Privacy Policy

Effective date: May 2, 2026  ·  Last updated: June 7, 2026

1. Who We Are

Fantasy Footballdle ("the Game", "we", "us", "our") is operated as an independent project. If you have any questions about this policy, please contact us at the address in Section 8.

2. Data We Collect and Why

Email address. Collected when you choose to save your streak or sign in with Google. We use your email to:

• Sync your game streak and history across devices
• Send daily game reminder emails
• Verify vault unlock eligibility (paid or referral)

Providing your email is entirely optional. You can play the daily puzzle without giving us any personal information.

Gameplay data. Your guesses, streak count, wins, and game results are stored locally in your browser (localStorage) by default. If you provide your email, this data is also stored in our cloud database (Supabase) so it can be restored across devices.

Payment information. If you purchase the Vault unlock ($2.99), payment is processed entirely by Stripe. We do not receive or store your card number, CVV, or any raw payment credentials. We receive only a confirmation of payment and your email address from Stripe.

Referral codes. If you share or receive a referral link, we store the referral code and associated email addresses in our database to verify vault unlock eligibility. No additional personal data is collected through referrals.

Gameplay and interaction analytics (first-party). We collect anonymous behavioral data to understand how the Game is used and to improve the experience. This data is tied to a randomly generated session identifier stored in your browser's localStorage (see Section 7). The session identifier is not linked to your name, email address, IP address, or any other personal information — it is a random string that resets when you clear your browser data.

Specific events we record include: game sessions started (including a coarse device category — mobile or desktop — inferred from your browser's viewport width), game outcomes (won, lost, gave up), number of guesses taken, game mode selected (daily, free play, or archive), vault feature interactions (opening the vault modal, starting a payment flow, using a referral link, restoring access), result sharing, and email reminder opt-ins. This data is stored on our servers (via Supabase) and retained for 90 days, after which raw event records are permanently deleted. Aggregated daily summaries — containing only counts with no session identifiers — are retained indefinitely for historical trend analysis.

Page-view analytics (Simple Analytics). We also use Simple Analytics, a privacy-friendly third-party analytics service, to understand page-level traffic. Simple Analytics does not use cookies, does not fingerprint devices, and does not track individuals across sites. It collects anonymized data including page views, referring URL, browser type, device type, and country-level location. No personal information is collected or stored by Simple Analytics. Simple Analytics Privacy Policy

We use Google Ads to promote the Game. Google may use cookies to serve ads based on your prior visits to fantasy-footballdle.com or other websites. You can opt out of personalized advertising at Google's Ads Settings. We do not sell your browsing data or behavioral data to any third party.

Children under 13. We do not knowingly collect personal information from children under the age of 13. If we become aware that a user under 13 has provided personal information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at the address in Section 8.

3. Third-Party Services

We use the following third-party services, each of which has its own privacy policy:

• Google Ads — we use Google Ads to run advertising campaigns. Google may set advertising cookies to measure ad performance and serve relevant ads based on prior visits to our site. You can opt out of personalized advertising at Google's Ads Settings. Google Privacy Policy
• Supabase — cloud database used to store email addresses, streak data, and referral records. Data is hosted in the United States. Supabase Privacy Policy
• Brevo (formerly Sendinblue) — email delivery service used to send daily reminder emails. Your email address is added to Brevo's mailing list when you sign in with Google, submit your email to save your streak, or click the reminder opt-in. Every reminder email includes an unsubscribe link. Brevo Privacy Policy
• Google Sign-In — used as an optional authentication method. If you sign in with Google, we receive only your email address and public profile name. We do not access your Google contacts, Drive, Gmail, or any other Google service. We do not sell or transfer Google user data to third parties. Google Privacy Policy
• Stripe — payment processor for the $2.99 vault unlock. All card data is handled by Stripe and is never transmitted to our servers. Stripe Privacy Policy
• Simple Analytics — privacy-friendly analytics service that collects anonymized page-view data (page views, browser type, country-level location). No cookies, no fingerprinting, no personal information collected. Simple Analytics Privacy Policy
• First-party analytics — we operate our own behavioral analytics system (described in Section 2) that stores anonymous gameplay event data in Supabase. No personal information is collected. Data is retained for 90 days before raw records are deleted.

4. Data Retention

We retain your data for as long as it is necessary to provide the service:

• Streak and game data is retained indefinitely so your history is preserved across devices. You can request deletion at any time.
• Reminder email subscriptions are retained until you unsubscribe (every reminder email includes an unsubscribe link) or request deletion.
• Payment records are retained as required by applicable financial regulations (typically 7 years).
• Anonymous gameplay event data is retained for 90 days, after which raw records are permanently deleted. Aggregated daily summaries (containing only counts, no individual identifiers) are retained indefinitely.

5. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), Supabase's row-level security, and Stripe's PCI-compliant payment infrastructure. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights (CCPA – California Residents)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used or shared.
• Delete personal information we have collected from you (with limited exceptions).
• Correct inaccurate personal information we hold about you.
• Opt out of the sale of your personal information. We do not sell personal information.
• Non-discrimination for exercising your privacy rights.

To submit a request, please contact us at the address in Section 8. We will respond to verified requests within 45 days.

7. Cookies and Local Storage

We do not set first-party tracking or advertising cookies. Google Ads may set third-party advertising cookies to measure ad performance and serve relevant ads. You can opt out at Google's Ads Settings. We use your browser's localStorage to save two categories of data:

• Game state — your guesses, streak, and vault unlock status. This stays on your device and is not sent to our servers unless you choose to link your email address.
• Anonymous session identifier — a randomly generated string used solely to group your gameplay events in our analytics system. It is not linked to your identity, not shared with third parties, and resets whenever you clear your browser's site data.

You can clear all locally stored data at any time by clearing your browser's site data for fantasy-footballdle.com.

8. Contact Us

For any privacy-related questions, requests, or complaints, please contact us at:

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the Game after changes are posted constitutes your acceptance of the revised policy.