Two-Minute Drill (nfl2mindrill.com) is a free football game. No account and no email are needed (signing in is optional). This policy explains what the website keeps, which cookies it and its partners use, and the choices you have.
On your device
Your game progress, your stats, your survivor run and the name you choose (if any) are saved in your browser's local storage, so a reload picks up where you left off. Clearing your browser's site data deletes them.
Daily results and leaderboards
When you finish the daily drive, your score is sent to our server on Cloudflare so you can see how everyone did. The same goes for your survivor best, if you put a name on the board. What we keep: the score, the date, the name you chose (only if you entered one) and a scrambled form of a random code your browser made up (so the same phone counts once a day and nobody else can take your name). No IP addresses, emails or real names are stored.
Purchases (Pro)
Pro is a one-time purchase made on Stripe's checkout page (Apple Pay, Google Pay or a card). Stripe handles the payment and holds the receipt: your card or wallet details and name never reach this site. When you come back from Stripe, the site asks its backend to confirm the payment and gives you a Pro code; the backend keeps only that code, the Stripe checkout session id behind it, a hash of the random device key this site already uses (so a code can be checked again on up to three of your devices, and not shared more widely), and a keyed, scrambled form of the email you paid with (never the address itself), so a lost code can be found again. The code is stored in your browser like the rest of your progress. Lost your code? On the Pro tab, tap "Lost your code?" and enter the email you paid with: the backend looks the purchase up (in its own scrambled list, and in Stripe's records) and emails the code to that address through Resend; it answers the same way whether or not the address bought anything, and keeps, for an hour, scrambled counts that limit how many such emails go to one address or from one network. For anything else (a refund), contact us with the email you paid with.
Signing in (optional)
You can sign in with Google or with a link we email you, so your Pro, your stats and your streak stay with your account on any device. The email address from signing in is used only to keep your Pro on your account, to send you sign-in links and, if you turn it on, the daily email; it is never sold or shared. The backend keeps the address, your username, your Pro code (if any), your game record (each day's score and coach match, your best on each historic drive and playoff run), the friend leagues you are in, whether you want the daily email (and the last day one was sent), a scrambled form of your sign-in session, and, for 15 minutes, scrambled counts that limit how many sign-in emails go to one address or from one network. Sign-in emails are sent through Resend; a purchase made while signed in passes Stripe an anonymous reference to your account (never your email address), so the Pro you buy lands on it.
Friend leagues are private: only their members see a league's board, and it shows each member's username, that day's score, streak and 7-day average, never an email address. The daily email is off unless you turn it on in your account; every one has an unsubscribe link, and turning it off in your account works too.
Analytics
We use Google Analytics to count visits and see which parts of the game people use (for example, how many
finish the daily drive), so we can make it better. Google Analytics sets cookies (such as _ga) and
receives your IP address and device and browser details; we don't send it your name or any account details,
because there are none. See how
Google uses information from sites that use its services. You can opt out of Google Analytics on every site
with Google's opt-out browser add-on.
Advertising
The site shows ads from Google AdSense. Google, as a third-party vendor, uses cookies to serve ads on this site. Google's advertising cookies let it and its partners serve ads based on your visits to this site and other sites on the internet. Third-party vendors and ad networks may also serve ads and use cookies on this site.
You can opt out of personalized advertising by visiting Google's Ad Settings, and opt out of other vendors' use of cookies for personalized advertising at aboutads.info (or youronlinechoices.eu in Europe). Learn more in how Google uses cookies in advertising.
Cookies and similar technologies
- Your browser's local storage (not a cookie): your game progress, stats and chosen name, described above. It never leaves your device except for the scores described above.
- Google Analytics cookies: to count visits and measure how the game is used.
- Google advertising cookies: to show ads, limit how often you see the same one, measure them and, if you allow it, personalize them.
You can block or delete cookies in your browser's settings; the game still works without them.
Consent and your choices
Visitors in the European Economic Area, the United Kingdom and Switzerland are shown a consent message from a Google-certified consent management platform the first time they visit, and can accept, decline or choose which uses of their data to allow. You can change your choice at any time from the privacy link the message leaves on the page. Where you decline, Google shows only non-personalized ads, which still use cookies for frequency capping, aggregated reporting and to combat fraud and abuse.
If you live in a US state with a consumer privacy law (such as California), you have the right to know what personal information is collected, to ask for it to be deleted, and to opt out of the "sale" or "sharing" of personal information for targeted advertising. We don't sell personal information for money. To opt out of personalized ads, use Google's Ad Settings above, and your browser's Global Privacy Control signal is honored by Google's ad services where the law requires it. For any request, contact us below.
Service providers
The website is hosted on Cloudflare, which processes visitors' IP addresses to deliver the pages and protect them from abuse. Its fonts are loaded from Google Fonts, which receives your IP address when your browser fetches them.
How long data is kept
Daily scores and survivor runs are kept so past days' results and leaderboards stay available. Google Analytics data is kept according to Google's retention settings for this site. Your local game data stays on your device until you clear it.
Children
The game is meant for a general audience and doesn't knowingly collect personal information from children under 13.
Not affiliated with the NFL
Two-Minute Drill is an independent, fan-made game. It is not affiliated with, endorsed by or sponsored by the National Football League, its teams, its players or the NFL Players Association. NFL, team names and player names are trademarks or property of their respective owners and are used only to identify the real games the spots come from. No team logos are used. Play-by-play comes from the public nflverse data.
Contact
Questions about this policy, or a request about your data: message us on X at @TwoMinuteDrill0.
Changes
If what the site collects changes, this page will say so, with a new date below.
Last updated October 16, 2026.