PRIVACY POLICY

OFFYSS is a members-only community app for events, games, and culture, run by OFFYSS Inc. ("OFFYSS", "we"). This policy describes what we collect, why, who else sees it, and what we never do with it.

WHAT WE COLLECT

When you create an account: your email address, name, phone number, date of birth (to verify you're 18 or older and to run 21+ nights), the sex you tell us, and where you're from (country, city, and state). Optionally, a handle. We also ask a few questions on your first day — how you found us and what you're here for — and keep those answers with your account. We record when you agreed to these terms, to receiving texts, and to the AI processing described below. If you turn on two-step sign-in, we keep which method you chose (text, email, or an authenticator app), the authenticator's secret, and one-way hashes of your recovery codes.

If you ask for access while the door is closed: your first and last name, your phone number, and your agreement to receive texts, so we can text you when you're let in.

If you apply for a verified identity: a selfie and the reason you give. The selfie is stored privately, shown only to the people who review applications, and deleted as soon as the application is decided.

If you use passes: records of passes issued to you, transfers you make or accept, and entry scans at our events. If you send or receive invites: the phone number an invite was sent to, the name the sender typed, and who claimed it.

If you're on a team: your roster spot and role, any request you make to join a team, and — if a manager adds you by email before you have an account — that email address, so the spot finds you when you sign up. If you play in an OFFYSS league: your player name, photo, team, jersey number, position, and game and season statistics.

If you post: what you post in the community room and on your profile, including photos and video, any emotes (GIFs) you upload to use in the room, what you report or block, and who you reply to and which conversations you're in. If you tap in to a team, a player, or a night, we keep that. If you talk to the Front Desk: what you type to it, or say to it when you use the voice desk.

What you do in the app: which posts and Doings you open and roughly how long each stays on your screen, cards you tap through from the room, events you RSVP to after that, and the worlds you pin or ask to join. These are kept as private records — never shown to other members as counts.

From your device: a random device identifier, the platform and app version, your device's language and time zone, when the app is opened, which pages of the website are viewed (with the browser's user agent, the site that referred you, and any campaign tags on the link you followed), your IP address, and — if you allow notifications — a push token (from Apple on iPhone and iPad, from Google on Android). We also record errors the app hits so we can fix them; error reports carry your account id and the screen you were on, never the contents of a request.

If you leave your email on our front page without making an account, we keep that address, and the site that referred you, so we can tell you when the door opens. It is not an account and it is not shared. Ask us at the address below and we'll remove it.

If you use the contact form on our website: your name, email address, company and sport if you give them, your message, and your browser's user agent, so we can answer you. Ask us and we'll delete it.

WHY WE COLLECT IT

To run the service: signing you in, putting passes in your wallet, validating them at the door, matching an invite texted to you to your account, showing who's going to events, keeping the community room usable, and understanding who comes to our nights in aggregate. In the room, we put the conversations you're most likely to care about near the top, using your first-day answers, the teams and worlds you follow, and who you've talked with. What members open and stay on decides which Doings are lifted onto the community wall. Your device's language and time zone are used to show the room in your language and times on your clock. Your IP address is used to sign you in securely and to stop abuse — flooding, scripted signups, brute-force attempts. Your phone number is used for account identity, to deliver ticket invites and account texts, and to confirm it's yours. Never for marketing you didn't ask for. Your email address is used to sign you in, to send sign-in codes and password resets, and to tell you about changes to your account.

TEXT MESSAGES (SMS)

When you create an account, or ask for access while the door is closed, you check a box agreeing to receive text messages from OFFYSS. We send: one-time sign-in and verification codes, only when you request one; if you asked for access, a text confirming the request and a text when the door opens or your access is granted; and a text when a pass is sent to you or an invite is sent to your number. Reminders about events come as app notifications, not texts. Message frequency varies; expect up to 4 messages per month. Message and data rates may apply.

Reply STOP to any message to cancel; you will get one confirmation text and nothing after. Reply HELP for help, or email the address below. You can also remove your phone number in Account settings. Opting out of texts may mean you cannot receive sign-in codes.

We do not share your mobile number, or your consent to receive texts, with any third party or affiliate for their marketing purposes. Your number is shared only with the provider that delivers our messages (Twilio), and only to deliver them.

WHO SEES WHAT

Members see your name and handle, your posts, your current "doing", and — on your profile card — your age and the city and state you gave us. Members never see your email, phone number, birthday, or the sex you told us. If you post as a Marble, other members see the color and nothing else.

Two exceptions, both to people running something. A team manager working a night you're on the list for sees your name, handle, where you're from, and your age — not your email, not your birthday, not your sex. If you are on a team, that team's manager also sees the email address and phone number on your account, because a manager has to be able to reach their own roster. OFFYSS staff see your full account.

