Privacy Policy

Revised: April 28, 2026

This privacy notice for Cornerstone Ideas Inc. ("Company," "we," "us," or "our") describes how
we handle information when you use the Tee Time Tokens mobile application and any related
services (collectively, the "Services").

Questions or concerns? Reading this notice will help you understand your privacy rights.
If you do not agree with our practices, please do not use the Services. If you still have
questions, contact us at admin@cornerstoneideas.com.

Summary of key points

No accounts. Tee Time Tokens has no sign-up, login, email, or password.
Solo rounds stay on your device. Rounds you play by yourself, your roster, and your token configuration live in your device's local storage and are never sent to us.
Group rounds use a server. When you create or join a multiplayer room, a small amount of data is stored on our backend (hosted with Supabase) so all phones in the group can sync in real time.
What's stored for group rounds: a short room code, an optional room name, the token list for the round, the first names and color choices players type in, an anonymous random device ID per phone, and the current token assignments. No real names, emails, phone numbers, location, IP-based tracking, or payment information.
No analytics or ads. We do not use cookies, analytics SDKs, advertising IDs, or third-party trackers.
Your rights: Solo data can be deleted in-app or by clearing site data. The host of a group round can end and delete the room, which removes its players and assignments.

1. What information do we collect?

In short: Nothing for solo play. For group rounds, only the
minimum data needed to sync the room across phones.

Tee Time Tokens does not require an account, login, email address, phone number,
mailing address, or payment information. There is no sign-up flow.

Solo play. When you create rounds, add players to your roster,
or configure tokens for solo use, that information is saved only in your device's
local storage (browser localStorage on the web, or the equivalent local store on
iOS/Android) and is not transmitted to us.

Group rounds (multiplayer rooms). When you create or join a
group round, the following information is stored on our backend (a Supabase-hosted
Postgres database) so every phone in the room can see the same state in real time:

A short room code and optional room name you choose.
The list of tokens configured for the round.
For each player in the room: the first name and color they enter, plus a random anonymous device ID generated by the app to identify their phone within the room.
Token assignments (who currently holds which token).
Timestamps for when the room was created, started, and ended.

We do not store last names, email addresses, phone numbers,
precise location, payment information, or any government identifiers. The
anonymous device ID is generated on your phone and is not linked to your Apple ID,
Google account, advertising ID, or any other off-device identity.

No automatic collection. We do not collect IP-based analytics,
crash reports, advertising IDs, or location data. We do not use cookies or
similar tracking technologies for analytics or advertising. Standard server logs
(such as basic request metadata) may be retained briefly by our infrastructure
provider for security and abuse prevention.

Information about other players. Player first names you add —
whether to your local roster or to a group room — are provided by you. Please
only add names with the permission of the people involved.

2. How do we process your information?

In short: Solely to operate the app and sync group rounds.

Solo data is processed entirely on your device. Group-round data is processed on
our backend only to deliver the multiplayer feature: distributing room state to
the players in that room and recording who currently holds each token. We do not
sell, rent, or use this data for advertising or profiling.

3. When and with whom do we share your information?

In short: Other players in the same group room can see the
room's data. We use one infrastructure subprocessor (Supabase) to host that data.

Anyone who has the room code for a group round you join can see the player names,
colors, and token assignments in that room. Do not share a room code with people
you do not want to share that information with.

Group-round data is stored with Supabase, our backend
infrastructure provider, which acts as a data processor on our behalf. We do not
share data with advertisers, data brokers, or analytics vendors.

If you choose to share content yourself — for example, by taking a screenshot of
a round recap and sending it to a friend — that sharing is initiated and
controlled entirely by you.

4. Do we use cookies and other tracking technologies?

We do not use cookies, web beacons, pixels, analytics SDKs, or advertising trackers in the Services.

5. How do we handle social logins?

We do not offer social login. Tee Time Tokens has no account system.

6. How long do we keep your information?

Solo round data stays on your device for as long as you keep it there. You may
delete individual rounds from the History screen at any time, or remove all
local data by uninstalling the app or clearing your browser's site data.

Group-round data is retained on our backend until the host ends the room (which
deletes the room, its players, and assignments) or until we
periodically purge inactive rooms. You may also stop participating in a room at
any time by leaving it from within the app.

7. How do we keep your information safe?

Solo data resides on your device under your device's security controls
(passcode, biometric lock, OS updates, etc.). Group-round data is stored on
Supabase's managed Postgres infrastructure, transmitted over HTTPS, and protected
by row-level security rules that scope data access to the relevant room. No
storage technology can be guaranteed 100% secure.

8. Do we collect information from minors?

Tee Time Tokens is rated for general audiences and contains no objectionable
content. The app does not knowingly collect personal information from children.
For group rounds, the only data tied to a player is the first name and color
they enter, plus an anonymous device ID — we do not collect contact information,
location, or any identifier that would let us recognize a child. Parents or
guardians who believe a child has provided information through a group round
can email admin@cornerstoneideas.com with the room code and we
will delete the associated records.

9. What are your privacy rights?

For solo data, you exercise access, correction, and deletion rights directly on
your device through the app. For group-round data, you can leave a room at any
time, and the host of a room can end and delete it, removing its associated
players and assignments. To request access or deletion of any
remaining group-round data tied to your device, email us at
admin@cornerstoneideas.com and include the room code(s) involved.

10. Controls for Do-Not-Track features

We do not track users across sites or devices, so DNT signals are not relevant to the Services.

11. Do California residents have specific privacy rights?

In short: Yes. We have not sold or shared personal information
for cross-context behavioral advertising in the preceding twelve (12) months and
do not intend to do so. The only personal information we process is the limited
group-round data described above, used solely to operate the multiplayer feature.
We will not discriminate against you if you exercise your privacy rights.

12. Do we make updates to this notice?

In short: Yes, we will update this notice as necessary to stay compliant
with relevant laws. The updated version will be indicated by an updated "Revised" date and
will be effective as soon as it is accessible.

13. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at
admin@cornerstoneideas.com or by post to:

Cornerstone Ideas Inc.
1080 Delrose Dr
Springfield, OR 97477
United States

14. How can you review, update, or delete the data we collect from you?

Solo data is stored locally on your device and can be reviewed, edited, or
deleted directly within the app, or wiped entirely by uninstalling the app or
clearing your browser's site data. For group-round data on our backend, leaving
a room or having the host end the room removes the associated records. For any
other access or deletion request, email admin@cornerstoneideas.com.