University Football is built to keep your data on your devices. This page describes everything the game and this website handle, last updated October 2026.
playufb.com is static pages served by Cloudflare. We run no analytics of our own. Cloudflare processes standard connection logs (IP address, request path) to serve and protect the site, as any host does.
The public pages of this website use Google AdSense to show ads. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
You may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalized advertising at www.aboutads.info. To learn more, see how Google uses information from sites that use its services.
Ads appear only on the public website. The game itself — desktop and UFB GO — shows no ads and contains no ad trackers.
The game is unlocked by your itch.io purchase. When you sign in, itch.io tells us your itch user ID and username so we can confirm you own the game. We don't see your itch password.
One purchase covers two computers and one browser, so we keep a small record for your account: your itch user ID and username, the computers you've signed in on (the computer's name, Mac or Windows, and when it was last played) and your current browser sign-in. The browser keeps a signed session cookie for up to 30 days; the desktop app keeps its sign-in in your computer's keychain. You can see your devices at playufb.com/account. To have your account record deleted, email us.
Single-player saves stay on your device: on desktop they're files on your computer; in UFB GO they live in your browser's local storage for that device. We can't see them. Clearing the browser's site data deletes GO saves.
Recruits are played by an AI model in the cloud. When you text a recruit or talk to one in a meeting, your message and the recruit's game details (his ratings, interests and your offer) go through our server to Cloudflare Workers AI, which writes his reply. We don't keep these messages on our servers; the conversation is saved only in your own save file. We count how many texts each account sends per day, to keep the service within its limits.
Online matches relay game inputs (plays, movements) and your chosen team between the two players through our match server. Match data is transient and discarded when the lobby closes.
The desktop app checks our update server for new versions. These requests carry no personal information beyond the standard connection details any download involves.
itch.io handles purchases and sign-in. Cloudflare hosts this site, our sign-in service and the AI that writes recruit replies. Google serves ads on the public pages. Hetzner hosts our update and match servers. Each has its own privacy policy.
The game is not directed at children under 13, and we don't knowingly collect personal information from children under 13.
If this policy changes, the new version appears here with an updated date.