Effective date: September 27, 2026 · Last updated: September 27, 2026
This Privacy Policy explains how Exoloom ("Exoloom," "we," "us") collects, uses, shares and protects personal information when you use Fifth Quarter, including the website at 5thquarter.football and the Fifth Quarter apps for iOS and Android (the "Service"). It forms part of our Terms of Service. Exoloom is the controller of the personal information described here.
The short version. We collect what we need to run a football trash-talk community and nothing we would need to sell ads. We do not sell your personal information, we do not share it for targeted advertising, and we run no third-party advertising or cross-site tracking. Your posts are public by design; your messages are private between you and the fans in the thread. You can download your data or delete your account from Settings at any time.
1. Information we collect
Information you give us
Account information: email address and password, or a mobile phone number if you sign up by text message; your date of birth (to confirm you meet the minimum age); and your username and display name. Passwords are stored only as secure hashes by our authentication provider.
Profile information: the team you support, the team you love to hate, profile picture, bio, status, the cosmetics you choose to wear, and, for creators, a channel link. All optional except your team and names.
Content: takes, replies, polls, predictions, reactions, receipts you save, verdict votes, garage chat messages, direct messages, the GIFs you pick, images you upload, and anything else you post.
Social connections: friends, friend requests, rivalries, garage invitations and memberships, blocks and mutes.
Support and safety: support conversations and the pictures you attach, reports you file, moderation appeals, and bug reports.
Preferences: notification settings, game reminders, whether you show when you are active, celebration and tip settings, and similar choices.
Giveaways and referrals: your entries, the referral code you used or shared, and, if you win, the information needed to verify eligibility and deliver the prize.
Information collected automatically
Activity: when you were last active (a periodic signal sent while the app is open), the days on which you used the Service and roughly how long, which pages you visit and how many interactions you make on them (used for giveaway entry rules and aggregate product analytics), and which posts you react to or have already seen (used to rank your feed).
Device and app information: device platform, operating system, app version, browser type, and, if you enable push notifications, a push token from Apple or Google that lets us deliver notifications to that device.
Network information: your IP address, which our hosting providers process to deliver the Service and record in security logs. For giveaway referrals we keep only a salted, one-way hash of the address and may check it with an IP reputation service to detect VPNs, proxies and duplicate accounts; we do not store the raw address for that purpose.
Diagnostics: error, performance and request logs kept by our hosting providers.
Information from third parties
App stores and payment processors: confirmation of purchases, subscription status, renewal dates, refunds and cancellations (see Section 4).
Other fans: information about you in their content, such as an @-mention, a reply, a report, or a referral.
We do not collect precise geolocation, contacts from your address book, biometric data, or your full payment card number.
2. How we use it, and our legal bases
Purpose
Examples
Legal basis (EEA/UK)
Provide the Service
Create your account, show your posts, deliver messages, run game rooms, predictions, receipts, garages and leaderboards, compute Respect and badges
Contract
Personalize
Rank the feed, suggest fans and rivalries, show your team's games
Contract; legitimate interests
Process purchases
Verify a purchase with the store, activate and end Memberships, handle billing support
Contract; legal obligation (tax and accounting)
Communicate with you
Push, in-app and email notifications you have turned on, account and security emails, sign-in codes, support replies, notice of changes
Contract; legitimate interests; consent where required (push)
Safety and integrity
Moderate reports, detect spam, fraud, duplicate accounts and giveaway abuse, enforce the Terms, handle appeals
Legitimate interests; legal obligation
Run giveaways
Credit entries, verify referrals, draw and contact winners
Contract; legitimate interests
Improve the Service
Aggregate analytics on engagement, retention and reliability
Legitimate interests
Legal
Comply with law, respond to lawful requests, establish or defend legal claims
Legal obligation; legitimate interests
We do not use your information for third-party advertising, and we do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Automated tools may flag content, but a person reviews enforcement decisions you appeal.
