Back
Legal

Privacy
Policy

Effective date: June 11, 2026  ·  Version 1.0

01 Overview

Ultimate Fantasy Sports League ("UFSL," "we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, when we share it, and what choices you have.

This policy applies to all users of the UFSL platform at ultimatefantasysports.net and any associated services. By creating an account or using the platform, you agree to the collection and use of information described in this policy.

We do not sell your personal information. We collect only what we need to operate the platform.

02 Information We Collect

We collect information in the following categories:

Information you provide directly:

  • Account data — your first name, last name, username, and email address when you register.
  • Authentication data — your password (stored as a one-way hash; we never store your password in plain text) or OAuth tokens if you sign in via Google.
  • League and roster data — leagues you create or join, draft picks you make, trades you propose or accept, and waiver claims you submit.
  • Communications — any messages you send to other managers within the platform, or messages you send to our support team.

Information collected automatically:

  • Log data — IP address, browser type, operating system, referring URLs, pages visited, and timestamps of activity on the platform.
  • Device data — device type, screen resolution, and browser version to help us render the platform correctly.
  • Usage data — features you interact with, draft actions you take, and time spent on different sections of the platform.
  • Cookies and similar technologies — see the Cookies section below.

Information from third parties:

  • OAuth providers — if you choose to sign in with Google, we receive your name and email address from that provider. We do not receive your Google password.
  • Sports data providers — we receive real-world sports results, standings, and event data from third-party data APIs to power the scoring engine. This data is about athletes and teams, not about you personally.

03 How We Use Your Information

We use the information we collect to:

  • Operate the platform — create and manage your account, run draft rooms, process trades and waiver claims, calculate scores, and display standings.
  • Communicate with you — send transactional emails such as account confirmation, password resets, draft reminders, and waiver processing notifications.
  • Improve the platform — analyse usage patterns to identify bugs, performance issues, and features that need improvement.
  • Enforce our rules — detect and investigate violations of our Terms of Service, including collusion between managers.
  • Legal compliance — meet obligations under applicable law, respond to lawful requests from authorities, and protect our legal rights.

We do not use your information for advertising, and we do not build advertising profiles based on your activity.

04 How We Share Your Information

We do not sell, rent, or trade your personal information. We share your information only in the following limited circumstances:

  • With other managers in your league — your username, team name, roster, and point totals are visible to other managers in leagues you join. This is necessary for the platform to function.
  • With service providers — we use third-party services to host the platform (Vercel), store data (PostgreSQL via Supabase or Railway), and send emails. These providers access your data only to perform services on our behalf and are contractually prohibited from using it for their own purposes.
  • For legal reasons — we may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights or safety of UFSL, our users, or the public.
  • In a business transfer — if UFSL is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before your information is subject to a materially different privacy policy.

We require all third parties who access personal data on our behalf to maintain appropriate security measures and to use the data only as instructed.

05 Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the platform. Specifically:

  • Account data — retained for the life of your account plus up to 12 months after closure to allow for dispute resolution.
  • League and scoring data — historical league results and point ledgers are retained indefinitely to support season history and records.
  • Log data — retained for up to 90 days for security and debugging purposes.
  • Deleted accounts — upon account deletion, personally identifiable information is removed within 30 days. Aggregate or anonymised data derived from your activity may be retained.

You may request deletion of your account and associated personal data at any time by contacting us at the address below.

06 Cookies and Tracking

We use cookies and similar local storage mechanisms to operate the platform. Specifically:

  • Session cookies — used to keep you logged in across pages during an active session. These expire when you close your browser.
  • Preference storage — we store your light/dark mode preference in your browser's localStorage so the platform remembers your choice between visits. This data never leaves your device.
  • Authentication tokens — used to securely identify your account on return visits. Stored as secure, HTTP-only cookies.

We do not use advertising cookies, tracking pixels, or third-party analytics services that profile you across websites. We do not use Google Analytics or similar third-party analytics tools.

You can disable cookies in your browser settings, but this will prevent you from staying logged in to the platform.

07 Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. These include:

  • Passwords stored using one-way cryptographic hashing — we cannot read your password.
  • All data transmitted between your browser and our servers is encrypted via HTTPS/TLS.
  • Database access is restricted to authorised application services only.
  • Regular review of access controls and security configurations.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you suspect your account has been compromised, please contact us immediately.

08 Children's Privacy

UFSL is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a minor, we will delete it promptly.

If you believe a minor has created an account on our platform, please contact us at the address below and we will investigate and take appropriate action.

09 Your Rights

Depending on where you live, you may have certain rights regarding your personal information. These may include:

  • Access — the right to request a copy of the personal information we hold about you.
  • Correction — the right to request that we correct inaccurate or incomplete information.
  • Deletion — the right to request that we delete your personal information, subject to certain legal exceptions.
  • Portability — the right to receive your personal information in a structured, machine-readable format.
  • Objection — the right to object to certain processing of your personal information.
  • Withdrawal of consent — where we process your data based on consent, you may withdraw that consent at any time.

To exercise any of these rights, contact us at privacy@ultimatefantasysports.net. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

If you are located in the European Economic Area, United Kingdom, or California, additional rights and protections may apply to you under GDPR, UK GDPR, or the California Consumer Privacy Act (CCPA) respectively.

10 Third-Party Services

The platform relies on the following categories of third-party services. Each has its own privacy policy governing how they handle data:

  • Hosting — Vercel: serves the platform and handles web traffic. May log IP addresses and request metadata.
  • Database — Supabase or Railway: stores your account, league, roster, and scoring data. Data is encrypted at rest.
  • Authentication — Supabase Auth or Clerk (to be confirmed): handles login sessions and OAuth flows.
  • Sports data — TBD provider (SportsRadar or equivalent): provides real-world sports results that power our scoring engine. This provider receives no personal data about you.
  • OAuth — Google: if you choose to sign in with Google, your authentication is handled by Google's identity platform. We receive only your name and email address.

We are not responsible for the privacy practices of these third parties. We encourage you to review their policies independently.

11 International Users

UFSL is operated from the United States. If you access the platform from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.

By using the platform, you consent to the transfer of your information to the United States. Where required by law, we will implement appropriate safeguards for such transfers, such as standard contractual clauses approved by relevant authorities.

12 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and notify registered users by email or in-platform notice where required by law.

Your continued use of the platform after changes become effective constitutes your acceptance of the updated policy. If you do not agree with any changes, please stop using the platform and close your account.

13 Contact

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

This Privacy Policy was last updated on June 11, 2026.