This policy explains what information Turf collects, how we use and share it, how long we keep it, and the choices you have. Questions: team@turfyeah.com.
Who operates Turf
Turf is operated by Marcelo Ranieri, an individual. He decides how and why your personal information is used and is responsible for it under this policy. A Delaware corporation, Supersonic Fields, Inc., is being formed to take over the operation of Turf. When it does, it will take over this responsibility and we will tell you. You can contact us at team@turfyeah.com or at Turf, 6801 Collins Ave, Miami Beach, FL 33141, United States. We do not sell your personal information and we do not show ads in Turf.
Who Turf is for
Turf is for people 18 and older in the United States. We do not knowingly collect personal information from anyone under 18; if you believe someone under 18 has an account, email team@turfyeah.com with the subject "Under 18" and we will remove it. Turf is not directed to people in the European Union, the European Economic Area, the United Kingdom or Switzerland, and we do not offer our service to or monitor people there. If you are located in those regions, please do not use Turf.
1. Information we collect
1.1 Information you give us
- Account: your username (public), email address (private), and password (we store only a cryptographic hash, never the password itself). If you sign in with a provider, see section 1.3.
- Profile: photo, display name and bio (all public).
- Content: debate messages, direct messages, upvotes, reports, blocks and friend or follow actions.
- Messages you send us, for example support requests or privacy requests.
1.2 Information collected automatically
- IP address, and the approximate location (country or region) we derive from it. We do not collect precise location.
- Device and browser type, operating system, language and time zone.
- Login dates and times, and which sign-in method you used.
- Which features you use and which pages you open, and errors our servers record.
- Usage analytics collected by PostHog and Google Analytics 4, in aggregated or pseudonymous form. If you accept analytics cookies, the Reddit pixel also records when you create an account, so we can measure our ads on Reddit.
- Cookies and similar technologies (section 9).
1.3 Information from sign-in providers
If you sign in with Google, we receive your name, email address, profile photo (if you allow it) and an identifier from the provider. We request only what is needed to create and sign you into your account.
2. How we use information
- To run Turf: create your account, show your profile and messages to the people they are meant for, send notifications, and deliver direct messages.
- To keep Turf safe: detect and stop spam, abuse, fraud and banned users returning; moderate content; respond to reports; match images against lists of known child sexual abuse material (section 8); and protect our systems. All images uploaded to Turf are also checked for adult, sexually suggestive and violent content before they are published, except profile photos and debate header images uploaded by Turf staff.
- To create debate summaries: Catch up summaries are generated by Anthropic from the messages posted in a debate, and are deleted with the debate.
- To communicate with you: account emails (sign-in, password, security), notifications you have turned on, and notices about changes to our terms or the Service. We do not send marketing emails. If we ever start, we will ask you first and let you opt out.
- To improve Turf: fix bugs, understand which features are used, and create statistics that do not identify you.
- To meet legal obligations: comply with the law and valid legal requests, enforce our terms, and defend legal claims.
3. How we share information
- Service providers. The companies in the table below process your information on our behalf, under written data protection terms, only to provide their service to us.
- Other users. Your profile is public. Your debate messages are visible to people on Turf while the debate is open. Your direct messages are visible to the people in the conversation.
- Legal reasons. We may disclose information when required by law or valid legal process, or when we believe it is necessary to protect the safety of a person, to protect Turf's rights, or to report child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC).
- Business transfers. When the operation of Turf is transferred to Supersonic Fields, Inc. once it is formed, or if Turf is acquired or merged, your information will be transferred to the new operator, who must honor this policy; we will tell you when that happens.
- With your consent, for anything else.
We do not sell your personal information. If you accept analytics cookies, the Reddit pixel tells Reddit when someone who saw a Turf ad on Reddit creates an account, so we can measure our ads.
