Privacy Policy

1. Who We Are

Touchback ("we," "us," or "our") operates the website touchback.us, a daily NFL trivia and game platform. For questions about this policy, contact us at touchback.us@gmail.com.

2. Information We Collect

Account information: When you register, we collect your email address, username, and password (stored as a secure hash). Providing a phone number is optional.

Game data: We store your scores, streaks, and answers to calculate leaderboard standings.

Payment information: If you purchase a VIP or MVP membership, payments are processed by Stripe. We do not store your card details — Stripe handles all payment data under their own privacy policy.

Cookies: We use only essential session cookies required to keep you logged in. We do not use advertising, retargeting, or behavioral tracking cookies.

3. How We Use Your Information

• To operate your account and allow you to play
• To display scores on leaderboards
• To process membership payments through Stripe
• To send transactional emails (e.g., password resets)
• To send SMS messages if you have given explicit consent (see Section 5)
• To improve the platform

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

4. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data by emailing touchback.us@gmail.com. We will process requests within 30 days.

5. SMS / Text Message Terms

If you provide your phone number and opt in to SMS messages during registration, you consent to receive recurring automated promotional and informational text messages from Touchback (touchback.us).

• Message types: Game alerts, daily game reminders, and occasional promotional messages.
• Frequency: Up to 1–2 messages per day during active game periods.
• Opt-out: Reply STOP at any time to unsubscribe. You will receive one confirmation message, then no further texts.
• Help: Reply HELP for assistance or email touchback.us@gmail.com.
• Rates: Message and data rates may apply depending on your carrier and plan.
• Consent is not required: Providing your phone number and opting in to texts is entirely optional and is not a condition of using Touchback or making any purchase.
• Carriers: Carriers are not liable for delayed or undelivered messages.

6. Security

We use industry-standard security measures including password hashing (bcrypt) and HTTPS. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Children

Touchback is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it promptly.

8. Third-Party Services

We use the following third-party services which have their own privacy policies:

• Stripe — payment processing (stripe.com/privacy)
• Resend — transactional email delivery (resend.com/privacy)
• Vercel — website hosting (vercel.com/legal/privacy-policy)

9. Changes to This Policy

We may update this policy periodically. The "Last updated" date at the top reflects the most recent revision. Continued use of Touchback after changes are posted constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, email us at touchback.us@gmail.com.