Privacy Policy

Introduction

Fantasy Stock League LLC ("we," "us," or "our"), a Virginia Limited Liability Company, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our fantasy stock game platform.

By using Fantasy Stock League, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

When you create an account, we collect:

• • Username: Your chosen display name
• • Email Address: For account verification and communications
• • Password: Encrypted and securely stored (email/password accounts only)
• • Profile Image (Optional): If you choose to upload a profile picture, it is stored securely in Firebase Storage and publicly visible on your profile and team pages

OAuth Authentication

When you sign in with Google, Apple, or Discord, we collect:

• • Email address: From your OAuth provider account
• • Display name: Your profile name from the provider
• • Profile photo: Your profile picture (optional)
• • Provider User ID: Unique identifier for authentication

Note: We only request the minimum permissions necessary (email and profile). We do not access your Google Drive, Gmail, iCloud data, Discord messages, or other provider services beyond basic authentication.

Game Data

During your use of the platform, we collect:

• • Draft Picks: Stock selections you make during drafts
• • Portfolio Data: Your virtual holdings and performance
• • Team Information: Division, team name, and rankings

Automatically Collected Information

• • Log Data: IP address, browser type, and access times
• • Usage Data: Pages viewed, time spent on pages, and interactions

How We Use Your Information

We use the collected information for:

• • Account Management: Creating and maintaining your account
• • Game Functionality: Enabling draft participation, tracking portfolios, and calculating rankings
• • Communication: Sending important updates about your account or the game
• • Platform Improvement: Analyzing usage patterns to enhance user experience
• • Security: Protecting against fraud, abuse, and security threats

Information Sharing and Disclosure

Public Information

The following information is publicly visible to other users:

• • Username and team name
• • Profile image (if you choose to upload one)
• • Division and rankings
• • Portfolio value and performance
• • Stock picks made during drafts

Third-Party Services

We use trusted third-party services to provide our platform:

• • Firebase (Google): Authentication, database, and hosting services
• • Google OAuth 2.0: Secure sign-in with your Google account
• • SendGrid: Email delivery service for account verification and notifications
• • Finnhub API: Real-time stock price data

These providers have access to your information only to perform tasks on our behalf and are obligated to protect it according to their privacy policies.

We Never Share

• • Your email address (kept private)
• • Your password or authentication credentials
• • Personal information with advertisers or marketers (current policy)

Future Sponsorships and Advertising

Data Security

We implement industry-standard security measures to protect your information:

• • Encrypted passwords: All passwords are hashed using bcrypt (email/password accounts)
• • OAuth authentication: Secure sign-in without storing passwords (Google accounts)
• • HTTPS connections: All data transmitted over secure, encrypted connections
• • Session security: HttpOnly cookies, 24-hour session timeout, CSRF protection
• • Firebase security: Enterprise-grade authentication and database security
• • Rate limiting: Protection against brute-force attacks and abuse
• • Security logging: Monitoring and alerts for suspicious activity

Note: No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights and Choices

You have the right to:

• • Access: Request a copy of your personal data
• • Update: Modify your team name and other account settings
• • Delete: Request deletion of your account and data
• • Portability: Receive your data in a structured, commonly-used format
• • Opt-Out: Unsubscribe from non-essential communications

To exercise these rights, please contact us at info@fantasystockleague.net

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• • Active Accounts: Data is retained while your account is active
• • Account Deletion: Upon request, we will delete your account and personal data within 30 days
• • Anonymized Data: Historical game data may be retained in anonymized form for statistical purposes
• • Legal Requirements: Some data may be retained longer if required by law (e.g., financial records, abuse reports)
• • Inactive Accounts: Accounts inactive for 3+ years may be deleted after email notification

European Privacy Rights (GDPR)

If you are located in the European Union, European Economic Area, or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

Your GDPR Rights

• • Right to Access: Obtain confirmation and a copy of your personal data
• • Right to Rectification: Correct inaccurate or incomplete data
• • Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• • Right to Data Portability: Receive your data in machine-readable format
• • Right to Restrict Processing: Limit how we use your data
• • Right to Object: Object to processing based on legitimate interests
• • Right to Withdraw Consent: Withdraw consent at any time
• • Right to Lodge a Complaint: File a complaint with your local data protection authority

Legal Basis for Processing

We process your personal data under the following legal bases:

• • Contractual Necessity: To provide our game services that you've signed up for
• • Consent: For analytics and non-essential communications (you can withdraw anytime)
• • Legitimate Interest: To improve our services, prevent fraud, and ensure platform security
• • Legal Obligation: To comply with applicable laws and regulations

International Data Transfers

Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place:

• • Use of Google Cloud Platform with GDPR-compliant data processing agreements
• • Standard Contractual Clauses (SCCs) approved by the European Commission
• • Encryption of data in transit and at rest

Exercising Your GDPR Rights

To exercise your GDPR rights, email us at info@fantasystockleague.net with "GDPR Request" in the subject line. We will respond within 30 days.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Your California Rights

• • Right to Know: Request details about the personal information we collect, use, disclose, and sell
• • Right to Delete: Request deletion of your personal information
• • Right to Correct: Request correction of inaccurate personal information
• • Right to Opt-Out: Opt-out of the sale or sharing of your personal information
• • Right to Limit: Limit the use and disclosure of sensitive personal information
• • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Information We Collect (California)

In the past 12 months, we have collected the following categories of personal information from California residents:

• • Identifiers: Email address, username, IP address
• • Internet Activity: Browsing history on our platform, interactions with our service
• • Game Data: Stock picks, portfolio performance, rankings

Sale of Personal Information

Exercising Your California Rights

To exercise your California privacy rights:

• • Email: info@fantasystockleague.net with "California Privacy Request" in the subject line
• • Verification: We will verify your identity before processing your request
• • Response Time: We will respond within 45 days of receiving a verifiable request
• • Authorized Agent: You may designate an authorized agent to make requests on your behalf

Note: You may exercise these rights up to twice in a 12-month period. We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded.

Children's Privacy

Fantasy Stock League is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Cookies and Tracking

What Are Cookies?

Cookies are small text files placed on your device that help websites function properly and provide information to website owners.

Cookies We Use

Managing Cookies

You can control cookies through:

• • Cookie Settings: Click the cookie icon in the bottom corner to manage preferences
• • Browser Settings: Configure your browser to block or delete cookies

Note: Blocking essential cookies will prevent you from logging in and using core features of the website.

Do Not Track

We respect Do Not Track (DNT) browser signals. Since we don't track users for advertising or analytics purposes, enabling DNT in your browser doesn't change our behavior - we already don't track you.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.