Service providers we use
| Provider | What it does |
|---|---|
| Google Firebase and Google Cloud (Firestore, Cloud Functions, Authentication, App Check), United States | Database, servers and sign-in |
| Google Cloud Vision | Checking uploaded images for adult, sexually suggestive and violent content before they are published |
| Vercel | Website hosting |
| Cloudflare (CDN and R2 storage) | Image storage, content delivery, security and known-CSAM image matching |
| Twilio SendGrid | Account and notification emails |
| Google reCAPTCHA | Protecting sign-up and forms from spam and abuse. reCAPTCHA is subject to the Google Privacy Policy and Terms of Service |
| Anthropic | Generating Catch up debate summaries from the messages posted in a debate, and checking some flagged debate messages |
| OpenAI | Checking the text of debate messages, direct messages, and Catch up summaries |
| Slack | Internal alerts about errors and safety reports in the Service |
| Measuring whether people who saw a Turf ad on Reddit created an account, after you accept analytics cookies | |
| PostHog | Product analytics, after you accept analytics cookies |
| Google Analytics | Website analytics, after you accept analytics cookies |
4. How long we keep information
| Information | How long we keep it |
|---|---|
| Account and profile information | Until you delete your account |
| Debate messages | Deleted within 48 hours after the debate ends |
| Direct messages | Until you delete the conversation or your account. Messages you sent stay visible to the other person, as from "Deleted account", until they delete them |
| Reported content | Up to 365 days after we close the report, in a restricted archive no user can see. Longer only under a legal hold or a request from NCMEC or law enforcement |
| Intimate image removal requests | 365 days after the request is closed |
| Content reported to NCMEC | One year after the report, longer only if needed to protect children or if law enforcement asks |
| Login access records (date, time, IP address) | 6 months |
| Security logs | Up to 12 months |
| Email delivery records (the address an email went to, the type of email, and delivery status) | Kept 90 days, then deleted, and deleted earlier if you delete your account |
| Report, block and enforcement identifiers after account deletion | Up to 180 days |
| Backups | Deleted within 48 hours |
| Information under a legal hold | Only as long as the legal need lasts |
5. Your choices and rights
- In Settings you can edit your profile, manage notifications, set or change your password, and delete your account; you can block people from a debate's member list, and delete a conversation from your inbox.
- By email you can ask us to tell you what personal information we have about you, correct it, send you a copy, or delete it. Email team@turfyeah.com from the email address on your account with the subject "Privacy request". We answer within 30 days, free of charge, and we will not treat you differently for asking.
- You can stop notification emails in Settings. We will still send emails needed to run your account, such as password resets and security notices.
6. Brazil
Where Brazilian law applies, we keep application access records (the date, time and IP address of each login) for six months, as required by article 15 of Law 12,965/2014 (Marco Civil da Internet), and we may keep them longer if a competent authority asks us to. Questions about your personal information under Brazilian law can be sent to team@turfyeah.com.
7. Security
We protect your information with measures including encryption in transit and at rest (provided by our hosting providers), password hashing, access limited to the people who need it, and logging of access to our systems. No system is completely secure. If we learn of a breach that affects your information, we will tell you as the law requires.
8. Automated processing
- Turf accounts. During the beta, some accounts in debates are Turf's own accounts, marked with a "Turf" tag next to their name. Their lines are written by Turf. They do not send or receive direct messages. See section 5.5 of our Terms of Service.
- Known-CSAM matching. Images uploaded to Turf are delivered through our content delivery network, which automatically compares them with lists of known child sexual abuse material. A match blocks the image and alerts us; we then act and report as the law requires, without anyone viewing the image.
- Image safety check. All images uploaded to Turf are also checked for adult, sexually suggestive and violent content before they are published, except profile photos and debate header images uploaded by Turf staff. An image that fails the check is rejected and not stored.
- Message text. We automatically check the text of debate and direct messages with a keyword list and OpenAI's moderation tool, and we send some flagged debate messages to Anthropic to check whether they are a genuine threat.
- Abuse protection. Google reCAPTCHA and similar tools help us tell people from automated abuse.
- Decisions about your account. Enforcement decisions, such as removing content or suspending an account, may start from an automated signal or a report, and a person reviews them if you appeal (Terms, section 3.9).
9. Cookies
We use cookies and similar technologies that are needed to sign you in and keep Turf secure, and to remember your preferences (for example, that you dismissed a notice). We also use analytics cookies from PostHog and Google Analytics 4 to understand how Turf is used; you can block them in your browser. After you accept analytics cookies, Reddit also sets an advertising measurement cookie. You can withdraw your consent at any time in Reset Cookie Preferences on the Cookie Preferences page, which removes it. You can control cookies in your browser settings; blocking essential cookies may stop Turf from working.
10. Where your information is stored
Turf's systems are hosted in the United States. If you use Turf from another country, your information is transferred to and processed in the United States.
11. Changes to this policy
We may update this policy. For material changes, we will give you at least 30 days' notice by email and by a notice in the app, and we will post the new version with its effective date. Previous versions are listed below.
12. Contact
Turf, attention Marcelo Ranieri, 6801 Collins Ave, Miami Beach, FL 33141, United States. Email: team@turfyeah.com.
Version history
- October 2026 (this version), effective December 1, 2026
- Intimate image removal process added on October 10, 2026.
- Clarified on October 13, 2026: reported content kept up to 365 days after a report is closed; email delivery records; account controls in Settings; sign-in options.
- June 2026
- April 2026