Privacy Notice

What we collect

Only what the game needs to run:

• Waitlist: your email address, and nothing else. It is used to tell you when early access opens.
• Account: your email address, a display name, and a password you choose. The password is stored by our authentication provider as a hash; nobody here can read it.
• Optional profile: a team name, an avatar image, and a timezone, if you set them.
• Gameplay: your league membership, roster, lineups, trades, waiver claims, the Power-Ups you play, and weekly scores.
• Operational records: the week operations and transactions your league performs, so a disputed result can be traced.

We do not collect payment details, because nothing is for sale. We do not ask for a phone number, a home address, or a date of birth.

What we do not do

There is no advertising, no third-party analytics, and no tracking pixel anywhere in the product. We do not build a profile of you, and we do not sell or rent your information to anyone.

Cookies are used for one purpose: keeping you signed in. There are no marketing or advertising cookies.

Who can see your data

Other managers in your league see what the game shows them: your team name, roster, lineup once it locks, trades, and results. Your commissioner additionally sees league administration data.

Your email address is not shown to other managers.

Nobody outside your league sees your gameplay data.

Where it is stored

Application data sits in a Supabase Postgres database; avatars sit in Supabase Storage; the app runs on Vercel. Both are service providers acting on our behalf, and both store data on servers in the United States.

Access is restricted by database row-level security, so a request can only read the rows its own account is entitled to.

When something breaks, an error report goes to Sentry, the error-monitoring service we use, so we can find and fix the problem. A report says what failed and which league or team it happened in. It does not include your email address, your password, your IP address, your cookies, or anything you typed.

NFL data

Player names, teams, schedules, and statistics come from public sources, chiefly nflverse and Sleeper. That data is about NFL players, not about you, and it is fetched by our servers rather than by your browser.

How long we keep it

Gameplay data is kept for as long as your league exists, because a season's history is the point of the game. Waitlist addresses are kept until early access opens or you ask us to remove yours.

The private beta is a test. Its data may be deleted in full when the beta ends.

Your choices

You can change your display name, avatar, and timezone at any time in your profile.

You can ask for your account and its data to be deleted, or for your waitlist address to be removed. Ask the commissioner who invited you and it will be done.

Deleting your account removes your profile and detaches you from your leagues. A league's completed results may remain in that league's history.

Children

Fantasy Blitz is not intended for children under 13, and accounts are created only by invitation. If you believe a child has created an account, tell the commissioner of that league and it will be removed.

Changes and contact

We may update this notice. The effective date above changes when we do.

For anything about your data, contact the commissioner who invited you.