1. Who We Are

The Penalty Box ("we", "us", "our") operates thepenaltybox.live, a satirical voting platform for entertainment purposes. You can contact us at contact@thepenaltybox.live.

2. What Data We Collect

We collect minimal data to operate the site:

• Voting data — vote counts per nominee, stored anonymously in our database. We do not tie votes to individual identities.
• Browser storage — we use your browser's localStorage to remember how many free votes you have used this week. This stays on your device and is not transmitted to us.
• Nominations — if you submit a nominee, we store the name, reason, and category you provided.
• Payment data — if you purchase Power Votes, payment processing is handled entirely by Stripe. We do not store your credit card information. Stripe may collect name, email, and payment details per their own privacy policy.
• Server logs — our hosting provider (Netlify) may collect standard server logs including IP addresses and browser types for security and performance purposes.

3. What We Do NOT Collect

• We do not require account registration
• We do not collect your name or email address to vote
• We do not use tracking pixels or ad networks
• We do not build profiles on individual users
• We do not sell or share your data with third parties for marketing

4. Cookies

We do not use tracking cookies. We use browser localStorage (not cookies) to store your vote count locally on your device. This data never leaves your browser unless you clear it yourself.

5. Third-Party Services

We use the following third-party services which have their own privacy policies:

• Stripe — payment processing. See stripe.com/privacy
• Supabase — database hosting for vote counts and nominations. See supabase.com/privacy
• Netlify — website hosting. See netlify.com/privacy
• Wikipedia API — we use Wikipedia's public API to load photos of public figures. No user data is sent to Wikipedia.

6. Data Retention

Vote counts and nominee data are retained for the duration of the weekly voting period and may be archived for historical records. Payment transaction records are retained by Stripe per their policies.

7. Your Rights

If you are located in the EU/EEA (GDPR) or California (CCPA), you may have rights regarding your personal data. Since we collect minimal personal data, most requests will be simple to fulfill. Contact us at contact@thepenaltybox.live with any data requests.

8. Children's Privacy

The Penalty Box is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised date.

10. Contact Us

For any privacy-related questions or requests, contact us at contact@thepenaltybox.live