Your information at Rivalry.

This policy describes how the Rivalry team handles information when you use our fantasy football beta, request support, or subscribe to emails. Contact us through Help & feedback with privacy questions or requests.

What we collect and why

Email and preferences: your submitted email, consent record, confirmation status, and unsubscribe preferences let us provide access and manage the updates you request.
League and analysis information: an import includes league and team names, player rosters, available players, scoring settings, schedules, and provider identifiers. We use these to calculate and reproduce results.
Usage information: first-party visit and signup measurements help us understand the beta. If you choose personalization, we record tool use and return visits to tailor follow-ups. We respect browser Do Not Track and Global Privacy Control signals.
Support messages: we store the email, issue category, and message you submit so the owners can investigate and respond.
Technical information: hosting and data providers process ordinary request information such as IP addresses. Rivalry uses a hashed IP-based hourly counter to limit abuse; operational measurements record broad route, status, and duration rather than your message or roster.

Cookies and browser access

An essential cookie remembers tool access for 30 days. A separate first-party cookie measures visits and signup steps for 30 days unless browser privacy signals disable it. Tool access belongs to this browser; entering an email is not a full account login. Saved analysis downloads require the browser session that created them.

Optional account sign-in

For Rivalry features that offer an account, you can choose an email sign-in link or Google. Google sign-in shares your Google account identifier, email address and verification status, and may include basic profile information such as your name and profile picture URL. Supabase processes and stores this identity information and sign-in session data for Rivalry. We use your verified identity to sign you in, manage your account, and connect your saved leagues and analyses to that account. Your Rivalry profile also stores the display name and time zone you save. Supabase uses Brevo to deliver requested email sign-in links. Signing in is separate from choosing marketing updates.

These account features use essential sign-in cookies that are separate from the browser-only tool-access cookie described above. Supabase stores the account and ownership records used to control access to your saved work. Use Help & feedback for questions about your account information or to request access, correction or deletion; we verify ownership before acting on a request.

Email and activity choices

Email updates and activity personalization are optional and start unselected. Onboarding asks only for tool access; email updates can be requested separately after using the tools. Brevo sends confirmation emails and, after confirmation, the updates you requested. Every marketing email provides an unsubscribe option. Unsubscribing keeps your free tool access. Personalizing emails from tool activity is optional and starts only after your email address is verified in that browser. You can manage that choice under activity preferences.

When personalized activity is enabled, Brevo receives your email, broad tool-use categories, and recognized email campaign tags. We don’t send it league IDs, rosters, player choices, or full browsing URLs. Joining the league-hosting waitlist requires its own explicit request.

Who processes information

Rivalry uses OpenAI Sites and Cloudflare for hosting and storage, Brevo for email and related activity, and ESPN or Sleeper for imported league information and football data. Player images load from the corresponding provider’s image service. Those providers receive normal web requests when their services are used. We don’t sell your personal information.

How long we keep it

Browser access expires after 30 days and interactive league imports after six hours. Activity and conversion records are removed after 90 days during maintenance. Closed support requests are removed after 90 days. Signup consent and suppression records remain while needed to manage your subscription and honor opt-outs.

Private league snapshots and analysis inputs remain available to the team for reproducibility and model evaluation until removed through a verified request. Recovery copies of member and analysis metadata rotate on a seven-day basis when maintenance runs; archived analysis objects are stored separately. Brevo and infrastructure providers also apply their own retention policies.

Your requests

Use Help & feedback to request access, correction, or deletion. We verify ownership before taking action. A deletion request covers Rivalry’s records and a request to remove the matching Brevo contact; we may retain minimal records necessary to honor an opt-out or meet applicable obligations. Rights depend on where you live.

Children and changes

The beta is intended for adults. If you believe a child has submitted personal information, contact us so we can investigate and remove it as appropriate. We’ll update this page when our practices change and seek a new choice when required for a new use of your information.