Privacy Policy

Information we collect

• Account information. When you create an account, our authentication provider, Supabase, processes your email address and sign-in credentials. If you sign in with Google, we receive basic account information such as your Google account identifier, email address, name, and profile image, as provided by Google.
• League information. When you enter a Sleeper username, we retrieve public account and league information, including account identifiers, league settings, team names, rosters, and records. For signed-in users, we save connected leagues and selected teams. For guests, our server logs record the queried Sleeper username, timestamp, lookup outcome, number of leagues found, and request duration to help us understand usage and troubleshoot lookups. We do not ask for your Sleeper password.
• Rankings and preferences. We process rankings you upload or edit, ranking list names, selected ranking sources, and other settings you choose.
• Optional usage analytics. We use PostHog to understand visits, sign-in flows, league imports, trade searches, calculator use, and rankings saves. Events include browser-generated identifiers, your account identifier when signed in, timestamps, feature names, counts, durations, and broad error categories. We do not send your email, Sleeper username, league identifiers, rosters, ranking contents, or full trade results to PostHog. We also use Vercel Web Analytics for page views, visitor counts, referral sources, and broad browser and geographic information. We remove query strings and fragments from tracked page URLs and do not send account identifiers or product events to Vercel Analytics. The analytics preference below applies to both providers. We do not enable session recordings.
• Technical and support information. Requests to the service may include IP addresses, browser information, timestamps, and error details processed by our hosting and authentication providers. Our guest rate limiter stores a rotating keyed digest of the IP address, rather than the raw address. If you email support, we receive your email address and the information you send.

How we use information

We use this information to authenticate users, connect leagues, calculate trade ideas and team rankings, save custom rankings and preferences, respond to support requests, troubleshoot problems, measure feature usage and returning visits, improve the product, and protect the service against abuse.

Google sign-in is used for authentication and account management. We do not request access to your Gmail, Google Drive, Calendar, or contacts. We do not use Google account data for advertising or to train AI models. Trade recommendations are calculated by the app; your league information is not sent to an AI model to generate trades.

Browser storage

We use local and session storage to keep you signed in, remember your active league and ranking choices, return you to the right page after sign-in, and store guest league selections and search counts. You can clear this data through your browser settings; doing so may sign you out or reset preferences. Clearing browser storage does not delete information saved in your account. Optional analytics also use browser storage to remember an anonymous identifier and your analytics preference.

How information is shared

We use service providers to operate the app, including Supabase for authentication and database storage, Vercel for hosting and optional traffic analytics, PostHog for optional usage analytics, Google for Google sign-in, and Sleeper for public fantasy league data. These providers process information needed to deliver their services under their own terms and privacy policies. We do not sell your personal information or share Google account data with advertisers.

We may disclose information when required by law, to respond to lawful requests, or to protect users, the service, or our legal rights. If the service changes ownership, information may be transferred as part of that transaction, subject to applicable privacy obligations.

Storage, retention, and security

Account information, connected leagues, and saved rankings are retained while needed to provide your account and the service. Guest league data is temporarily cached on the server, and guest preferences are kept in your browser. The app does not save a history of trade searches in its database. PostHog stores limited usage events in a US-region project under its configured retention settings; these events do not contain full search results. Technical logs, backups, and support records may remain as needed for security, operational, or legal purposes.

We use access controls and encrypted connections to protect information. No method of storage or transmission is completely secure. Our providers may process information in countries other than your own.

Your choices and requests

You can edit or delete saved ranking lists in the app and clear guest data in your browser. To request access, correction, or deletion of your account and associated information, email support@fftradefinder.com from the address linked to your account. We may need to verify your identity before fulfilling a request. Some records may need to be retained to meet legal or security obligations. You can also revoke Google sign-in access in your Google account settings; revoking access does not itself delete your FF Trade Finder account.

Depending on where you live, you may have additional rights under applicable privacy law, including the right to complain to your local data protection authority.

Children’s privacy

FF Trade Finder is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided personal information, contact us so we can investigate and remove it.

Policy updates

We may update this policy as the service changes. We will post the updated policy here and revise the date above. For material changes, we will provide additional notice when required by applicable law.