Privacy Policy

Last updated: April 21, 2026

This policy explains what we collect, how we use it, and the choices you have. We aim to collect the minimum needed to operate the product.

What we collect

  • Account data: email, username, display name.
  • If you sign in with Google: your email and basic profile info as provided by Google.
  • Gameplay data: leagues you join, lineups you set, messages you send in-league.
  • On-chain data: your Starknet wallet address and transactions related to our contracts (public by nature on-chain).
  • Usage data: pages visited, events (e.g. “joined league”), device and browser metadata.

How we use it

  • To operate the service (create leagues, score lineups, display standings).
  • To contact you about your account, your leagues, and product updates you opted in to.
  • To improve the product (analytics on aggregate usage patterns).
  • To prevent fraud and abuse.

We do not sell your personal data. We do not share your email with third-party advertisers.

Third-party services

We use a small set of service providers to run the platform:

  • Supabase: account storage and authentication.
  • Google: if you choose Google sign-in.
  • Starknet: public blockchain where contest escrow runs.
  • Google Analytics / Google Tag Manager: aggregate product analytics.
  • PostHog: product analytics (events, funnels).
  • API-Football: live sports data used for scoring.
  • Railway: hosting.

Cookies and local storage

We use cookies and browser local storage to keep you signed in, remember preferences (theme, onboarding progress), and measure product usage. You can clear them from your browser settings at any time; some features may stop working if you do.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete your account and associated data by emailing us. On-chain transactions cannot be deleted because they are public and immutable by design.

Data retention

We keep account data for as long as your account is active. If you delete your account, we remove personal data within 30 days except where we are required to retain it for legal or anti-fraud reasons.

Children

Gaffer is not directed at children under 18. If you believe a child has created an account, contact us and we will remove it.

Changes

We may update this policy. Material changes will be communicated by email and surfaced in-app before they take effect.

Contact

Privacy questions: hello@fantasy.sports.