3. What other fans can see
Public by design: your username, display name, profile picture, teams, bio, badges, level, Respect, cosmetics, public takes and replies, receipts, predictions once locked, and leaderboard positions. Public pages may be viewed by anyone and indexed by search engines.
Anonymous takes: hidden from other fans, but not from us. Authorized staff can see who wrote them for safety and enforcement.
Garages: visible to the members of that garage.
Direct messages: visible to the fans in the conversation. We do not read messages as a matter of course; authorized staff may review messages when they are reported, when needed to investigate abuse or a security issue, or when required by law. Message previews may appear in push notifications on the recipient's device.
Activity status: signed-in fans (other than fans you have blocked or who have blocked you) can see whether you are active or when you were last seen, unless you turn off SHOW WHEN YOU'RE ACTIVE in the privacy tab of your profile editor. Turning it off deletes your last-seen record.
Blocking: a fan you block cannot see your content or contact you, and you will not see theirs.
4. Purchases and payment information
On the web, payments are processed by Stripe, Inc. Stripe collects your payment card and billing details directly under its own privacy policy. We receive a customer identifier, the plan, the status of the subscription and its renewal date. We do not receive or store your card number or other card details.
In the iOS app, purchases are handled by Apple and in the Android app by Google, under Apple's and Google's privacy policies. We receive a transaction or purchase token, the product, and the subscription's status, dates, renewal and refund events, which we verify with Apple or Google on our server. We link the purchase to your account using your Fifth Quarter account identifier; we do not receive your Apple Account or Google account email, name or payment details.
What we keep: a record of each Membership (plan, store, subscription identifier, status and period dates) and a history of changes to it, so we can provide the perks you paid for, answer billing questions, prevent fraud and meet tax and accounting obligations.
Purchases never affect Respect, rank or giveaway entries.
5. Service providers and other sharing
We do not sell personal information. We share it only as described here.
Service providers
These companies process personal information on our behalf, under contracts that limit their use of it to providing their services to us:
Provider
What they do
Supabase
Database, authentication, file storage, realtime and server functions
Vercel
Website hosting and API functions
Stripe
Web payments and subscription billing
Apple (App Store, Apple Push Notification service)
iOS purchases and push notifications
Google (Google Play Billing, Firebase Cloud Messaging)
Sign-in codes by text message, if you use phone sign-up
Tenor (Google)
GIF search. Your search terms are sent through our server; we do not send your identity
An IP reputation service
VPN, proxy and hosting checks on giveaway referrals
Our sports data providers (API-Sports and ESPN) supply schedules and scores to us; we send them no personal information about you.
Other sharing
Other fans, as described in Section 3, and anyone you choose to share a link, QR code or share card with.
Legal and safety: when we believe in good faith it is necessary to comply with law, legal process or a lawful government request; to protect the rights, property or safety of Exoloom, our users or the public; to detect or prevent fraud or security issues; or to enforce our Terms. Where legally permitted, we will try to notify you before disclosing your information in response to a legal demand.
Business transfers: in connection with a merger, acquisition, financing, reorganization or sale of assets, subject to this Policy's protections.
With your consent or at your direction.
Aggregated or de-identified information that cannot reasonably identify you.
6. Cookies, local storage and tracking
The Service uses your browser's or device's local storage to keep you signed in, remember your settings and tips you have dismissed, and keep a short record of posts you have already seen so your feed stays fresh. These are strictly necessary or functional. We do not use advertising cookies, third-party analytics trackers, tracking pixels or cross-site tracking, and we do not track you across other companies' apps or websites. Because we do not engage in that kind of tracking, we do not respond differently to browser "Do Not Track" signals; we do honor Global Privacy Control as an opt-out of sale and sharing, which we do not do in any case.
7. How long we keep information
Account and content: for as long as your account exists. Content you delete is removed from the Service; content removed by moderation may be kept for a limited period for appeals and safety.
