1. Overview

This Privacy Policy explains what information Superpower Fantasy Football ("SFFL", "we", "us") collects when you use superpowerfantasyfootball.com, how we use it, and the choices you have. By using the service you agree to this policy and to our Terms of Service.

2. Information We Collect

• Account information — your email address, an optional first and last name, and a password. Passwords are stored only as cryptographic hashes; we never store or see your plain-text password.
• Gameplay data — your leagues, teams, rosters, lineups, superpower declarations, trades, waiver claims, messages, and settings. League activity (team names, matchup results, transactions) is visible to other members of your leagues.
• Usage and log data — IP address, browser type, pages visited, and similar technical data collected automatically when you use the site, including via Google Analytics (see Section 4).
• Preferences — theme, accessibility, notification, and privacy settings you choose, including your marketing-email opt-out.

3. How We Use Information

• To operate the game: run drafts, score matchups, resolve superpowers, and sync NFL data;
• To send transactional email (account confirmation, password resets, league notifications);
• To send marketing email, unless you have opted out (see Section 5);
• To secure the service, prevent abuse, and enforce our Terms;
• To understand usage and improve the product (analytics);
• To display advertising that funds the free service (see Section 4).

We do not sell your personal information.

4. Cookies, Advertising, and Analytics

We use cookies and similar technologies to keep you signed in and to remember your preferences. In addition:

• Google AdSense. We display ads served by Google. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
• Opting out of personalized ads. You may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalized advertising at www.aboutads.info/choices.
• Google Analytics. We use Google Analytics to understand how the site is used. Google Analytics uses cookies to collect usage data. You can opt out with the Google Analytics opt-out browser add-on.

For more on how Google uses data from sites that use its services, see How Google uses information from sites or apps that use our services. Most browsers also let you block or delete cookies, though blocking essential cookies may prevent you from signing in.

5. Email Communications

We send email through SendGrid (Twilio Inc.), which processes your email address on our behalf to deliver messages.

• Transactional email — account confirmation, password resets, and league or game notifications. These are part of operating the service and cannot be fully disabled while you hold an account.
• Marketing email — news and promotional messages. You can opt out at any time in Settings > Privacy or via the unsubscribe link included in every marketing email.

6. How We Share Information

We share personal information only with:

• Service providers that process it on our behalf — email delivery (SendGrid), advertising and analytics (Google), and our hosting infrastructure;
• Other league members, who can see your team name, roster, transactions, and league messages as part of normal gameplay;
• Authorities, if required by law or to protect the rights, safety, or security of the service and its users.

7. Data Retention and Deletion

We keep account and gameplay data while your account is active. You can delete your account yourself at any time from Settings > Account, confirming with your password. Before you can delete it, you will need to resolve anything that would leave a league mid-season: transfer or close leagues you own, leave teams in leagues that are still running, and settle pending trades.

What is deleted. Your email address, password, name, bio, profile picture, location, timezone, favourite team, notification preferences, saved settings, and sign-in sessions are erased. Sign-in is disabled permanently — the account cannot be recovered or reopened, so deletion is final.

What is kept. Completed leagues you took part in remain in other members' league history — team names, rosters, transactions, and results. That record is tied to your team name, not to you: once your account is deleted it holds nothing that identifies you. We keep it because erasing it would rewrite other people's seasons.

Questions or help with a deletion request: admin@superpowerfantasyfootball.com.

8. Security

We protect your data with industry-standard measures, including TLS encryption in transit, hashed passwords, and token-based authentication. No system is perfectly secure; please use a strong, unique password.

9. Children

The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.

10. Your Rights

You may access and update your account information in Settings, and delete your account from Settings > Account as described in Section 7. Depending on where you live, you may have additional rights, described below. To exercise any of them, contact us at admin@superpowerfantasyfootball.com. We will respond within the time your local law allows, and we will not discriminate against you for exercising a privacy right.

If you are in the European Economic Area or the United Kingdom (GDPR)

You have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to receive a copy in a portable format. Where we rely on consent — for marketing email and for advertising cookies — you may withdraw it at any time without affecting processing already carried out. Our lawful bases are: performance of a contract for running your account and leagues, consent for marketing and advertising cookies, and legitimate interests for keeping the service secure and working. You may also lodge a complaint with your national supervisory authority.

If you are a California resident (CCPA/CPRA)

You have the right to know what personal information we collect and how we use and share it, to request its deletion, to correct inaccurate information, and to opt out of any "sale" or "sharing" of personal information. We do not sell your personal information, and we do not share it for cross-context behavioural advertising in exchange for payment. Our advertising partners may nonetheless set cookies that some California regulations treat as "sharing" — Section 4 explains those cookies and how to control them.

Because the service is open to anyone aged 13 or over, note that we do not knowingly sell or share the personal information of users under 16.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be announced on the site or by email, and the "Last updated" date above will change.

12. Contact

Privacy questions or requests: admin@superpowerfantasyfootball.com.