Effective date: [PUBLISH_DATE]

## Who operates Gridiron Gambit

Gridiron Gambit is operated by Mark Anthony Hernandez, an individual based in Texas, United States. In this policy, "we," "us," and "our" refer to Mark Anthony Hernandez.

This policy covers the Gridiron Gambit game, our website, and support communications. For privacy questions or requests, email [admin@gridirongambit.app](mailto:admin@gridirongambit.app).

## Information we collect and process

**Account information.** When you use an account, we process an account identifier and account status. Registered accounts also use an email address and password for authentication through Google Firebase Authentication. Authentication services process sign-in and security information. Please never send your password to support.

**Guest accounts.** Guest play uses a Firebase account identifier even without an email address. A guest account can have saved progress and gameplay information. "Guest" does not mean no information is processed.

**Profiles and gameplay.** We process player and team names, selected coach cards, deck contents and customization, game selections, matchmaking and challenge activity, online presence, match results, match history, and career/deck statistics. Some game settings and cached information are stored on your device.

**Technical information.** Our hosting, authentication, and backend providers process technical information to deliver and protect their services, which can include IP addresses, user-agent information, request times, and service/error logs. We also receive technical details you choose to provide when asking for help.

**Website information.** Our website is hosted on Wix. Wix processes information needed to deliver and secure the site. We use Wix Analytics to understand visits and site usage; website cookies and similar technologies are discussed below.

**Support communications.** If you email us, we receive your email address, message, and any attachments or other information you provide. Our support email is supplied through GoDaddy using Microsoft's email services.

**Purchases.** Apple processes App Store purchases. The game does not ask for your payment-card details. We receive sales and payment reporting made available to developers by Apple for business and accounting purposes.

## Why we use information

We use information to:

- Create and authenticate accounts and provide account recovery.
- Save and synchronize profiles, decks, progress, and settings.
- Operate matchmaking, challenges, online presence, and server-resolved matches.
- Display results and maintain histories and statistics.
- Investigate errors, protect accounts, and prevent cheating or abuse.
- Answer support requests and carry out privacy requests.
- Understand website use and maintain our website.
- Meet applicable legal obligations and maintain necessary business records.

We do not treat reading this policy or accepting game terms as consent to optional advertising or analytics where separate consent is required.

## What other players can see

Other players may see your player/team name, selected branding and coach, online status, and gameplay information relevant to matches and statistics. Registered player profiles can be discoverable through player search. Guest accounts are excluded from player search and direct challenges, but participating in an online match can still show your game identity to the opponent.

Your account email address is not included in your public player profile. Avoid putting private information into a player or team name.

## Who receives information

We use service providers to operate the game and website:

- **Google Firebase / Google Cloud:** authentication, database storage, backend processing, and related infrastructure.
- **Wix:** website hosting, website operation, and analytics.
- **GoDaddy and Microsoft:** support email and related services.
- **Apple:** app distribution and purchase processing under Apple's own terms and privacy practices.

We require service providers processing information on our behalf to protect it through applicable contracts and safeguards consistent with this policy and applicable requirements. Provider documentation explains additional service-specific processing: [Firebase](https://firebase.google.com/support/privacy), [Wix](https://www.wix.com/about/privacy), [GoDaddy](https://www.godaddy.com/legal/agreements/privacy-policy), and [Microsoft](https://www.microsoft.com/en-us/privacy/privacystatement).

We may disclose information when reasonably necessary to comply with law, protect users or our services, or establish or defend legal claims. A future change of business ownership may require a transfer of relevant information, subject to applicable law and any required notice or consent.

Providers may process information in the United States and other countries where they operate. Do not assume that all account, website, and email information stays in Texas or in a single cloud region.

## Website cookies, analytics, and advertising

Essential technologies support website delivery, security, and selected preferences. Analytics technologies help measure website visits and use.

[WEBSITE_COOKIE_DETAILS - Before publication, describe the verified Wix consent controls, how visitors can reject optional cookies and revisit their choices, and any actual third-party integrations. Do not describe a control that is not enabled and tested.]

[SALE_AND_ADVERTISING_DISCLOSURE - Before publication, confirm whether website pixels, audience uploads, or embedded services disclose visitor information for advertising. State the actual sale/targeted-advertising practices and any applicable opt-out or preference-signal handling. Do not assume "no sale or sharing" merely because no cash is paid for data.]

The game currently has no in-app purchases or in-game advertising. Buying advertisements to promote the game is separate from adding advertising or tracking technology to the game or website. If we change these practices, we will update the disclosures and obtain consent where required.

Links to outside websites lead to services with their own privacy practices. Embedded content can contact its provider without a visitor following a link; any active embeds must be included in the website disclosures above.

## Retention and account deletion

Account and gameplay data are generally retained while your account remains active so the game can operate and preserve progress.

You can initiate deletion in the game's **Settings > Account** area using **Delete Account** or **Delete Guest Account**, then confirm. If you cannot access the account or a deletion fails, email us for help. Signing out of a registered account or uninstalling the app does not itself delete the server account.

Account deletion removes the account's authentication record and associated active gameplay records, including its profile, decks, presence, invitations, and shared matches/matchups and history copies involving that account. Other players' already-earned aggregate career and deck totals are not reversed.

The game clears the deleted account's local data after successful deletion. Other devices may temporarily retain previously downloaded information until they successfully refresh. We cannot remotely erase copies someone independently saved, such as screenshots.

A limited server record containing the deleted account identifier, deletion status, and timestamps is retained to prevent stale requests from recreating deleted data and to support safe completion of interrupted deletion. This is not a playable account and does not contain the former email, deck, or match history. Infrastructure logs, provider backups, support correspondence, and records required by law can follow separate retention schedules.

[RETENTION_DETAILS - Before publication, insert verified periods or specific retention criteria for deletion markers, service/security logs, backups, support email, and business/legal records. The current deletion-marker implementation has no automatic expiry; do not publish a finite deletion promise without implementing and verifying it.]

Provider deletion from backups may take longer than removal from active game records. Account deletion does not automatically request a refund of an App Store purchase.

## Your choices and privacy requests

Contact **admin@gridirongambit.app** to ask about access, correction, deletion, or a copy of information associated with you. Depending on applicable law, you may also have rights to restrict or object to certain processing, opt out of certain advertising or disclosures, or appeal a decision on a request. We will respond in accordance with applicable requirements and will not penalize you for exercising protected privacy rights.

We may need to verify that a request concerns your account. We will request only information reasonably needed for that purpose, not your password or sign-in codes. If an authorized agent contacts us, verification of their authority may be needed. If you disagree with our response, reply to the same address and request a review.

## Children and younger players

Gridiron Gambit is intended for players age 13 and older, not children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information, contact us so we can investigate and take appropriate action, including deletion where required.

An age statement is not a request to send us identity documents. Please do not email a child's identity documents or other sensitive information unless a lawful, necessary verification process has been specifically arranged.

## Security

We use safeguards intended to protect information, including authenticated access and server-side access controls. No system can be guaranteed completely secure. Keep account credentials private and report suspected unauthorized access to our support address.

## Changes and contact

We will post updates on this page with a revised effective date. For material changes, we will provide additional notice and obtain consent where required by law.

Privacy contact: **Mark Anthony Hernandez**  
Email: [admin@gridirongambit.app](mailto:admin@gridirongambit.app)

Related pages: [Support]([SUPPORT_URL]) | [Terms of Service]([TERMS_URL])