When you delete your account: we delete your account and the personal information tied to it, except that (a) records of moderation actions, reports and enforcement are kept as long as needed to protect the community and prevent repeat abuse; (b) purchase and billing records are kept as long as tax, accounting and legal obligations require; (c) information that others hold, such as a message you sent to another fan or a receipt they saved, may remain visible to them in de-identified form or as the law allows; and (d) residual copies in backups are overwritten on their normal cycle.
Activity and diagnostics: kept only as long as needed for the purpose collected, then deleted or aggregated.
Giveaway records: kept for the life of the giveaway and as long afterwards as needed to verify winners and meet legal requirements.
8. Your choices and rights
Everyone who uses Fifth Quarter can, directly in the Service:
Access and export: download a copy of your data (profile, posts, replies, reactions, receipts, friends, messages, reminders, notification preferences, reports and appeals) from Settings.
Correct: edit your profile and account details at any time.
Delete: permanently delete your account from the DANGER ZONE in Settings. This cannot be undone. Deleting your account does not cancel an Apple or Google subscription; cancel it in the store.
Control notifications: turn each type of push, email and in-app notification on or off in Settings, or turn off push in your device settings.
Control visibility: choose your profile details, post anonymously where offered, hide your activity status, and block or mute fans.
Depending on where you live, you may have additional rights, described below. To exercise any right you cannot exercise in the Service, contact us through the Help Center or at the address in Section 15. We will verify your request by confirming it comes from the account holder, and we will not discriminate against you for exercising your rights. An authorized agent may submit a request for you with proof of authorization.
9. U.S. state privacy rights
If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon or another state with a comprehensive privacy law, you may have the right to: know the categories and specific pieces of personal information we collect, use and disclose; correct it; delete it; obtain a portable copy; and opt out of the sale of personal information, sharing for cross-context behavioral advertising, and profiling in furtherance of significant decisions.
Categories collected in the last 12 months: identifiers (email, phone, username, account ID, IP address, push token); customer records (name you give, purchase records); protected characteristics (age, via date of birth); commercial information (Memberships bought); internet or network activity (use of the Service); inferences (feed and fan-matching preferences); and sensitive personal information limited to account login credentials, used only to provide the Service. Sources, purposes and recipients are described in Sections 1, 2 and 5.
We do not sell or share personal information, as those terms are defined under California law, and have not done so in the last 12 months. We have no actual knowledge of selling or sharing personal information of consumers under 16.
If we deny your request, you may appeal by replying to our decision; if you are dissatisfied with the outcome, you may contact your state attorney general.
10. EEA, UK and Swiss rights
If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on our legitimate interests, and, where we rely on consent, to withdraw it at any time without affecting prior processing. You also have the right to lodge a complaint with your local data protection authority. Our legal bases are set out in Section 2.
11. Children
Fifth Quarter is not directed to children under 14, and you must be at least 14 to create an account. We ask for your date of birth at sign-up and do not knowingly collect personal information from children under 13 (or under the minimum age required by the law where they live). If we learn that we have, we will delete the account and its information. Parents or guardians who believe their child has provided us information can contact us at the address in Section 15.
12. Security
We protect personal information with measures including encryption in transit (HTTPS/TLS), row-level access controls in our database, hashed passwords, access to staff tools limited to authorized personnel with an audit trail of moderation actions, and verification of purchases on our server. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep your password private and tell us through the Help Center if you suspect unauthorized access.
13. International transfers
We are based in the United States, and our service providers may process information in the United States and other countries whose data protection laws may differ from those where you live. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses and the UK Addendum, or the provider's certification under the EU-U.S. Data Privacy Framework.
14. Changes to this policy
We may update this Privacy Policy. We will post the updated version here with a new "Last updated" date, and if the changes are material we will notify you in the app or by email before they take effect.
15. Contact
For privacy questions, requests and complaints, use SUPPORT in the Help Center inside the app, or contact: