Fetch an image we host

Serves a team crest or player headshot from our own storage. Every logo_url, headshot_url, photo_url and flag_url in any response points here; no response field ever points at a third-party host.

id is opaque and is the only supported way to reach an asset. There is no parameter that accepts a URL, and an id this API did not issue is refused. Do not parse, construct, truncate or derive anything from it; treat it as a bearer string and store it whole. The same image always gets the same id, so the URL is stable and safe to cache or persist.

No API key is required, and an authenticated request returns byte-identical content to an unauthenticated one. Responses carry cache-control: public, max-age=31536000, immutable, so you may cache and store the bytes, including in your own infrastructure, for as long as that header allows.