Privacy Policy

Fantasy Record Book ("we," "us," or "our") operates the website beta.fantasyrecordbook.com and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, and protect your information.

By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, name, and password (or authentication via Google OAuth)
• Fantasy League Credentials: ESPN cookies (SWID, espn_s2) or Yahoo OAuth tokens to access your fantasy league data. Our optional Chrome extension ("Fantasy Record Book - ESPN Connector") reads only the SWID and espn_s2 cookies from espn.com and passes them to our website at your request. No other cookies or browsing data are accessed.
• League Data: Team names, scores, matchups, and other fantasy football statistics pulled from ESPN and Yahoo APIs

1.2 Information We Collect Automatically

• Device Type: Whether you access the Service from a mobile device or desktop computer

1.3 Cookies and Similar Technologies

We use minimal cookies primarily for authentication and to maintain your session. We cache data locally in your browser to improve performance. These are essential for the Service to function. You can disable cookies in your browser settings, but this may affect your ability to use the Service.

1.4 Information We Do NOT Collect

We do NOT collect or track:

• IP addresses
• Detailed browsing behavior or usage analytics beyond basic device type
• Tracking cookies for advertising purposes
• Location data

2. How We Use Your Information

We use your information solely to:

• Provide and maintain the Service
• Display your fantasy league statistics and records
• Authenticate your account via Google OAuth
• Access your fantasy league data from ESPN and Yahoo
• Send transactional emails (account verification, password reset)
• Notify you of important Service updates or policy changes
• Improve and develop new features for the Service

3. Data Sharing and Third Parties

We only share your information with the following third parties necessary to operate the Service:

3.1 Fantasy Platforms

• ESPN and Yahoo: To retrieve your fantasy league data via their APIs

3.2 Service Providers

• Railway: Cloud hosting provider (United States) for our database and backend services
• Vercel: Hosting provider (United States) for our website and frontend services
• Vercel Analytics: Basic website analytics (device type only, no personal tracking)
• Brevo: Email service provider for sending transactional emails

These providers are bound by data protection obligations and may only use your information to provide services to us.

3.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests (subpoenas, court orders, etc.).

4. Data Storage and Retention

4.1 Location

Your data is stored on servers in the United States (Railway).

4.2 Retention Periods

• Active Accounts: We retain your data indefinitely while your account is active
• Deleted Accounts: When you delete your account, your data is queued for deletion and generally removed within 60 days. Data may persist in backups for up to 30 additional days before permanent deletion.

4.3 Data Security

We implement reasonable security measures to protect your information, including:

• Encrypted connections (HTTPS/SSL)
• Secure password hashing
• OAuth authentication via Google, ESPN, and Yahoo
• Restricted access to user data

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

You have the right to:

• Access: View the fantasy league data we've collected from ESPN/Yahoo APIs
• Download (Data Portability): Export your raw fantasy league data in a usable format (note: calculated statistics and analytics are not included in exports)
• Delete: Permanently delete your account and all associated data at any time
• Correct: Update your account information
• Non-Discrimination: You will not face discriminatory treatment for exercising any of these rights

5.1 Authorized Agents

You may authorize another person or entity to submit requests on your behalf where permitted by law. We may require verification of the authorized agent's authority.

To exercise these rights, contact us at admin@fantasyrecordbook.com or use the account management features in the Service.

6. International Data Transfers

We operate primarily in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in the U.S., which may have data-protection laws different from those of your jurisdiction. Where required by law, we rely on Standard Contractual Clauses or other approved mechanisms to safeguard international transfers.

7. Age Restrictions

The Service is intended for individuals 13 years of age or older. We do not knowingly collect personal information from children under 13. If you are under 18, you must have parent or guardian consent to use the Service.

If you believe a child under 13 has provided us information in violation of this policy, please contact us at admin@fantasyrecordbook.com and we will take appropriate steps to delete such information.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Sending an email to the address associated with your account
• Updating the "Last Updated" date at the top of this policy

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (note: we do NOT sell personal information)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at admin@fantasyrecordbook.com.