ask us to correct it, or ask us to delete your account and club by emailing celrisen@gmail.com. We'll reply within 30 days. Information already recorded on the blockchain can't be deleted.
If you live in the European Economic Area, the United Kingdom or another place with similar laws, you can also object to or restrict how we use your information, ask for it in a portable format, and complain to your local data protection authority. We use your information because it's needed to provide the game you asked for, and because we have a legitimate interest in keeping the game secure and fair.
Children
The game isn't directed at children under 13, or under 16 where local law sets that age. We don't knowingly collect their information. If you believe a child has signed up, contact us and we'll delete the account.
Changes to this policy
If we change how the game uses information, we'll update this page and the date at the top. For significant changes, we'll also tell you in the game.
Contact
Questions about this policy or your information: celrisen@gmail.com.