Contact and responsibility
QuickFire Entertainment Holdings, LLC, operating Triune TCG. Privacy contact: Craig McCullough, craig@quickfiretalent.com, 731-446-0153. Mailing address: 1328 Cherokee Trail, Tallassee, AL 36078.
What the process collects
Your adult account supplies your verified email and account identity. The request records country, parental-authority confirmation, requested permissions, notice version, request status, dates and review history. A signed form records your printed name, signature and date. Do not add a child’s legal name, birth date, contact details or identity documents to the form.
After approval, you choose a child username, password and display name. The system assigns a player ID, records the guardian relationship and consent scope, and maintains account/access and security state. It does not require a child’s email inbox. Choose a nickname that does not identify the child offline.
Craig verifies the signed form and parental authority before enabling a child account. A checkbox, email confirmation or upload alone is not approval. Only the submitting guardian and Craig with current account verification can access the form through the website.
Separate choices for account and community
Required account permission covers the child’s separate sign-in, player card and the security and administration necessary to provide them. It does not give the child access to your adult account, store documents or guardian controls.
Optional community permission is a separate choice. If that feature is enabled and you choose it, the child can submit discussion text under a display name; approved contributions are visible to discussion readers and the text may be sent to OpenAI for safety screening. You may refuse or withdraw this optional choice while retaining a permitted basic account. It does not authorize advertising or unrelated sharing.
The requested choices appear in the signed form. Do not sign a form that describes permissions you do not want. Material changes require a new explanation and any required permission before the new use begins.
Who helps provide the child service
Vercel handles website requests; Supabase handles authentication, profiles, consent records and private forms; Cloudflare Turnstile receives IP/browser signals for abuse prevention. OpenAI receives comment text for moderation when community participation and screening are enabled. Google handles adult account/support email. These services may process data in the United States and other countries.
We do not send the signed form or private identity documents to OpenAI for comment screening. Resend store notices do not contain child details. Children are not asked to join a marketing list. The account privacy notice explains these providers, security records and backup limits.
Review, withdrawal and deletion
Use your guardian account to review the request and manage the child account, or contact Craig to request access or correction. Verify your account or authority before private information can be released. You can stop further collection by withdrawing the relevant permission.
Withdrawing all account consent or requesting child deletion blocks child access and hides the child’s contributions immediately through the account controls. The operating target is removal of the child’s login identity, profile, authored content and identifying references from active systems within 30 days, sooner where possible. Your separate adult account remains.
Craig must inspect shared discussions, reports and relevant event history before cleanup finishes. Other people’s replies and match outcomes are preserved only after identifying child information is removed; unresolved shared records are restricted for review. Worker failures remain pending for follow-up and do not count as completed deletion. Contact Craig if cleanup is delayed.
Pending requests expire 30 days after creation; correcting a form does not restart the deadline. Unfinished or closed requests without a linked child are cleaned up after the applicable expiry or withdrawal. Signed forms tied to a child are handled with the child’s consent/deletion lifecycle. Superseded and abandoned uploads older than 24 hours are reconciled. These schedules remove active files and eligible request history, not every backup or downloaded copy.