# Signal Jam — Privacy Policy (v1)

**Effective date:** 2026-04-17
**Operator:** AEGITz, Phoenix, Arizona

> **PENDING ARIZONA ATTORNEY REVIEW.** This document is a first draft
> written to capture the product's commitments, not legal advice. It must
> be reviewed and signed off by an Arizona-licensed attorney before
> production launch.

## 1. What We Collect

- **Account:** email, display name, optional avatar.
- **Gameplay:** sessions you joined, answers, scores, badges, rank
  standings, ratings, flags you submit.
- **Device:** IP address, user agent, device fingerprint (only if you
  enable "remember this device").
- **Legal:** records of terms, privacy, and age-gate acceptance, plus the
  IP and user agent at the time of acceptance. Stored in an append-only,
  hash-chained log for legal defensibility.

We do not collect payment information because Signal Jam is free for
players. Venues pay us separately; their billing details live in our
payment processor, not in the app.

## 2. Why We Collect It

- Run the game.
- Show public leaderboards, ranks, badges, streaks, and rivalries.
- Send transactional email (sign-in links, weekly recaps, rescue nudges).
- Detect and prevent abuse.
- Train future content moderation on flagged questions.

We **do not** sell your personal information, ever.

## 3. Marketing

We only send marketing email if you opt in. You can opt out at any time.
Opt-out requests honored within 48 hours.

## 4. Third Parties

Subprocessors we use:
- Supabase (database, auth, realtime)
- Anthropic (AI question generation)
- ElevenLabs (host voice synthesis)
- Upstash (cache, rate limiting)
- Inngest (background jobs)
- Sentry, PostHog, Axiom (observability)
- Resend (transactional email)
- Vercel (hosting)

These parties process data on our behalf under data processing agreements.

## 5. Retention

- Account and gameplay data: kept while your account is active.
- Legal acceptance log: kept for 7 years after account deletion for
  defensibility.
- Analytics: aggregated and retained indefinitely; personal identifiers
  removed after 2 years.

## 6. Your Rights

You can:
- **Export** all your data at `/account/export`. We'll email a signed link
  within 24 hours.
- **Delete** your account at `/account/delete`. Deletion has a 7-day grace
  period (to undo mistakes) and then performs a hard delete, except for
  the append-only legal log which is retained per Section 5.
- **Correct** your display name, avatar, and marketing preferences at any
  time in `/profile`.

## 7. Cookies

We use functional cookies only (session, CSRF, device remember). We do not
use third-party advertising cookies.

## 8. Security

Passwords aren't used for players — sign-in is via magic link. Admin and
operator accounts require 2FA. All data is encrypted in transit (TLS 1.2+)
and at rest (Supabase managed encryption).

## 9. Children

Signal Jam is 21+. We do not knowingly collect information from minors. If
you believe a minor has registered, email privacy@signaljam.app and we'll
delete the account.

## 10. International

Signal Jam is operated from the United States. If you access it elsewhere,
you consent to your information being processed in the US.

## 11. California Residents (CCPA / CPRA)

You have the rights listed in Section 6 plus the right to know what
categories of personal information we collect and the purposes for which
we use them. Submit requests via the export/delete flows or email
privacy@signaljam.app.

## 12. Virginia, Colorado, Connecticut, Utah

You have substantially the same rights as Section 11. Submit requests the
same way.

## 13. Changes

We'll post a new version number and update date. Material changes trigger
a fresh consent prompt on next sign-in.

## 14. Data Portability

Export your data at `/account/export`. The export includes profile,
sessions, answers, badges, ranks, share cards, ratings, flags, and legal
acceptances in a portable JSON bundle. Rate-limited to one export every
seven days.

## 15. State Privacy Notices (CA, VA, CO, CT, UT)

You have the right to:
- Know what personal information we collect, use, and disclose.
- Request deletion of your personal information.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of personal information. *(We don't
  sell your data, so there's nothing to opt out of here.)*
- Appeal our response to any of the above requests.

Submit requests via `/account/export`, `/account/delete`, or email
privacy@signaljam.app. We respond within 45 days.

## 16. Contact

privacy@signaljam.app