What we collect
Account information (name, email), membership records, and payment metadata (never full card numbers).
How we use it
To operate memberships, communicate about your account, deliver grants, and improve the platform.
Sharing
We do not sell personal data. Data is shared only with processors required to run the platform (payments, hosting, email). YouTube subscription confirmation requests are sent to Google/YouTube APIs.
Prize payout information (trivia winners only)
We ask for payout information only from a verified, confirmed daily trivia champion — never at registration and never from other participants. We collect a single payout address: a PayPal email or a Cash App $Cashtag, plus your confirmation that the account is yours and can receive US payments. We never ask for passwords, sign-in codes, bank or card numbers, PINs or security answers. The address is stored with administrator/service-only access, displayed in masked form, excluded from public pages, exports, emails and logs, and revealed to staff only through an audited action taken to send your payment. Payments are sent manually; PayPal and Cash App are independent providers. We keep the masked address and transaction reference as accounting evidence, and the full address can be purged on request.
YouTube subscription confirmation
If EPIC turns on the subscriber requirement for trivia payouts, a player may confirm with their own Google account before requesting a payout or claiming a prize. EPIC uses only the YouTube read-only permission (https://www.googleapis.com/auth/youtube.readonly) to verify whether that YouTube account is subscribed to @FootballsGreatestBears and to re-check the answer at payout time.
The confirmation reads the player's own YouTube channel ID/title and whether that account is subscribed to the target channel. EPIC stores the EPIC user ID association, target channel ID, player's YouTube channel ID/title, subscribed yes/no result, verification and check timestamps, limited error status, and an OAuth refresh token used only for rechecks. Raw tokens are stored server-side and are never shown to players or administrators.
This data is used only by EPIC and necessary hosting/database processors to operate the subscription confirmation feature. It is not sold. You can revoke EPIC's Google access in your Google Account permissions. Revocation can prevent future rechecks and payout confirmation when the subscriber requirement is enabled.
EPIC's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Retention
Account data is retained while your membership is active plus a reasonable period for legal and audit needs. YouTube subscription confirmation data is retained only while needed to operate the feature, meet legal or audit obligations, or until deletion is requested. Tokens are deleted or invalidated once the feature stops requiring them.
Your rights
You may request access, correction, or deletion via the Contact page.