Updated October 22, 2026
Privacy & data
This policy describes the current 2 Minute Drill website and development app. Public ranked play and App Store distribution are not yet available.
Offline play
Offline game progress and statistics are stored on your device. We do not include advertising or analytics SDKs in the current app.
Purchases
The optional Full Playbook upgrade is a one-time purchase processed by Apple. The app checks Apple-verified purchase information to unlock content and restore purchases. We do not receive your payment card details or send purchase receipts to our own servers.
Online rankings
When public ranked play opens, Apple Game Center verifies your player identity. Our Cloudflare service checks Apple's signed proof and stores a hashed player identifier, your game decisions, run state, generated coach alias and score. We do not store your Apple password or publish your Game Center name. Your session credential is held in your device's Keychain. Completed scores and anonymous coach aliases appear on the daily leaderboard; offline games are not submitted.
Online runs are retained for up to 90 days, with daily cleanup. Sessions expire after 30 days. Verification-proof hashes expire after ten minutes and are removed during daily cleanup. Use “Delete online game data” in the app's Online leaderboard screen to remove your ranked history and sessions. A hashed identifier and date remain until the next daily cleanup to prevent another ranked attempt on the same day. Your Apple Game Center account and offline progress are separate and are not deleted by that action. The API uses network addresses transiently for rate limiting.
Contact messages
Our support form collects your chosen topic, message, and any optional reply information you provide. Cloudflare Workers and D1 process and store these messages. They are available only through our authenticated Cloudflare account and expire after 90 days. This is a stored support inbox, not an email forwarding service.
Spam protection and hosting
Cloudflare hosts this website and API. Turnstile checks contact submissions to reduce spam. The inbox application does not retain IP addresses or user-agent information; Cloudflare may process network and browser information to deliver and protect its services. See Cloudflare’s privacy policy.
Your choices
Reply information is optional. Don’t include sensitive information in support requests. For privacy questions, correction or deletion requests, use Contact Us. Removing the app removes its local preferences; Keychain credentials can persist under iOS behavior.
Historical data and attribution
Historical starting situations are adapted from 2024 play-by-play data by nflverse contributors, licensed under Creative Commons Attribution 4.0. We select late-game situations, replace team identities, and stop the starting clock for player decisions. Subsequent play outcomes are generated by our simulation, not historical replays.
2 Minute Drill uses fictional teams and players. It is independently developed and is not affiliated with or endorsed by the NFL, its teams, players or the reference games that inspired its genre.