🔒 Privacy Policy

100Yards ("we," "us," "the Site") operates 100yards.app. For privacy-related inquiries, contact us at: legal@100yards.app

This policy complies with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and Mexico's Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP).

Our servers are operated through Vercel Inc. (United States). For EU/EEA users, this constitutes a transfer of data to a third country. Vercel is certified under the EU-U.S. Data Privacy Framework (DPF), providing adequate safeguards under GDPR Article 45.

2.1 Device Storage (localStorage) — Stays on your device

We store the following information in your browser's localStorage:

• Daily game results (won / lost)
• Consecutive win streaks
• Current game state (attempts made, completed cells)
• Language and theme preferences (dark / light)

This data never leaves your device. We do not transmit it to our servers or any third parties. Clearing your browser data will permanently delete it.

2.2 Server Logs (via Hosting Provider)

Our hosting provider, Vercel Inc., may automatically record technical data such as IP addresses, browser type, and pages visited for security and infrastructure purposes. See their privacy policy for details.

2.3 Email Addresses (when newsletter launches)

If you subscribe to our newsletter, we will collect your email address using a double opt-in process (you will receive a confirmation email before being added to our list). You can unsubscribe at any time with a single click from any email we send.

100Yards does not sell, rent, or share personal information with third parties for commercial purposes.

For California residents: We do not perform 'sales' of personal information as defined under the CCPA/CPRA. We also do not share personal information for cross-context behavioral advertising.

• Legitimate interest (Art. 6(1)(f)): localStorage for game functionality — necessary to deliver the service you requested.
• Legitimate interest: Vercel's security logs to protect the integrity of the site.
• Consent (Art. 6(1)(a)): Email newsletter — only after explicit double opt-in.

100Yards does not use tracking cookies, advertising pixels, or cross-site tracking technologies. The only client-side storage mechanism we use is localStorage, which:

• Is strictly necessary for the game to function.
• Is not transmitted to our servers or any third parties.
• Does not require prior consent under the EU ePrivacy Directive (strictly necessary use).

If we implement analytics or advertising in the future, we will update this policy, add a cookie consent banner, and obtain consent where required.

• Vercel Inc. (hosting, USA) — EU-U.S. DPF certified. Privacy policy
• ESPN / The Walt Disney Company — We query their public API for NFL statistics. We do not share user data with ESPN.
• Sleeper App — We query their public API for NFL roster data. We do not share user data with Sleeper.
• Email provider (future) — When the newsletter launches, we will use an email delivery service (e.g., Resend) that will process subscriber email addresses. We will update this policy before activating this service.

European Union / EEA (GDPR):

• Right of access, rectification, erasure ('right to be forgotten'), data portability, restriction, and objection.
• Right to withdraw consent for email communications at any time.
• Right to lodge a complaint with your local data protection supervisory authority.

California, USA (CCPA / CPRA):

• Right to know what personal information we collect, use, and share.
• Right to delete your personal information.
• Right to opt out of the sale of personal information (not applicable — we do not sell data).
• Right to correct inaccurate personal information.
• Right to limit use of sensitive personal information (not collected).
• Right to non-discrimination for exercising your privacy rights.

Mexico (LFPDPPP) — ARCO Rights:

• Right of Access, Rectification, Cancellation, and Opposition.

To exercise any of these rights, contact us at legal@100yards.app. We will respond within 30 calendar days (GDPR) or 45 days (CCPA). Since we currently store no personal data on our own servers, you can also exercise your rights immediately by clearing localStorage in your browser (Settings → Site Data → 100yards.app → Delete).

100yards.app is served through Vercel's infrastructure, which operates servers primarily in the United States. By using the Site, EU/EEA users acknowledge that their technical data (as described in Section 2.2) may be processed in the United States. This transfer is covered by Vercel's EU-U.S. Data Privacy Framework certification, as listed on the DPF website.

localStorage data persists until you manually clear your browser data. We do not set an automatic expiration.

When the newsletter is active: email addresses will be retained while the subscription is active. Upon unsubscribing, addresses will be deleted within 30 days.

Vercel server logs are governed by their own retention policy.

100Yards is not directed to children under 13 (USA, COPPA) or under 16 (GDPR, Art. 8). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, contact us to have it removed.

When we send email communications, we will comply with the CAN-SPAM Act (USA) and Canada's Anti-Spam Legislation (CASL) by:

• Obtaining express consent before sending commercial emails to Canadian recipients (CASL requires this before the first send, unlike CAN-SPAM).
• Clearly identifying commercial messages as advertising.
• Including a valid postal address in every email.
• Providing a clear and easy opt-out mechanism in every email.
• Honoring opt-out requests within 10 business days (CAN-SPAM) / without delay (CASL).

We will notify users of significant changes (e.g., introducing email collection or advertising) with at least 15 days' advance notice via a visible banner on the site. The 'last updated' date at the top of this page always reflects the most recent revision.

📧 legal@100yards.app

Response time: within 10 business days.

EU residents: if you are not satisfied with our response, you may contact your national data protection authority.

California residents: you may also contact the California Attorney General's Office at oag.ca.gov.