The community room is readable before signing in. Lines posted there — with the name or handle they were posted under, and any emote they carry — are shown to people who open the app without an account, and can be requested from our servers without one. Doings and the feed are for signed-in members only.

League pages are public. If you play in an OFFYSS league, your player name, photo, team, jersey number, position and statistics appear on our public website, where anyone can see them.

PHOTOS AND VIDEO ARE PUBLICLY ADDRESSED

Read this one twice. Pictures and clips you post — to the room, to your profile, as a Doing — are stored at a plain web address that does not require a login. The app shows Doings and posts only to members, but anyone who has the exact link can open the file. Emotes you upload are stored the same way. Treat anything you post as something that could leave the building.

Before a picture or clip is stored we remove its embedded camera metadata — GPS coordinates, capture time, and device details — from JPEG, PNG, WebP, MP4 and MOV files.

When you delete a Doing, the file is deleted from storage, not just hidden. Copies anyone already downloaded are beyond our reach, as they are anywhere.

WHAT WE DON'T DO

We don't sell your data. We don't run third-party ads or advertising trackers. We don't use your data to track you across other companies' apps or websites.

AI IN OFFYSS

Parts of OFFYSS run on AI from two providers. When you create an account you check a box agreeing to this; we don't send your content to them before you do.

Anthropic receives lines posted in the community room, with the names, handles and recent conversation around them, to decide whether one of our house accounts should reply, to write those replies, to check lines against our community rules, and to translate lines into the languages other members read. It receives what you type to the Front Desk, and — when you ask about them — your passes and RSVPs, so the desk can answer you. It also receives the words of a Doing caption when a member asks to see it translated.

ElevenLabs receives your voice and its transcript when you choose to talk to the Front Desk out loud.

We don't send either of them your password, email address, phone number, or birthday. The Front Desk and the house accounts in the room (@TEAMOFFYSS, @OFFYSSPET, @OFFYSSCLERK, @OFFYSSJANITOR, @OFFYSSSECURITY and @OFFYSSMANAGER) are AI run by OFFYSS, and what they say can be wrong. If you no longer agree to this, you can delete your account, or email us.

SERVICE PROVIDERS

We use providers to run the app, and each sees only what its job needs: hosting and the database (Railway); photo and video storage and realtime messaging (Supabase); text messages and phone verification (Twilio); email (Resend); push notifications (Apple and Google); app updates (Capgo); error reporting (Sentry); fonts on our website (Google Fonts); the map on an event's page (Google Maps, which receives your IP address when the map loads); and AI (Anthropic and ElevenLabs, described above). We contract with each of these to process your data only to provide their service to us, and not for their own purposes.

WHERE IT'S PROCESSED

OFFYSS operates in the United States, and your information is stored and processed there. If you use the app from outside the US, you're sending it to the US.

SECURITY

Passwords are stored hashed, never in the clear. Sign-in tokens, invite links, email sign-in codes and recovery codes are stored as one-way hashes. You can turn on two-step sign-in by text, email, or an authenticator app. Verification selfies live in a private bucket reachable only through a short-lived signed link. No system is perfect, and we won't pretend otherwise — but we'd rather tell you exactly how it's held than say "industry standard".

YOUR CONTROLS

You can edit your profile in the app at any time. You can block members and report content. You can delete your account in the app (Account → Delete Account), or without the app at offyss.co/delete-account: your personal information is erased, your Doings and their photos come down, your emotes are removed and their files deleted, your unredeemed passes are voided, your profile picture is deleted, your two-step sign-in settings are erased, and you're signed out everywhere. Your first-day answers are kept only as anonymous categories; anything you wrote in your own words is erased. Lines you posted in the community room stay in the room but stop pointing at you — they read as a deleted member. Attendance records and the in-app activity records described above are kept in de-identified form. If you asked for access at the door, that request is erased too. League statistics, with the player name and photo they're published under, stay part of the league's record.

DATA RETENTION

We keep account data while your account exists. After deletion, personal fields are erased immediately; operational records that no longer identify you (like anonymized scan logs and aggregate counts) may be retained.

CALIFORNIA RESIDENTS

You have the right to know what personal information we hold about you, to have it deleted, to correct it, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise any right, use the controls in the app or email the address below; we'll verify the request through your account.

AGE

OFFYSS is for adults. You must be 18 or older to create an account. We don't knowingly collect information from anyone under 18; if you believe a minor has an account, email the address below and we'll remove it.

CHANGES

If this policy changes, the date above changes with it, and material changes will be announced in the app.

Questions: tech@offyss.co · OFFYSS INC.