Privacy Policy

What you give us at signup: your email address, a display name, and a password (stored only as a hash — we never see the password itself).

What you import: when you run the import bookmarklet, we receive your fantasy league's structure and contents — league name and settings, team names, rosters, draft picks, transactions, and schedule. This can include the team names and display names of other managers in your league, because they are part of the league you are importing.

What you create in the product: ranking profiles, player overrides, notes, saved preferences, and similar settings.

How you use the tools: we record which tools you open and the settings you land on — for example, that a rankings board was configured to punt free-throws in a 12-team league. This is tied to your account (or to a random first-party browser id before you have one), it never includes anything you type, and it exists so we can see which tools earn their keep and make them better. It is deleted with your account.

Technical data: ordinary server logs from our hosting provider, including IP address, browser user agent, and the pages requested. These are used to keep the service running and secure.

What we do not collect: we never receive or store your CBS, ESPN, or Yahoo credentials. The import runs in your own browser, in your own already-signed-in session. We also do not collect payment information, because AlgoBall is free.

• To run your account and keep you signed in.
• To produce the rankings, projections, and recommendations that are the product, priced against your league's own scoring settings.
• To send you service messages you can't opt out of while you have an account — email confirmation, password resets, and notices about material changes to these policies.
• To send you optional email you asked for, such as a daily brief, if and only if you opted in. Every such email carries a one-click unsubscribe, and unsubscribing from it never affects the service messages above.
• To understand which tools get used and how they are configured, so we improve the parts of the product that people actually rely on.
• To debug, secure, and improve the service.

We may look at aggregate, de-identified patterns across leagues to test whether a model change actually improves accuracy. Synthetic test leagues are excluded from anything user-facing, and this analysis is never used to profile you individually or shared as anything but aggregates.

• We do not sell your personal information.
• We do not share it with advertisers or data brokers.
• We do not run third-party advertising or cross-site tracking pixels.
• We do not email you marketing you did not ask for.

We use a small number of service providers, each of which processes data only to provide their service to us:

• Supabase — database, authentication, and file storage. Holds your account and your league data.
• Vercel — application hosting. Handles requests and produces server logs.
• BallDontLie — the source of NBA statistics, schedule, and player data. It supplies data to us; we do not send it anything about you.

If we add a provider that receives personal data — an email delivery service, for example — this list will be updated before it starts receiving anything.

We may also disclose data if legally required to, or where necessary to investigate a security incident or a violation of our Terms.

We use cookies that are strictly necessary to operate the site, and no others. There are no advertising or analytics cookies, which is why you have not been shown a consent banner.

• Session cookies — keep you signed in. Set by our authentication provider; removing them signs you out.
• Preference cookies — remember choices that change how the first render looks, such as your light/dark theme and your selected league.

Account and league data is kept while your account is open. Server logs are kept for a short operational window and then rotate out. When you delete your account, we delete your profile, your imported leagues, and the settings attached to them.

Two exceptions: we retain what we are legally required to retain, and we retain an unsubscribe record after you opt out of email — keeping a suppression record is what stops us from emailing you again by mistake.

• Access and correction — your profile and league data are visible in the product, and you can edit or re-import them.
• Deletion — you can request deletion of your account and its data at any time.
• Email — optional email is opt-in, and every message carries a one-click unsubscribe.

Depending on where you live, you may have additional rights — for example, to a portable copy of your data, or to object to certain processing. Write to us and we will honor them; we do not require you to prove a jurisdiction to be treated decently.

Importing a league necessarily brings in information about the other managers in it — their team names and display names as those platforms show them. We use this only to render your league accurately. If another manager in your league wants that information removed, they can contact us and we will remove it, which may leave parts of your league view incomplete.

AlgoBall is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has created an account, contact us and we will delete it.

If we change this policy in a way that materially affects how we handle your data, we will notify you by email or in the product before the change takes effect.

Privacy questions and deletion requests: privacy@algoball.com.