Privacy Policy

This Privacy Policy describes how Seasonal Fantasy ("we", "us", or "our") collects, uses, and shares information when you use our website and fantasy sports services.

1. Information We Collect

We collect the following personal information when you create an account or use our services:

• Name (first and last) — used to identify you in leagues and standings
• Email address — used for account authentication, transactional emails (league invites, magic login links, account notifications), and account recovery
• Avatar color — a display preference stored with your account
• IP address — recorded in server logs as part of standard web server operation

If you choose to sign in using a third-party provider (such as Google or Discord), we receive the following information from that provider:

• Name — as provided by the third-party provider
• Email address — used to create or link your Seasonal Fantasy account
• Provider user ID — a unique identifier assigned by the provider, used to recognize your account on future logins

We do not receive your password from third-party providers. We do not store OAuth access tokens — they are discarded immediately after your account is created or linked. A verified email address is required for all third-party sign-in methods.

We do not collect payment information, phone numbers, physical addresses, or any sensitive personal data.

2. How We Use Your Information

We use the information we collect solely to operate and improve the Seasonal Fantasy platform:

• Authenticating your account and managing your session, including via third-party sign-in providers
• Sending transactional emails (league invitations, magic login links, account notifications, deletion confirmations)
• Displaying your name in league rosters, standings, and pick breakdowns
• Maintaining league membership records

We do not sell your personal information to third parties. We do not use your information for advertising profiling.

3. Third-Party Processors

We share your data with a limited number of third-party service providers to operate the platform:

• Resend — transactional email delivery. Your email address is transmitted to Resend solely to deliver emails you have requested (e.g., invitations, magic login links, account deletion confirmations). Resend Privacy Policy
• Heroku (Salesforce) — cloud application hosting. Application data, including your account information, is stored on servers operated by Heroku. Salesforce Privacy Policy
• Google — if you choose to sign in with Google, your authentication is handled by Google's OAuth 2.0 service. We receive your name, email address, and a provider-issued user ID. Google's handling of your data during sign-in is governed by their privacy policy. Google Privacy Policy
• Discord — if you choose to sign in with Discord, your authentication is handled by Discord's OAuth 2.0 service. We receive your username, email address (if verified on your Discord account), and a provider-issued user ID. Discord Privacy Policy
• Google Fonts — web font delivery via CDN. Your browser may send a request to Google's servers to load fonts used on the site. No personal information is sent by our application. Google Privacy Policy
• jsDelivr (Bootstrap CDN) — CSS and JavaScript delivery. Your browser may request assets from jsDelivr's CDN. No personal information is sent by our application. jsDelivr Privacy Policy

We do not sell your data to any of these providers or any other third party. Each provider receives only the minimum information necessary to perform their service.

4. Cookies and Session Data

We use a single session cookie to keep you logged in. This cookie is required for the application to function and is not optional. It does not track you across other websites and is not used for advertising purposes. We do not use third-party tracking cookies or analytics cookies.

5. Data Retention

We retain your account information for as long as your account is active. If you delete your account, your personal information (name, email address, password, avatar color, and any linked third-party provider connections) is permanently removed immediately upon confirmation. Historical league participation data (scores, picks) may be retained in anonymized form to preserve the integrity of league records for other participants. Anonymized data cannot be linked back to you.

6. Your Rights and Account Deletion

You may delete your account at any time directly from your account settings page. To confirm your identity, you will be asked to enter your email address and then click a confirmation link sent to that address. Upon confirmation, your name, email address, password, avatar color, and all linked third-party provider connections are permanently and immediately removed. A final confirmation email is sent to your address as a record of the deletion. Historical league participation data (scores, picks) may be retained in anonymized form to preserve the integrity of league records for other participants.

If you signed in exclusively via a third-party provider (Google or Discord) and wish to also revoke that provider's access to your account data, you should do so directly in your Google or Discord account settings after deleting your Seasonal Fantasy account.

7. Children's Privacy (COPPA)

Seasonal Fantasy is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us immediately and we will delete the account and all associated information.

8. NY SHIELD Act Compliance

We are committed to implementing reasonable safeguards to protect the private information of New York residents as required by the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act. Our security measures include:

• Passwords are stored as cryptographic hashes (never in plain text)
• All connections to the site are encrypted via HTTPS
• Access to user data is limited to authorized personnel only
• We use reputable third-party processors (listed above) with their own security programs

In the event of a data breach affecting New York residents, we will provide notification as required by applicable law.

9. CAN-SPAM Compliance

All emails sent by Seasonal Fantasy are transactional in nature (account authentication, league invitations, and notifications you have requested). We do not send unsolicited marketing emails. Each email we send identifies Seasonal Fantasy as the sender. To stop receiving emails from us, you may delete your account or contact us at the address below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post any changes on this page with an updated "Last updated" date. Continued use of the service after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Seasonal Fantasy
Email: info@seasonalfantasy.com