Privacy Policy

UFSL (Ultimate Fantasy Sports League), accessible at ufsl.net, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share your information when you use our platform.

Questions? Contact us at support@ufsl.net.

1. Information We Collect

We collect information you provide directly and information generated by your use of UFSL:

• Name & Email Address — provided at registration, used to identify your account and send important platform communications.
• Phone Number — optional, collected when you enable SMS notifications. Used only to send bracket alerts and reminders.
• Bracket Picks & Pool Activity — your picks, scores, standings, and pool participation history.
• Payment Information — when you pay pool entry fees. Payment card details are processed and stored by Stripe; UFSL does not store raw card numbers.
• Device & Usage Data — IP address, browser type, pages visited, and feature usage, collected automatically via standard web server logs and session cookies.

2. How We Use Your Information

• Operate and improve the UFSL platform — pools, leaderboards, scoring, and notifications.
• Send transactional emails (account verification, payment receipts, bracket confirmations).
• Send SMS alerts for picks deadlines, round results, and standings — only if you opt in.
• Process entry-fee payments for bracket pools.
• Detect and prevent fraud, abuse, and violations of our Terms of Service.
• Comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We share data only with the following trusted service providers who process it on our behalf:

• Stripe — payment processing. Stripe's privacy policy: stripe.com/privacy
• Twilio — SMS delivery. Phone numbers are transmitted to Twilio solely to deliver opt-in text messages. Twilio's privacy policy: twilio.com/legal/privacy
• Resend — transactional email delivery.
• Supabase — database and authentication infrastructure. Your data is stored in Supabase's managed PostgreSQL hosted on AWS.
• Vercel — hosting and edge delivery.

We may also disclose information if required by law or to protect the rights, property, or safety of UFSL, our users, or the public.

4. Cookies & Tracking

UFSL uses basic session cookies to keep you logged in and maintain your preferences. We do not use third-party advertising cookies or tracking pixels. You can disable cookies in your browser settings, but doing so may break certain features.

5. Data Retention

We retain your account data as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where required by law to retain records (e.g., payment transaction records, which are retained for 7 years).

6. Your Rights

Depending on your location, you may have the following rights:

• Access & Portability — request a copy of the data we hold about you.
• Correction — request we correct inaccurate data.
• Deletion — delete your account from Settings → Account → Delete Account, or email us.
• Opt Out of SMS — reply STOP to any UFSL text, or disable SMS in /profile/notifications.

To exercise any of these rights, contact support@ufsl.net.

7. GDPR & CCPA

If you are located in the European Union or California, you have additional rights under GDPR and the California Consumer Privacy Act (CCPA) respectively, including the right to know what data we collect, the right to delete, and the right to opt out of the "sale" of your personal data (we do not sell data). Contact us to exercise these rights.

8. Children's Privacy

UFSL is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date and, where appropriate, via email.