Privacy policy
Summary
Fantasy Insights is a league-history platform for fantasy football. We collect the data needed to run the service — your Google identity for sign-in, your Sleeper handle and the league data you import, a small set of preferences — and we may display advertising and share certain personal information with advertising partners. We do not send marketing emails. You can opt out of sale or sharing for advertising, export your data, change what other league members see, or delete your account at any time from Settings.
What we collect
- Google account identity. When you sign in with Google we receive your email address, name, profile picture, and a stable Google identifier (
sub). The identifier is what ties your sessions together; your email and name are stored so other league members can see who's who according to your own privacy preferences below. - Sleeper handle and imported league data. When you link a Sleeper account we store the handle you provide. When you import leagues, we store the roster, schedule, scoring, draft, trade, and waiver history we read from Sleeper for those leagues. Custom (non-Sleeper) league data you enter directly is stored the same way.
- Preferences. Theme, dashboard layout, last-visited league, and the privacy toggles you set in Settings.
- Session cookies. A signed cookie carries your sign-in state. We also use cookies and similar technologies to enable advertising — see "Advertising" below.
- Technical signals. Approximate location (from IP), device and browser identifiers, and standard server-log fields (request path, status, user agent, timing).
How we use it
- To authenticate you and keep you signed in across visits.
- To render the league pages, standings, dashboards, and other views that make up the product.
- To show your identity to other members of leagues you share — subject to your privacy preferences.
- To select and display advertising, and to measure its performance — subject to your "Do not sell or share" preference.
- To debug and operate the service (server logs, never the contents of your session cookie).
Advertising
Fantasy Insights is supported by advertising. We may display ads on our pages and, to make those ads relevant, we may share certain personal information — including device and browser identifiers, IP address, approximate location, and your activity on Fantasy Insights — with advertising networks and measurement partners. Under the California Privacy Rights Act (CPRA), this constitutes "sharing" personal information for cross-context behavioral advertising. Depending on the partner arrangement, it may also constitute "selling" personal information under CCPA.
You can opt out. Use the Do not sell or share my personal information toggle in Settings → Privacy to opt out for your account. We also honor the Global Privacy Control (Sec-GPC: 1) browser signal as an opt-out for the requesting session, whether or not you are signed in.
We do not knowingly share personal information of users we know to be under 16 without affirmative authorization, as CPRA requires.
What we do not do
- We do not send marketing emails.
- We do not run session-replay tools.
- We do not use sensitive personal information (as defined by CPRA) for purposes other than those CPRA exempts.
Your rights
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the following rights. We extend these to all users regardless of residency:
- Right to know. Use Settings → Privacy → Download my data to receive a copy of the personal information we hold about you.
- Right to delete. Use Settings → Danger zone → Delete account to permanently delete your account and the personal data tied to it.
- Right to correct. Profile fields are editable from Settings. Email us if you need help correcting data we hold that you can't reach in the UI.
- Right to opt out of sale or sharing. The "Do not sell or share my personal information" toggle in Settings → Privacy is the in-product opt-out.
- Right to non-discrimination. Exercising any of these rights does not change the level of service you receive.
Cookies and similar technologies
Strictly necessary. An Auth.js session cookie (signed and encrypted; HttpOnly, Secure, SameSite=Lax) and the supporting CSRF and callback cookies that the sign-in flow needs.
Advertising. Cookies, device identifiers, and similar technologies set by us and by our advertising partners to select, deliver, and measure ads. When you opt out of "Sell or Share" — via the Settings toggle or a Global Privacy Control signal — advertising partners receive only the data they need to serve a non-personalized ad, and no cross-context profile data.
We also use the browser's localStorage to remember your theme, the order of your dashboard widgets, and the last league you visited. None of this localStorage data leaves your browser.
Children
Fantasy Insights is not directed at children under 13 and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us at the address below and we will delete it.
Changes to this policy
When we make a material change to this policy, we increment the version number at the top of this page and update the "Last updated" date. Signed-in users are prompted to review and accept the new version before continuing to use the service.
Contact
Questions about this policy, or to exercise any of your rights, write to privacy@curtislabs.com.