This policy explains what information Turf collects, how we use and share it, how long we keep it, and the choices you have. Questions: team@turfyeah.com.

Who operates Turf

Turf is operated by Marcelo Ranieri, an individual. He decides how and why your personal information is used and is responsible for it under this policy. A Delaware corporation, Supersonic Fields, Inc., is being formed to take over the operation of Turf. When it does, it will take over this responsibility and we will tell you. You can contact us at team@turfyeah.com or at Turf, 6801 Collins Ave, Miami Beach, FL 33141, United States. We do not sell your personal information and we do not show ads in Turf.

Who Turf is for

Turf is for people 18 and older in the United States. We do not knowingly collect personal information from anyone under 18; if you believe someone under 18 has an account, email team@turfyeah.com with the subject "Under 18" and we will remove it. Turf is not directed to people in the European Union, the European Economic Area, the United Kingdom or Switzerland, and we do not offer our service to or monitor people there. If you are located in those regions, please do not use Turf.

1. Information we collect

1.1 Information you give us

  • Account: your username (public), email address (private), and password (we store only a cryptographic hash, never the password itself). If you sign in with a provider, see section 1.3.
  • Profile: photo, display name and bio (all public).
  • Content: debate messages, direct messages, upvotes, reports, blocks and friend or follow actions.
  • Messages you send us, for example support requests or privacy requests.

1.2 Information collected automatically

  • IP address, and the approximate location (country or region) we derive from it. We do not collect precise location.
  • Device and browser type, operating system, language and time zone.
  • Login dates and times, and which sign-in method you used.
  • Which features you use and which pages you open, and errors our servers record.
  • Usage analytics collected by PostHog and Google Analytics 4, in aggregated or pseudonymous form. If you accept analytics cookies, the Reddit pixel also records when you create an account, so we can measure our ads on Reddit.
  • Cookies and similar technologies (section 9).

1.3 Information from sign-in providers

If you sign in with Google, we receive your name, email address, profile photo (if you allow it) and an identifier from the provider. We request only what is needed to create and sign you into your account.

2. How we use information

  • To run Turf: create your account, show your profile and messages to the people they are meant for, send notifications, and deliver direct messages.
  • To keep Turf safe: detect and stop spam, abuse, fraud and banned users returning; moderate content; respond to reports; match images against lists of known child sexual abuse material (section 8); and protect our systems. All images uploaded to Turf are also checked for adult, sexually suggestive and violent content before they are published, except profile photos and debate header images uploaded by Turf staff.
  • To create debate summaries: Catch up summaries are generated by Anthropic from the messages posted in a debate, and are deleted with the debate.
  • To communicate with you: account emails (sign-in, password, security), notifications you have turned on, and notices about changes to our terms or the Service. We do not send marketing emails. If we ever start, we will ask you first and let you opt out.
  • To improve Turf: fix bugs, understand which features are used, and create statistics that do not identify you.
  • To meet legal obligations: comply with the law and valid legal requests, enforce our terms, and defend legal claims.

3. How we share information

  • Service providers. The companies in the table below process your information on our behalf, under written data protection terms, only to provide their service to us.
  • Other users. Your profile is public. Your debate messages are visible to people on Turf while the debate is open. Your direct messages are visible to the people in the conversation.
  • Legal reasons. We may disclose information when required by law or valid legal process, or when we believe it is necessary to protect the safety of a person, to protect Turf's rights, or to report child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC).
  • Business transfers. When the operation of Turf is transferred to Supersonic Fields, Inc. once it is formed, or if Turf is acquired or merged, your information will be transferred to the new operator, who must honor this policy; we will tell you when that happens.
  • With your consent, for anything else.

We do not sell your personal information. If you accept analytics cookies, the Reddit pixel tells Reddit when someone who saw a Turf ad on Reddit creates an account, so we can measure our ads.

Service providers we use

ProviderWhat it does
Google Firebase and Google Cloud (Firestore, Cloud Functions, Authentication, App Check), United StatesDatabase, servers and sign-in
Google Cloud VisionChecking uploaded images for adult, sexually suggestive and violent content before they are published
VercelWebsite hosting
Cloudflare (CDN and R2 storage)Image storage, content delivery, security and known-CSAM image matching
Twilio SendGridAccount and notification emails
Google reCAPTCHAProtecting sign-up and forms from spam and abuse. reCAPTCHA is subject to the Google Privacy Policy and Terms of Service
AnthropicGenerating Catch up debate summaries from the messages posted in a debate, and checking some flagged debate messages
OpenAIChecking the text of debate messages, direct messages, and Catch up summaries
SlackInternal alerts about errors and safety reports in the Service
RedditMeasuring whether people who saw a Turf ad on Reddit created an account, after you accept analytics cookies
PostHogProduct analytics, after you accept analytics cookies
Google AnalyticsWebsite analytics, after you accept analytics cookies

