Privacy Policy

The short version

League Advantage helps fantasy football commissioners run their leagues. We collect only what we need to make the product work: your email, your league memberships, and the activity inside those leagues (rosters, trades, waivers, messages). We don't sell your data, we don't run ads, and we don't share your information with third parties for marketing.

Who we are

League Advantage is operated by Chris Alves, an individual developer. Contact: hello@leagueadvantage.com.

Information we collect

Account information

• Email address — used to sign you in (magic-link or Apple Sign-In) and to send transactional emails (league invites, weekly digests, trade notifications).
• Authentication identifiers — Supabase user ID, Apple user identifier (if you sign in with Apple). We do not receive your Apple password.
• Push notification token — if you opt in on the mobile app, we store an Expo push token so we can deliver notifications to your device. You can revoke this at any time in the app's Settings or your device's notification settings.

League activity

• League data you create or import — team names, rosters, trades, waiver claims, FAB bids, draft picks, scoring rules, message board posts, polls, and commissioner adjustments.
• Player data — public NFL player statistics sourced from third-party providers (ESPN, nflverse, NFL Next Gen Stats). This is league-scope only; it does not identify you personally.

Automatically collected information

• Basic request logs — IP address, timestamps, requested URLs. Used for security, abuse prevention, and debugging. Retained for 30 days.
• Crash and error reports — anonymous diagnostic data from the mobile app when something breaks, used only to fix bugs.

We do not collect: precise location, contacts, photos, microphone, camera, advertising identifiers, or any data we don't have a clear product reason for.

How we use your information

• To operate the product (sign you in, show your leagues, deliver notifications)
• To send you transactional emails you've opted into
• To improve reliability and fix bugs
• To prevent abuse and unauthorized access

We do not use your data to train AI models or sell it to anyone.

How we share your information

We share data only with the service providers that make the product run, and only the minimum needed for them to do their job:

• Supabase — database and authentication hosting
• Vercel — web hosting
• Resend — transactional email delivery
• Apple Push Notification service / Expo — push notification delivery to iOS devices
• Hostinger — backend data sync jobs (NFL stats, news feeds)

We may also share information if required by law (subpoena, court order) or to protect the safety of users.

We do not sell your personal information to data brokers, advertisers, or anyone else.

Within your league

Your league members can see your team name, roster, trades, waiver claims, and messages you post to the league board — the same visibility you'd have in any fantasy football platform. Your email address is visible to commissioners of leagues you join (for invite and contact purposes) but not to other members by default.

Data retention

• Account data — kept while your account is active. Deleted within 30 days of you closing your account (see "Your rights" below).
• League data — retained as long as the league exists. Historical seasons are kept indefinitely as part of the league's archive (this is a feature, not surveillance — commissioners use historical data for keepers, records, and award tracking).
• Request logs — 30 days.
• Backups — encrypted backups may persist for up to 30 days after deletion before being overwritten.

Your rights

You can, at any time:

• Access your data — every page in the app shows you what we have. Email us if you want a structured export.
• Correct your data — edit your profile and league settings in the app.
• Delete your account — go to Account → Delete account on web, or Settings → Delete account on mobile. This is irreversible. If you're a commissioner, you'll need to transfer commissioner rights first or your league will be archived.
• Withdraw consent — opt out of any email or push notification category in the app's preferences pages.
• Lodge a complaint — if you're in the EU/UK, with your local data protection authority. If you're in California, you have the rights described under CCPA and can contact us to exercise them.

Security

We use industry-standard practices: TLS encryption in transit, encrypted data at rest, role-based access controls in our database (Supabase Row Level Security), and minimal privileged access. No system is perfectly secure — if you discover a security issue, please report it to hello@leagueadvantage.com and we'll respond promptly.

Cookies and tracking

We use a single authentication cookie to keep you signed in. We do not use third-party analytics, advertising cookies, or cross-site tracking pixels.

Children

League Advantage is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with information, contact us and we'll delete it.

International users

Our servers are located in the United States. If you use League Advantage from outside the US, you consent to your data being processed in the US.

Changes to this policy

We may update this policy as the product evolves. We'll update the "Last updated" date at the top and, for material changes, send you an email notice. Continuing to use the product after a change means you accept the updated policy.

Contact

Questions, requests, or complaints: hello@leagueadvantage.com.