Legal

Privacy Policy

What we collect, why we collect it, where it lives, and how to make it disappear.

Last updated: July 5, 2026

Plain-English summary: we collect only what the contest needs to run — your name, date of birth, email, optional avatar, your picks, a push token if you opt in, and the US state you're playing from. We never sell your data, and you can delete your account (and everything with it) from inside the app at any time.

1. Who we are

Gridiron Gold ("we", "us") operates the Gridiron Gold mobile application and this website. This policy describes how we handle personal information for users of the app and visitors to the site. For anything privacy-related, contact support@gridirongold.app.

2. Information we collect

Account details — first name, last name, email address, date of birth (used to verify you meet the minimum age of 18), and a password (stored only as a salted cryptographic hash — we cannot see it).
Optional profile photo (avatar) — only if you choose to upload one.
Contest entries — your bracket picks, predicted round totals, and submission timestamps.
Push notification token — only if you enable notifications; used solely to deliver the notification categories you opt into.
Coarse location (US state) — derived from your network connection to enforce state eligibility rules. We do not collect precise GPS location.
Technical basics — standard server logs (IP address, request time, app version) kept briefly for security and troubleshooting.

3. Why we collect it

Operating the contest: scoring your bracket, ranking the leaderboard, determining winners.
Eligibility: confirming you are 18 or older and not located in an excluded state (RI, WA, NY, FL).
Communication: email verification, password resets, and — if you opt in — push notifications about locks, results, and eliminations.
Displaying you to other players: the leaderboard shows your first name, last initial, and avatar only (e.g., "Jordan T.").
Security, fraud prevention, and legal compliance.

4. Where your data is stored

Data is stored on Amazon Web Services (AWS) infrastructure in the United States, encrypted in transit. Access is restricted to the small team that operates the service.

5. Sharing

We do not sell your personal information. Ad sponsors whose creatives appear in the app receive no personal information about you — ads are served without profiling or cross-site tracking. We share data only with the infrastructure providers that host the service (e.g., AWS, our email and push delivery providers), each bound to process it solely on our behalf, or where required by law (including verifying prize winners with our insurance carrier).

6. Retention

We keep your data while your account exists. Contest records needed to audit prize awards may be retained for a limited period after the season ends, after which they are deleted or anonymized. Server logs are retained for a short rolling window.

7. Deleting your data

You can delete your account in the app (Profile → Delete account) — this permanently deletes or anonymizes your personal information, including your profile, brackets, and push tokens. Limited records may be retained for a period where required for legal, security, or prize-audit purposes. Full instructions, including an email fallback, are on the account deletion page.

8. Children

Gridiron Gold is for adults 18 and over. We do not knowingly collect information from anyone under 18; date of birth is checked at signup, and accounts found to belong to minors are removed.

9. Your rights

Depending on your state, you may have rights to access, correct, or delete your personal information. Email support@gridirongold.app and we will honor verified requests.

10. Changes to this policy

If we make material changes, we will update the date above and notify you in the app before the changes take effect.

11. Contact

Questions about this policy: support@gridirongold.app.