4. How long we keep information

InformationHow long we keep it
Account and profile informationUntil you delete your account
Debate messagesDeleted within 48 hours after the debate ends
Direct messagesUntil you delete the conversation or your account. Messages you sent stay visible to the other person, as from "Deleted account", until they delete them
Reported contentUp to 365 days after we close the report, in a restricted archive no user can see. Longer only under a legal hold or a request from NCMEC or law enforcement
Intimate image removal requests365 days after the request is closed
Content reported to NCMECOne year after the report, longer only if needed to protect children or if law enforcement asks
Login access records (date, time, IP address)6 months
Security logsUp to 12 months
Email delivery records (the address an email went to, the type of email, and delivery status)Kept 90 days, then deleted, and deleted earlier if you delete your account
Report, block and enforcement identifiers after account deletionUp to 180 days
BackupsDeleted within 48 hours
Information under a legal holdOnly as long as the legal need lasts

5. Your choices and rights

  • In Settings you can edit your profile, manage notifications, set or change your password, and delete your account; you can block people from a debate's member list, and delete a conversation from your inbox.
  • By email you can ask us to tell you what personal information we have about you, correct it, send you a copy, or delete it. Email team@turfyeah.com from the email address on your account with the subject "Privacy request". We answer within 30 days, free of charge, and we will not treat you differently for asking.
  • You can stop notification emails in Settings. We will still send emails needed to run your account, such as password resets and security notices.

6. Brazil

Where Brazilian law applies, we keep application access records (the date, time and IP address of each login) for six months, as required by article 15 of Law 12,965/2014 (Marco Civil da Internet), and we may keep them longer if a competent authority asks us to. Questions about your personal information under Brazilian law can be sent to team@turfyeah.com.

7. Security

We protect your information with measures including encryption in transit and at rest (provided by our hosting providers), password hashing, access limited to the people who need it, and logging of access to our systems. No system is completely secure. If we learn of a breach that affects your information, we will tell you as the law requires.

8. Automated processing

  • Turf accounts. During the beta, some accounts in debates are Turf's own accounts, marked with a "Turf" tag next to their name. Their lines are written by Turf. They do not send or receive direct messages. See section 5.5 of our Terms of Service.
  • Known-CSAM matching. Images uploaded to Turf are delivered through our content delivery network, which automatically compares them with lists of known child sexual abuse material. A match blocks the image and alerts us; we then act and report as the law requires, without anyone viewing the image.
  • Image safety check. All images uploaded to Turf are also checked for adult, sexually suggestive and violent content before they are published, except profile photos and debate header images uploaded by Turf staff. An image that fails the check is rejected and not stored.
  • Message text. We automatically check the text of debate and direct messages with a keyword list and OpenAI's moderation tool, and we send some flagged debate messages to Anthropic to check whether they are a genuine threat.
  • Abuse protection. Google reCAPTCHA and similar tools help us tell people from automated abuse.
  • Decisions about your account. Enforcement decisions, such as removing content or suspending an account, may start from an automated signal or a report, and a person reviews them if you appeal (Terms, section 3.9).

9. Cookies

We use cookies and similar technologies that are needed to sign you in and keep Turf secure, and to remember your preferences (for example, that you dismissed a notice). We also use analytics cookies from PostHog and Google Analytics 4 to understand how Turf is used; you can block them in your browser. After you accept analytics cookies, Reddit also sets an advertising measurement cookie. You can withdraw your consent at any time in Reset Cookie Preferences on the Cookie Preferences page, which removes it. You can control cookies in your browser settings; blocking essential cookies may stop Turf from working.

10. Where your information is stored

Turf's systems are hosted in the United States. If you use Turf from another country, your information is transferred to and processed in the United States.

11. Changes to this policy

We may update this policy. For material changes, we will give you at least 30 days' notice by email and by a notice in the app, and we will post the new version with its effective date. Previous versions are listed below.

12. Contact

Turf, attention Marcelo Ranieri, 6801 Collins Ave, Miami Beach, FL 33141, United States. Email: team@turfyeah.com.

Version history

  • October 2026 (this version), effective December 1, 2026
    • Intimate image removal process added on October 10, 2026.
    • Clarified on October 13, 2026: reported content kept up to 365 days after a report is closed; email delivery records; account controls in Settings; sign-in options.
  • June 2026
  • April 2026