Who we are

Kordell Sports (the “app”) is a free set of NFL trivia and minigames plus football articles, operated by [Operator legal name — to confirm], Kentucky, USA (“we”, “us”). This policy explains what the app collects, why, and the choices you have. Questions: support@thekordellgroup.com.

What we collect

1. If you play as a guest (no account)

Everything stays in your browser's local storage on your device and is not sent to us:

• a generated guest username, the avatar and favorite team you pick, and your light/dark theme;
• your game results and history (records, scores, streaks, answers) and any game in progress;
• comments you type on articles (these are saved only on your device and are not posted anywhere);
• whether you dismissed the “Save your progress” prompt.

The app also caches pages and game data on your device so it works offline. You can erase all of this with Profile › Reset all data or by clearing your browser's site data.

2. If you create an account

• Email address. Used only to send you one-time sign-in codes and to identify your account. We never show it to other players and never send marketing email.
• Profile: your username, avatar choice and favorite team (optional), plus when your profile was created and last changed.
• Game results: which game you played, the date, your score, and a summary of the game, such as your Dream Draft lineup, record and team rating, your Blitz prompt, correct answers and combo, or your Higher or Lower cards and guesses.
• Sign-in session: a secure cookie that keeps you signed in. It is strictly necessary for the account to work.
• A copy on your device: the app keeps a copy of your profile and results, plus any results waiting to upload, in local storage so stats load instantly and nothing is lost when you're offline.

If you had guest progress on a device when you signed in, the app offers to copy it into your account. Nothing is copied unless you choose to.

3. Technical data

Like any website, when you use the app our hosting and database providers automatically process technical information such as your IP address, browser and device type, the time of each request, and sign-in events (for example, a code being requested or used). This is used to run the service, keep it secure, and enforce rate limits against abuse.

Cookies and storage on your device

• Sign-in cookies from Supabase (names starting sb-), set only after you sign in, to keep you signed in. Essential.
• Local storage (gridiron-games:v1): the app's own data described above. Essential.
• Offline cache: pages and game files so the app works without a connection. Contains no personal data.

We don't use advertising, analytics or third-party cookies. If we ever add analytics that need your permission, we'll ask first and the app will work the same if you say no.

What we don't collect

No passwords (we use one-time codes), no payment details, no precise location, contacts, photos or advertising identifiers. We don't use analytics, advertising cookies or third-party trackers.

How we use it

• to sign you in and keep your profile, stats and badges in sync across devices;
• to show leaderboards and your rank;
• to keep the app secure and fair (preventing abuse, spam sign-ups and faked scores);
• to answer support requests; and
• to improve the games (for example, balancing difficulty using overall score patterns).

For people in the EU/UK, our legal bases are: performing our agreement with you (providing your account and games), our legitimate interests (security, fair leaderboards, improving the app), and your consent where the law requires it.

What other players can see

On leaderboards: your username, avatar, favorite team, scores and rank. Invite links you choose to share include your username. Your email address and account ID are never shown to other players.

Services we use

• Supabase: our database and sign-in provider. It stores your account, profile and game results.
• Resend: delivers the sign-in code emails. It receives your email address and the code.
• Vercel: hosts the website and processes the technical data described above.
• Planned: error monitoring and privacy-friendly analytics to fix bugs and improve the app. We'll update this policy before adding either.

These providers process data on our behalf under their own security and privacy terms, and may store it in the United States. Fonts are served from our own site, so loading the app doesn't contact Google.

We don't sell your data

We do not sell personal information, and we do not share it for cross-context behavioral advertising. The app has no ads.

How long we keep it

• Account data is kept for as long as your account exists.
• When you delete your account, we delete your account, profile and game results within 30 days. Copies may remain in our providers' backups for a short time until those backups expire.
• Technical logs are kept by our providers for a limited period (typically days to weeks) for security.
• Guest data stays on your device until you reset it or clear your browser data.

Deleting your account

Sign in and go to Profile › Settings › Delete my account. Your account, profile, game results and any reports you made are deleted immediately. If you can't sign in, email support@thekordellgroup.com from the address on your account and we'll delete it within 30 days and confirm by email. Details: Delete your account.

Getting a copy of your data

To request a copy of the personal data we hold about you, email support@thekordellgroup.com with the subject “Request a copy of my data” from the address on your account. We'll confirm it's you and send your profile and game results in a common, machine-readable format (JSON or CSV) within 30 days. Your profile details are also always visible in the app.

Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy (portability);
• correct it (you can edit your username, avatar and team in Profile at any time);
• delete it;
• object to or restrict certain processing.

California residents (CCPA/CPRA) can ask to know, delete and correct personal information, and to opt out of its sale or sharing (we don't sell or share it). We won't treat you differently for using these rights. EU/UK residents (GDPR) have the rights listed above and can also complain to their local data protection authority.

To make a request, email support@thekordellgroup.com. We'll confirm the request comes from the email address on the account before acting on it.

Security

• Everything travels over encrypted HTTPS connections.
• There are no passwords to steal. Sign-in codes are single-use and expire after an hour.
• The database only lets each account read and add its own results. Leaderboards expose usernames and scores, never emails or account IDs.
• Only the minimum data needed is collected.

No system is perfectly secure, but we work to protect your data and will act quickly if something goes wrong.

Children

The app is not directed to children under 13, and you must be 13 or older to create an account. We don't knowingly collect personal data from children under 13. If you believe a child has created an account, email support@thekordellgroup.com and we'll delete it.

About our content

Some of the app's text, including sample articles and drafts of these policies, was written with the help of AI tools and reviewed by us. Sample articles are labeled as such. Player statistics come from public data (credited on our Credits page) and may contain mistakes.

Changes to this policy

If we change this policy we'll update the “Last updated” date above, and for important changes we'll let you know in the app before they take effect.

Contact

[Operator legal name — to confirm], Kentucky, USA. Email: support@thekordellgroup.com.