Legal

Privacy Policy

Last updated: May 23, 2026

This Privacy Policy explains what data CornholeBoards.us (https://cornholeboards.us) collects, how we use it, and the choices you have about it. We try to keep this short and plainly worded; if anything is unclear, email contact@tuxxin.com.

1. Information we collect

You give us directly

Email address — when you sign in (magic-link or Google), subscribe to the newsletter, or contact us.
Name and profile photo — if you sign in with Google, we receive your basic profile information.
Designs and uploads — any artwork, text, or reference images you create or upload in the Custom Board Designer.
Payment information — when you purchase a download or subscribe, payment is processed by PayPal. We never see your card or bank details; we only receive PayPal's confirmation that payment occurred.
Contact-form submissions — your name, email, message, and chosen subject when you use the contact form.

We collect automatically

Log data — IP address, user agent, requested URL, referrer, and timestamp (standard server logs, used for security, debugging, and rate-limiting).
Cookies — a session cookie if you sign in, an OAuth state cookie during sign-in flows, and ad-related cookies set by Google AdSense and Cloudflare.
Analytics — aggregate page-view counts via Google Analytics (if enabled) and Google AdSense reporting.

2. How we use information

To run the site (serve pages, deliver downloads, authenticate sign-ins).
To process and fulfill paid purchases via PayPal.
To send transactional email — magic-link sign-ins, purchase receipts, password-reset (if applicable), and the weekly newsletter (only if you opted in).
To prevent abuse and enforce rate limits.
To display contextually relevant Google ads on most pages.
To improve content based on aggregate analytics.

3. Third-party services we use

PayPal — payment processing (subscriptions and one-time purchases).
Google AdSense — displays ads. AdSense may use cookies and your IP to personalize ads. See Google’s ads policy.
Google OAuth — optional sign-in. Returns your email and profile to us only when you choose this method.
Google Cloud / Vertex AI — AI image generation in the Custom Board Designer.
MailerSend — transactional email delivery (magic links, newsletter, receipts).
Cloudflare — content delivery, DDoS protection, bot mitigation.
Iconify — public clipart/icon search inside the Designer (no user data sent).
Amazon Associates — affiliate links on product pages; clicking sends your visit to amazon.com, which may set its own cookies.
WorldIP.io — the “Your IP” widget embedded in our footer.

We do not sell your personal information to third parties.

4. Cookies

Essential — session cookies for sign-in and OAuth flows. These cannot be disabled without breaking those features.
Analytics — Google Analytics if enabled.
Advertising — Google AdSense cookies for ad personalization and frequency capping.

You can disable cookies in your browser, but the site (especially sign-in and downloads) may stop working correctly.

5. Your designs & uploads

Anonymous designs (no sign-in) — saved only in your browser’s local storage; never uploaded to our servers.
Signed-in designs — stored on our servers for 72 hours if not downloaded.
Purchased designs — kept on your account permanently; you can re-download them anytime at no charge.
Reference images uploaded for AI prompts — sent to Google’s AI service to generate your image, then discarded from our servers (we do not retain reference uploads).

6. Data retention

Account and purchase history: kept while your account exists.
Server logs: rotated every 30 days.
Email magic-link tokens: 15 minutes.
Newsletter subscriber email: until you unsubscribe.
Non-purchased designs: 72 hours.

7. Your rights

You may at any time request to:

Access a copy of the personal data we hold about you.
Correct inaccurate information.
Delete your account and associated data.
Unsubscribe from the newsletter (one click; the link is in every email).
Opt out of personalized ads via Google’s ad settings.

To exercise any of these, email contact@tuxxin.com from the address on your account.

8. California & EU residents

California residents have rights under the CCPA, and EU/UK residents have rights under the GDPR. Both include the rights enumerated in section 7 above. We do not sell personal information. To exercise CCPA/GDPR rights, use the email above; we will respond within 30 days.

9. Children

The site is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, email us and we’ll delete it.

10. Changes to this policy

We’ll update the “Last updated” date above when we make material changes. Substantial changes will be announced in the newsletter (if you’re subscribed) or on the site banner.

11. Contact

Privacy questions or requests: contact@tuxxin.com.