Project 52 Logo

Project 52! — Terms of Service

Effective date: 2025-08-13

These Terms of Service (the "Terms") govern your access to and use of the Project 52! mobile application and related services (collectively, the "Service") provided by NoGo apps inc. ("NoGo", "we", "us", or "our"). By accessing or using the Service, you agree to be bound by these Terms.

If you do not agree to these Terms, do not use the Service.

1. What the Service Does

  • Project 52! is a mobile experience centered around shuffling a standard 52‑card deck and detecting extremely rare identical shuffles between users.
  • The app enables you to: create a lightweight account, optionally set a profile picture, shuffle cards, submit shuffles to our backend for match detection, and view basic statistics.
  • The matching system stores shuffle data in order to determine historic or future matches.

2. Accounts and Onboarding

  • You may create an account during onboarding. No password is required. Your account includes:
    • username (required),
    • optional email (if you choose to provide it),
    • profile picture (default avatar or an uploaded image),
    • an "anonymous" flag indicating whether you prefer a minimal identity.
  • After account creation, our backend issues JSON Web Tokens (JWT): an access token (typically ~24 hours) and a refresh token (typically ~30 days). These tokens are stored locally on your device for authentication.
  • You are responsible for maintaining the security of your device. If your device is compromised, tokens stored on the device may be misused.

3. Your Content and License

  • You may submit a profile picture and other content you provide (collectively, "User Content"). You retain ownership of your User Content.
  • You grant NoGo a worldwide, non‑exclusive, royalty‑free license to host, store, display, and process your User Content solely to operate and improve the Service.
  • You represent that you have the necessary rights to your User Content and that uploading it does not infringe the rights of others.

4. Acceptable Use

You agree not to:

  • impersonate others or misrepresent your identity,
  • upload unlawful, harmful, infringing, or offensive content,
  • attempt to reverse engineer, interfere with, or disrupt the Service,
  • use the Service to spam, harass, or harm others,
  • circumvent technical measures or security features.

We may investigate violations and suspend or terminate accounts that breach these Terms.

5. Data We Process

Based on the current implementation of the mobile app and backend:

  • Account data: username (required), optional email, profile picture (default avatar or uploaded), anonymous flag, and system metadata (e.g., created/updated timestamps, deletion status).
  • Authentication data: access and refresh JWTs issued by our backend and stored on your device; tokens are transmitted to the API to authenticate requests.
  • Shuffle and match data: serialized 52‑card deck sequences and their SHA‑256 hashes submitted by the app to the backend; records of matches between users (including involved user IDs and usernames), timestamps, and deck sequences for verification.
  • Operational logs and metrics: basic server logs for reliability and security. The app also records local counts (e.g., shuffle count) on your device for UX purposes.

Notes on configuration:

  • By design, shuffle and match records are retained to enable rare match detection and historical verification.
  • Default avatars are served from a public S3 bucket. Uploaded profile pictures are stored in our S3 bucket to be retrievable by the app and may be accessible via a direct URL.

6. Third‑Party Services

  • Storage: We use Amazon Web Services (AWS) Simple Storage Service (S3) to store default avatars and profile images. Files may be stored in the United States (e.g., us‑east‑1).
  • No payments: The Service does not currently process payments, subscriptions, or in‑app purchases.
  • No ads or analytics: The app does not currently include advertising or analytics/crash reporting SDKs.
  • No push notifications at this time.

7. Data Retention

  • Account profile: While your account is active, we retain your profile data. If you delete your account, we will mark it as deleted and cease normal access and display. Certain technical records may be retained for security, audit, or legitimate interests.
  • Shuffle and match data: To preserve the integrity and scientific/competitive value of rare matches, shuffle hashes, deck sequences, and match records may be retained indefinitely. Where feasible, we aim to decouple these records from directly identifying profile data.
  • Logs: Server logs are retained for a limited period consistent with security and operational needs.

8. Privacy

Your use of the Service is also subject to our Privacy Notice, which explains how we collect, use, and share information. If a separate Privacy Notice is not yet published, this Section 5 and 7 describe the data categories and purposes we rely on today.

9. Intellectual Property

The Service, including software, UI, designs, text, graphics, logos, and other content, is owned by NoGo or its licensors and is protected by law. Except for the rights expressly granted to you in these Terms, we reserve all rights in the Service.

10. Changes to the Service

We may change, suspend, or discontinue parts of the Service at any time. Where material changes impact you, we will provide reasonable notice in‑app or via our website.

11. Term and Termination

  • You may stop using the Service at any time. You can delete your account using in‑app controls where available.
  • We may suspend or terminate your access if you violate these Terms or if we believe your use risks harm to the Service or others.
  • Upon termination, provisions that by their nature should survive (e.g., IP ownership, disclaimers, limitations of liability, governing law) will continue to apply.

12. Disclaimers

  • THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, NOGO DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON‑INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.
  • We do not warrant that the Service will be uninterrupted, secure, or error‑free, or that any defects will be corrected.

13. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NOGO AND ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, DATA, OR GOODWILL, ARISING FROM OR RELATED TO YOUR USE OF THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. TO THE EXTENT LIABILITY CANNOT BE EXCLUDED, NOGO'S TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICE WILL NOT EXCEED USD $100.

14. Indemnification

You will indemnify and hold harmless NoGo and its personnel from and against all claims, liabilities, damages, losses, and expenses (including reasonable attorneys' fees) arising out of or related to your use of the Service, your User Content, or your violation of these Terms or applicable law.

15. Governing Law; Venue

These Terms are governed by the laws of the State of Delaware, USA, without regard to its conflict of laws principles. You agree to the exclusive jurisdiction and venue of the state and federal courts located in Delaware for all disputes arising out of or relating to these Terms or the Service.

16. Changes to These Terms

We may update these Terms from time to time. When we do, we will revise the "Effective date" above and, if changes are material, provide reasonable notice in‑app or via our website. Your continued use of the Service after the updated Terms become effective constitutes acceptance of the changes.

17. Contact

If you have questions about these Terms or the Service, contact us at: team@project52.app

Additional implementation notes (informative):

  • Authentication: JWT access (~24h) and refresh (~30d) tokens are issued by the backend and stored locally by the app.
  • Data flows: The app may submit the 52‑card deck sequence and its SHA‑256 hash to the backend for matching; matches may include both users' IDs and usernames and a timestamp.
  • Storage: Default avatars are publicly served; uploaded profile images are stored in S3 and may be retrievable by URL.
  • Admin endpoints: The backend exposes administrative statistics and maintenance endpoints; these are protected by server‑side controls.
Built with v0