1. Who we are
20-0 is an unofficial, independent fan-made American football season simulator published by Loyalty Apps Ltd ("we", "us"). We are the data controller for the personal information described in this policy.
This policy covers the 20-0 mobile and web app and this website. It does not cover the app stores you download the app from, which have their own privacy policies.
2. What we collect
We collect as little as the game can function on. There is no sign-up screen, no email capture and no social login.
| What | Why it exists |
|---|---|
| An anonymous profile ID — a random identifier created on your device the first time you open the app | So your saved runs, your entitlements and your leaderboard entries are still yours the next time you open the app. It is not linked to your name, email or phone number. |
| Gameplay data — the season seed, the thirteen draft picks you made, the simulated record, points for and against, the score code, the round the run ended in, and the time of the run | To play the game, to display your history, to rank the leaderboards, and to verify that a submitted run is genuine. |
| A display name, only if you choose to set one | To label your row on a public leaderboard. This is optional and you choose the text. |
| Technical and diagnostic data — app version, platform and OS version, coarse device model, error and crash information, and the IP address your requests arrive from | To fix crashes, to keep the service secure, and to detect abuse of the leaderboards. |
| Purchase status — whether a 20-0 Pass entitlement is active, and the store transaction identifier | To unlock what you paid for and to restore purchases on a new device. |
| Advertising identifiers, only where ads are shown and only if you allow tracking | To show ads in the free version. See section 7. |
3. What we do not collect
- Your name, email address, phone number or postal address (unless you email us, in which case we have the address you wrote from).
- Your date of birth or age.
- Precise location. The app never requests location permission.
- Contacts, photos, camera, microphone or health data. The app never requests these permissions.
- Payment card details. Purchases are handled entirely by Apple or Google — we never see your card.
4. Why we use it
- To run the game — issuing a season seed, replaying your picks on our servers, and returning the result.
- To operate leaderboards — ranking runs and showing public boards.
- To prevent cheating — your device never submits a score. It submits the seed and the picks, and the season is recomputed on our servers. Technical data helps us detect tampering and duplicate daily submissions.
- To fix problems — diagnosing crashes and errors.
- To honour purchases — unlocking and restoring the 20-0 Pass.
- To show ads in the free version, where applicable.
We do not build advertising or marketing profiles about you, and we do not use your gameplay data to target you with anything.
5. Legal bases (UK and EEA users)
- Contract — running the game, saving your runs, operating leaderboards and delivering purchases you have made.
- Legitimate interests — keeping the service secure, preventing leaderboard fraud, and fixing crashes. We have balanced these against your rights and use the minimum data that works.
- Consent — personalised advertising, where it applies. You can withdraw consent at any time in your device settings.
- Legal obligation — where we must keep records, for example for tax on purchases.
6. Who we share it with
We do not sell your personal information and we do not share it for cross-context behavioural advertising. We use a small number of service providers who process data on our behalf:
| Provider | What it does |
|---|---|
| Supabase | Hosts our database, anonymous authentication and server functions. Stores profile IDs, runs and leaderboard rows. |
| Apple App Store / Google Play | Process all purchases and handle payment. They are independent controllers of that transaction data. |
| RevenueCat | Validates purchase receipts and tracks whether your Pass entitlement is active. |
| Google AdMob | Serves ads in the free version, where ads are shown. |
We may also disclose information if we are legally required to, or where it is necessary to protect our rights, the safety of users, or the integrity of the service. If our business is sold or transferred, data may transfer with it, subject to this policy.
7. Advertising
The free version of the app may show ads between simulated games. Ads are never shown during a draft, never during a season in progress, and never in the ranked Daily mode. The 20-0 Pass removes them.
Where ads are shown, our ad partner may use a device advertising identifier to select and measure them.
- On iOS, the app must ask for your permission through Apple's App Tracking Transparency prompt before any tracking identifier is used. If you decline, you will still see ads, but they will not be personalised.
- On Android, you can reset or delete your advertising ID, and opt out of ad personalisation, in your device settings under Google → Ads.
- Where required, users below the applicable age of consent are served non-personalised ads only.
Nothing shown, watched or purchased in the app changes the simulation or improves your odds on any leaderboard. That is a design rule, and it is enforced on our servers, not just in the interface.
8. Purchases
The 20-0 Pass is bought through the App Store or Google Play. Those stores process the payment and we never receive your card number, billing address or full account details. We receive confirmation that a purchase is valid and a transaction identifier so that the entitlement can be restored on your devices.
Refunds are handled by the store you bought from, under their policies.
9. Leaderboards and display names
If you submit a run to a public leaderboard, the display name you chose, your score code, your record and the date of the run become visible to other players. Please do not use your real name, an email address or anything else you would not want to be public — you choose that text, and you can change it.
Runs you play without submitting them to a board are not shown to anyone else.
10. How long we keep it
- Profile and run history — for as long as the profile is active, and up to 24 months after the last time the app is opened, after which it may be deleted or anonymised.
- Leaderboard rows — for as long as the board exists. Deleting your data removes your rows from it.
- Crash and diagnostic logs — typically up to 90 days.
- Purchase records — for as long as required for tax, accounting and refund handling.
11. International transfers
We are based in the United Kingdom. Our service providers may store or process data in the United States or elsewhere. Where data leaves the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum, or the EU Standard Contractual Clauses.
12. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Have it corrected if it is wrong.
- Have it deleted.
- Restrict or object to how we use it.
- Receive a copy in a portable format.
- Withdraw consent, where we relied on consent.
- Not be discriminated against for exercising any of these rights.
To exercise any of them, email hello@loyalty-apps.com. Because we hold no name or email against your profile, we may need the profile ID shown in the app's settings screen to find your data — without it we may not be able to identify which records are yours.
California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we have not done so in the preceding twelve months.
UK and EEA users: you have the right to complain to a supervisory authority. In the UK that is the Information Commissioner's Office at ico.org.uk.
13. Deleting your data
Email hello@loyalty-apps.com with the subject "Data deletion request" and include the profile ID from the app's settings screen. We will delete your profile, your run history and your leaderboard rows within 30 days and confirm when it is done. Deleting the app from your device alone does not delete data already stored on our servers.
14. Children
20-0 is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, email us and we will delete it. Where ads are shown to users below the applicable age of consent, they are non-personalised.
15. Security
Data is transmitted over encrypted connections and stored with access controls that restrict each profile to its own records. Leaderboard writes only happen on our servers — there is no path for a client to write directly to the database. No system is perfectly secure, but the amount of personal information at stake here is deliberately kept very small.
16. Changes to this policy
If we change this policy we will update the date at the top of this page. If a change materially affects how we handle your information, we will make it clear in the app before it takes effect.
17. Contact
Loyalty Apps Ltd
Email: hello@loyalty-apps.com