Last updated: July 28, 2026
Summary
Gridiron Blitz '89 ("the Game") is operated by Gridiron Blitz '89. We keep the data we collect to a minimum: enough to run your account, save your tournaments to the cloud if you pay for that, and process a payment. We do not sell your data.
Contact for privacy questions: support@gridironblitz89.com.
Free play stores data in your browser, not with us
If you use the Game without an account, your tournaments are saved in your own web browser on your device. Your tournaments, team names, and results stay on your device and are never sent to us. Clearing your browser data removes it. We do separately count a few anonymous usage milestones — see Anonymous usage measurement below.
What we collect when you create an account
- Your email address, so you can sign in and recover your account.
- A securely hashed password. We never see your password in readable form.
- An optional display name and colour, if you set them.
Accounts and cloud data are hosted on Supabase, which stores this data on our behalf.
What we store if you buy Commissioner's Edition
- Your cloud-saved tournaments, so they are available across your devices for the length of your access.
- A record of your entitlement — that you have Commissioner's Edition, when it was granted, and when it expires.
- A billing record of the payment for support and anti-duplicate purposes.
The billing record holds Stripe identifiers (such as a checkout session id and customer id) and the fact of payment. It does not contain your card number.
Payments
Payments are processed by Stripe. Stripe receives the payment information you enter and handles the card transaction. We receive confirmation that a payment succeeded and the identifiers above — not your card details. See Stripe's privacy policy for how Stripe handles your information.
Anonymous usage measurement
We use Google Tag Manager and Google Analytics to understand whether people are able to use the Game — for example, how many visitors go on to start a tournament or reach a draft order. We count a small, fixed set of milestones: opening tournament setup, starting a tournament, starting a game, reaching the draft order, and opening the Commissioner's Edition checkout.
The Game deliberately sends no team names, league names, mascots, ratings, scores, results, draft orders, save contents, account or tournament identifiers, shared-game links, or anything you type with these milestone events. The five milestone events carry no custom information from the Game beyond their fixed event names.
Google Analytics may still process standard technical analytics information of the kind it collects for any website — for example general device, browser and approximate location information — and may use analytics cookies or similar technologies. We do not use this information to identify you personally within the Game.
How we use your information
- To provide and secure your account.
- To provide cloud saves and other Commissioner's Edition features.
- To process your purchase and confirm and support it.
- To respond to your questions.
We do not sell your personal information, and we do not use it for third-party advertising.
Who your data is shared with
- Supabase — hosts your account and cloud data.
- Stripe — processes payments.
- Netlify — serves the Game's website.
- Google — provides Tag Manager and Analytics for the anonymous usage measurement described above.
Each processes data to provide their service to us. We do not otherwise share your personal information except where required by law.
What remains after Commissioner's Edition expires
Your account still exists and you can sign in. Your entitlement record shows as expired. Your cloud saves are not deleted when your access lapses.
Data retention
We retain your account and cloud-save information while your account remains active, or until you submit a verified deletion request. Billing, transaction, fraud-prevention, security, and legal records may be retained as reasonably necessary to meet applicable obligations.
Deleting your account and data
You can ask us to delete your account and associated data at any time. Email support@gridironblitz89.com from the address on the account, or use any in-app deletion option if provided. We will delete your account, cloud saves, and profile. We may retain limited billing records where we are required to for legal, tax, or accounting reasons; these do not include your card number.
Data security
Passwords are stored hashed, payment card details never reach us, and access to paid features and account data is enforced on our servers rather than in your browser. No system is perfectly secure, but we take reasonable measures to protect your information.
Children
The Game is intended for users age 13 or older. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Your rights
Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To exercise them, contact support@gridironblitz89.com.
Changes
We may update this policy. Significant changes will be reflected in the date above and, where appropriate, noted in the Game.