* Tx Friday Blitz *
PRIVACY NOTICE
Last updated: September 28, 2026
1. WHO IS RESPONSIBLE FOR YOUR DATA
DJCHARMWAY LLC is the data controller for Tx Friday Blitz ("the Service"). This means DJCHARMWAY LLC decides how and why your personal data is processed. You can reach us at support@djcharmway.com with any privacy question or request.
Payments are handled by Paddle.com, which acts as the Merchant of Record for our orders and as an independent controller for the payment and billing data it collects from you at checkout. Paddle's own privacy policy applies to that data.
2. WHAT DATA WE COLLECT AND WHY
| CATEGORY | EXAMPLES | WHY WE USE IT |
|---|---|---|
| Account data | Email address, display name, hashed password | Creating and securing your account so you can sign in and keep your progress across devices. Legal basis: performance of our contract with you. |
| Game data | Dynasty saves, rosters, custom teams, game results, training history | Providing the game itself — saving and restoring your seasons and teams. Legal basis: performance of our contract with you. |
| Purchase data | Records of purchases, entitlements (e.g. Unlimited Version), training point balances and transaction references | Granting what you paid for, preventing duplicate or fraudulent orders, and handling support and refund requests. Legal basis: performance of our contract with you and our legitimate interest in preventing fraud. |
| Technical data | IP address, browser type, device identifiers, diagnostic and security logs | Keeping the Service secure, detecting abuse and fraud, and fixing errors. Legal basis: legitimate interests in security and service improvement. |
| Support communications | Messages you send us for help | Answering your questions and resolving issues. Legal basis: performance of our contract with you. |
We do not sell your personal data, and we do not use it for third-party advertising.
3. HOW LONG WE KEEP IT
We keep your account and game data for as long as your account is active so your saves are always there. If you delete your account, we delete or anonymise your personal data within 90 days, except records we must keep longer for legal, tax, or fraud-prevention reasons (such as purchase records).
4. WHO WE SHARE IT WITH
We share personal data only with these categories of recipients:
- Service providers (subprocessors): our hosting, database, and authentication providers (Lovable Cloud, powered by Supabase) and error-monitoring tooling, which process data only to run the Service for us.
- Paddle.com (Merchant of Record): for the sale of our products, checkout, subscription and payment management, tax compliance, and invoicing.
- Professional advisers: lawyers and accountants, where needed.
- Authorities: where required by law, court order, or to protect the rights, property, or safety of our users or others.
5. INTERNATIONAL TRANSFERS
Our service providers may process data in the United States and other countries outside your own. Where data leaves the UK or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
6. YOUR RIGHTS
Depending on where you live, you have the right to: access the personal data we hold about you; correct inaccurate data; delete your data; restrict or object to processing; data portability; and withdraw consent where processing is based on consent. Residents of Texas and other US states may have additional rights under applicable state privacy laws, including the right to know what data is collected and to request deletion.
To exercise any right, email support@djcharmway.com. We respond within one month (and within the timeframe required by your local law). You also have the right to complain to your local supervisory authority or consumer protection agency.
7. SECURITY
We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), encrypted password storage, access controls, and database-level row security so your data is only readable by you.
8. COOKIES AND LOCAL STORAGE
The Service uses only essential browser storage: local storage keeps you signed in, remembers your game saves and preferences, and records your entitlements (such as the Unlimited Version). We do not use advertising or third-party analytics cookies, so there is no tracking banner to click through.
9. CHILDREN
The Service is a family-friendly game, but accounts require an email address and are not directed at children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.
Questions? See also our Terms & Conditions and Refund Policy.