PRIVACY POLICY.

Who this covers

This policy covers the Total Damage iPhone app and totaldamage.app. Total Damage is operated by Josh Carter. For privacy questions or requests, email support@totaldamage.app.

What the game uses

• Tables and play: the name and avatar you choose, an anonymous account and seat identifier, table code and settings, bill amounts, the host's Cash App or Venmo handle if supplied, and game activity such as answers, votes, trades, bribe notes, scores, and results. This keeps everyone at the same table in sync and lets a seat reconnect.
• Purchases: Apple handles payment for game unlocks. We receive and verify purchase identifiers and status to grant or restore access. We do not receive your payment card number from Apple.
• Support and operation: if you email us, we receive the message and contact details you provide. Our service providers may process technical request, security, and error records needed to run and protect the app and site.
• On your phone: sound preferences and recovery credentials are stored locally. Camera access is used to scan a table's QR code; the app does not upload the camera image as part of scanning.

Other players at your table can see the name, avatar, actions, answers, and final amounts the game shows them. Small Claims voting presents answers anonymously. Private bribe notes are not shown to other players. Please avoid putting sensitive personal information into answers or notes.

Optional Judge Petty AI

If the host enables AI and players approve it, our server sends the question, answer, and any private bribe note to Venice AI for Judge Petty's reactions and bribe decisions. We do not add your player name, bill, or payment handle to that request. The host can turn AI off before play; the game then uses written responses. An AI request already sent cannot be recalled. Venice handles information it receives under its privacy policy.

Who handles the data

Supabase hosts the multiplayer backend and anonymous accounts. Apple handles in-app purchases. Venice handles optional AI requests. Our website host processes visits to this page. We use these services to provide the features described here.

If a host chooses payment links, a guest can open Cash App or Venmo with the host's handle and amount due. Those services handle the payment on their own terms; opening a link does not complete a payment. Total Damage does not process that payment.

How long information stays

When the host officially closes a table, its ordinary table and gameplay records are deleted. A dropped connection does not close a table. Tables that expire are removed by periodic cleanup, which may take longer if the service is busy. A phone that was offline clears its saved table state when it reconnects.

Reports of public answers and optional report notes are kept privately for 30 days, then removed by periodic cleanup. A private player block remains until you unblock that player or the associated anonymous account is deleted; content-free retry records can remain for 24 hours. Account, purchase, security, support, and service records are handled separately when needed to maintain access, investigate problems, meet legal obligations, or protect the service. Closing a table does not erase provider backups, operational records, or AI requests already sent.

The website

The bill demo and reminder prompt on totaldamage.app run on your device. The site does not ask for an email address, and it does not include advertising trackers or a visitor analytics script. The website host may retain ordinary technical request logs. If you copy the reminder prompt to Siri or another assistant, that service handles the reminder.

Your choices and requests

You can choose what to enter in a game, decline optional AI approval, ask your host to close an active table, and use the app's Privacy & Support screen to manage blocked players. For questions about access, correction, or deletion of information associated with you, email support@totaldamage.app. Include enough detail to find the table, such as its reservation number and approximate date, but do not email passwords or payment credentials. Some purchase and operational records may need to remain after a table closes.

Changes to this policy

We will update this page and its effective date if our data practices change. You can return here any time at totaldamage.app/privacy.