Privacy Policy

1. Who We Are

Fantasy Analytic Network is a fantasy football analysis and draft tools service operated by Fantasy Analytic Network. No separate registered legal entity has been configured for the service at this time. Privacy questions can be sent to privacy@fantasyanalyticnetwork.com.

2. Information You Provide

Depending on how you use the Service, we may hold:

• Email address associated with your sign-in provider account
• Display name and avatar URL supplied by your sign-in provider or edited by you
• Authentication provider information (currently Google)
• League settings you create: league name, team count, rounds, scoring format, roster slots
• Fantasy team information: team names, manager labels, draft slots
• Draft history: picks, pick order, timestamps and which account made each pick
• Cheat sheets, custom rankings, tiers, target rounds and private notes you write
• Account preferences and role assignments
• Any support or legal correspondence you send us by email

3. Authentication and Security Information

Authentication is handled by Supabase Auth. We do not store your password: sign-in currently happens through Google, and Supabase manages the credentials and session tokens. We never store or log multi-factor secrets such as TOTP seeds.

Security-related records the application keeps include:

• Your account identifier (user ID) and the identifiers of records you create
• Whether your current session meets our multi-factor assurance requirement (used to gate staff actions)
• Audit log entries for privileged changes: role grants, football data edits, imports, settings changes and draft pick reversals, including the acting account and timestamp
• Legal acceptance records: your account ID, timestamp, the exact Terms and Privacy versions you accepted, the consent wording version and the acceptance method
• Timestamps on records you create or modify

We do not record your IP address for the purpose of Terms acceptance. Our infrastructure providers may process IP addresses transiently to deliver and secure requests, as described in their own documentation.

4. Plausible Analytics

Fantasy Analytic Network uses Plausible Analytics for aggregate website-usage measurement (page views, referral sources, device categories and similar aggregate metrics).

Using standard Plausible functionality, Plausible is designed to operate without:

• Analytics cookies
• Persistent tracking identifiers
• Cross-site or cross-device tracking profiles

We do not send personally identifiable information to Plausible. Specifically, we never send your email address, name, account or Google user ID, league name, team name, private notes, authentication or session tokens, or multi-factor information as Plausible events or custom properties.

Our current implementation loads the standard Plausible script and records page views only. If non-personal product events are added later, they would be limited to event names such as ranking_view, player_view, draft_started, draft_completed or tool_opened. We do not use an analytics proxy designed to evade content blockers.

5. First-Party Product Analytics

Separately from Plausible, the application maintains its own product analytics table used only by our staff console. Where an event is recorded it may include:

• Event type (for example, a ranking view or tool interaction)
• A target label describing what was viewed or used
• The path within the application
• A short-lived session key used to group activity within one visit
• A coarse device category (for example, mobile or desktop)
• The referring host, where present
• Your account ID when you are signed in
• A timestamp

Because an account identifier can be present, we describe this as account-linked product analytics rather than anonymous analytics. We keep the collected fields minimal and do not put private notes, league names, team names or email addresses into analytics events.

We use this to understand:

• Product usage and which tools people actually use
• Feature performance and reliability
• Security and abuse signals
• How to improve rankings, player pages and the draft experience

6. Cookies and Similar Technologies

• Authentication and session: strictly necessary browser storage and/or cookies managed by Supabase Auth to keep you signed in and to protect your account.
• Plausible analytics: standard cookie-free measurement with no persistent tracking identifier.
• First-party product analytics: a short-lived session key stored in the browser to group events from one visit.

Because we do not currently run advertising pixels, behavioral advertising, Google Analytics, Meta Pixel, session replay or other consent-requiring tracking technology, we do not display a cookie consent banner solely for analytics. If any such technology is introduced later, it will require a separate privacy review, an updated policy version and an appropriate consent mechanism before being enabled.

7. How Information Is Used

• Provide and operate the Service
• Authenticate accounts and maintain sessions
• Save your fantasy data, leagues and cheat sheets
• Operate live drafts and keep draft state consistent
• Secure accounts and enforce multi-factor requirements for staff actions
• Detect, prevent and investigate abuse and fraud
• Maintain audit history of privileged changes
• Respond to support and privacy requests
• Analyze product usage and improve functionality
• Comply with legal obligations
• Enforce our Terms of Service

8. Service Providers

We rely on the following categories of providers:

• Supabase — authentication, database, file storage and backend infrastructure for the Service.
• Google — OAuth sign-in provider. When you choose Continue with Google, Google shares your basic profile information (such as email address and name) with us, subject to Google's own policies.
• Plausible Analytics — aggregate, cookie-free website usage measurement.
• Lovable — application hosting and deployment, delivered over Cloudflare's edge network.

Providers process information on our behalf to run the Service. We do not list providers we do not use.

9. Sale and Sharing

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We do not run advertising networks on the Service. This describes our current practices; if that ever changes, we will update this policy and provide notice before the change takes effect.

10. Data Retention

We retain information for as long as it is needed for the purpose it was collected:

• Account and profile data: while your account is active
• League, draft and cheat sheet data: while the account or league is active, noting that leagues and drafts are shared records involving other members
• Audit and security records: retained to support security, fraud prevention, dispute resolution and legal obligations
• Legal acceptance records: retained as evidence of which document versions were accepted
• Product analytics: retained in minimal form for product and reliability analysis

We do not publish fixed retention periods, because the application does not currently implement automated expiry. When an account is deleted, we remove or de-identify personal data associated with that account where appropriate, subject to legitimate retention needs and to preserving shared records that belong to other users.

11. Data Security

We use reasonable technical and organizational measures, including:

• Managed authentication with a dedicated identity provider
• Multi-factor verification requirements for privileged staff actions
• Encryption in transit (HTTPS/TLS)
• Row-level security policies on database tables
• Role-based access controls and least-privilege service credentials
• Audit logging of privileged changes
• Private storage buckets for administrative file imports

No internet-connected system can be guaranteed to be completely secure, and we cannot promise absolute security.

12. Your Choices and Rights

You can request access to your information, correction of inaccurate information, deletion of your data, or closure of your account. Signed-in users can also request account deletion from the account section of the dashboard.

To make a request, contact privacy@fantasyanalyticnetwork.com. We may need to verify that the request comes from the account holder. Some records, such as audit and legal acceptance history, may be retained where we have a legitimate or legal basis to keep them.

13. State and Regional Privacy Rights

Residents of certain states, countries and regions may have additional rights under applicable law, which can include rights to know, access, correct, delete, obtain a copy of personal information, or to appeal a decision. We do not claim to meet any particular statutory threshold, and applicability depends on the law where you live.

To exercise any right that applies to you, contact privacy@fantasyanalyticnetwork.com and describe your request. We will respond as required by applicable law.

14. Children

Fantasy Analytic Network is not directed to children under 13, and accounts are not intended for children under 13. If we learn that we have collected personal information from a child under 13 contrary to this policy, we will investigate and delete the information as appropriate. Parents and guardians can contact privacy@fantasyanalyticnetwork.com to raise a concern.

15. International Users

Information may be processed and stored in the locations where we and our service providers operate, which may be outside your country of residence, subject to applicable law and to the provider documentation referenced above.

16. Policy Changes

This policy is versioned. Each published version records its version number, effective date and last-updated date, and historical versions are preserved rather than rewritten. Material changes will be communicated appropriately, and where affirmative consent is legally required for a new data practice, we will build a separate explicit consent flow rather than bundling it into general Terms acceptance.

Your acceptance record notes which Privacy Policy version you acknowledged alongside the Terms of Service.

17. Contact

Privacy questions and requests: privacy@fantasyanalyticnetwork.com. General legal questions: legal@fantasyanalyticnetwork.com.