1. Introduction
Welcome to The FF Dynasty ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website theffdynasty.com (the "Site") and use our related products, mobile-optimized experiences, APIs, and services (collectively, the "Services").
Please read this Privacy Policy carefully. By using the Services, you consent to the practices described in this policy. If you do not agree, please do not use the Services.
2. Information We Collect
Information You Provide
We collect information you voluntarily provide when you:
- Create an account: email address, password, username, display name, and (optionally) a profile picture you upload to our file storage
- Sign in with a third party: Google OAuth profile data such as name, email, and avatar
- Use ranking and swiping features: player comparisons, personal rankings, tier placements, hidden players, and follow relationships
- Connect a Sleeper account: your Sleeper username, Sleeper user ID, league IDs, team data, co-owner status, draft picks, trades, and roster history
- Participate in groups, expert panels, leaderboards, and voting: group membership, submitted rankings, player designations (badges and value tiers), comments, votes on trades, and daily challenge entries
- Subscribe or purchase: billing details processed by our payment processor (Stripe), including name, email, country, and the last four digits and brand of your card; promotional/coupon codes you redeem; and one-time purchases such as paid Roster Reviews and Expert Questions
- Link your Discord account: Discord user ID, username, avatar, and server membership/role status, used to automatically grant and sync your Premium/VIP role in our Discord server
- Purchase a Roster Review: a frozen snapshot of your selected Sleeper league and roster (players, picks, settings, and league context) plus any responses or notes tied to that review, retained for the lifetime of the purchased review
- Contact us or request support: contact form submissions, support tickets, and bug/issue reports
- Use AI features: prompts, transcripts, and content you submit to our AI-assisted blog and analysis tools
Information Collected Automatically
When you use the Services, we automatically collect:
- Device and browser information (type, version, operating system, screen size)
- IP address and approximate location derived from it
- Pages visited, features used, time spent, referrers, and click/scroll behavior (captured via our in-app page-view analytics)
- Performance, error, and diagnostic logs (including console and network errors we capture for debugging)
- Cookies, local storage, session storage, and similar technologies
Information from Third Parties
- Sleeper: public league, roster, draft, trade, and user data via the Sleeper API when you link a league or look one up
- NFL/college data sources: player metadata, headshots, statistics, and depth chart information from sources such as ESPN and other public providers
- Authentication providers: Google account info if you choose to sign in with Google
- Discord: OAuth profile (user ID, username, avatar) and guild role data returned when you link your Discord account or when we sync your Premium/VIP role
- Stripe: subscription status, billing events, refunds, and webhook updates
- YouTube Data API (Google): public video, channel, chapter, transcript, and analytics metadata used to power our show-research, blog, and content tools
- Spotify: public podcast episode and show metadata used for embeds and show-research tools
- Analytics and ad partners: aggregated audience signals
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, secure, and improve the Services
- Create and manage your account, profile, and subscription
- Generate crowdsourced and personal dynasty rankings, tiered rankings, ADP, leaderboards, and trade valuations
- Synchronize Sleeper league, roster, draft pick, co-owner, and trade data, and keep memberships up to date as ownership changes
- Power features such as the Trade Calculator, Trade Finder, Offer Builder, Portfolio, Daily Comparison, Daily Ranker, Tap to Rank, Compare Players, Player Projector, Groups, Expert Panel dashboards, and Public API
- Generate blog posts, summaries, and other AI-assisted content using the Lovable AI Gateway and supported model providers
- Link your Discord account to our Discord server and automatically grant, sync, or revoke your Premium/VIP role based on your current membership status
- Generate and store paid Roster Reviews from a frozen snapshot of your league and roster at the time of purchase
- Send transactional emails (account, billing, password reset, support replies, league updates) and, where permitted, product announcements
- Detect, investigate, and prevent fraud, abuse, ranking manipulation, and security incidents
- Comply with legal obligations and enforce our Terms of Service
4. Legal Bases for Processing (EEA/UK Users)
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, we rely on the following legal bases:
- Contract: to provide the Services you request
- Legitimate interests: to improve, secure, and market the Services
- Consent: for optional cookies, marketing communications, and certain integrations
- Legal obligation: to comply with applicable laws
5. Cookies and Tracking Technologies
We use cookies, local storage, and similar technologies to operate the Site, remember your preferences, keep you signed in, and measure usage.
Categories we use:
- Essential: authentication, session security, CSRF protection, and core functionality
- Functional: preferences such as preferred scoring format, theme, and onboarding state
- Analytics: usage measurement and product analytics
- Advertising: personalized and non-personalized ads served by our ad partners
You can control cookies through your browser settings; disabling some cookies may affect functionality.
6. Third-Party Advertising
We use Google AdSense and may use other ad partners to display advertisements. These partners may use cookies and device identifiers to serve ads based on your visits to our Site and other sites.
You may opt out of personalized advertising by visiting Google Ads Settings or aboutads.info.
7. Data Sharing and Disclosure
We share information only as described below:
- Service providers (processors): our managed backend (Lovable Cloud, powered by Supabase), Stripe (payments), Resend or similar transactional email providers, Lovable AI Gateway and underlying model providers (OpenAI, Google), analytics, and hosting/CDN providers
- Third-party platforms you connect: Sleeper (read-only league lookups), Discord (two-way OAuth and role sync when you link your Discord account), and content embeds such as Spotify and YouTube
- Other users: public profile elements (username, avatar, public rankings, leaderboard standings, group submissions, player designations, votes, shared comparisons, and shared rankings) are visible to other users or anyone with a share link
- Public API consumers: data we expose through our rate-limited public API as documented in our API Docs
- Legal: when required by law, subpoena, or to protect rights, property, or safety
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets
- Aggregated/de-identified data: for analytics, research, and editorial content
We do not sell your personal information for money.
8. AI-Assisted Features
Some features use large language models routed through the Lovable AI Gateway (currently including Google Gemini and OpenAI GPT model families). Inputs you provide to these features (such as prompts, transcripts, or selected content) may be transmitted to these providers to generate responses. We do not knowingly send sensitive personal data to these providers, and we do not use their outputs as a sole basis for decisions with legal or similarly significant effects on you.
9. Data Security
We implement reasonable technical and organizational measures to protect your information, including encryption in transit, hashed passwords, role-based access controls, Row-Level Security on our database, and server-side validation of privileged actions. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Aggregated and crowdsourced ranking data (e.g., swipe comparisons) is retained indefinitely to maintain the integrity of community rankings, but is de-identified from your account upon deletion of your account where feasible.
Paid Roster Reviews are retained indefinitely as a permanent record of the product you purchased, including the frozen roster and league snapshot captured at the time of the review. If you unlink your Discord account, we remove the stored Discord identifiers associated with your profile and revoke any membership-based roles in our Discord server.
11. Your Rights and Choices
Depending on your jurisdiction (including the EEA/UK under GDPR and California under the CCPA/CPRA), you may have the right to:
- Access, correct, update, or delete your personal information
- Port your data to another service
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Opt out of marketing communications
- Lodge a complaint with a supervisory authority
- Not be discriminated against for exercising your rights
You can manage most account data from your Profile and Settings pages, or request deletion of your account. To make a privacy request, use the Contact Form on the About page.
12. International Data Transfers
Our Services are operated from the United States. If you access the Services from outside the U.S., your information may be transferred to, stored, and processed in the U.S. and other countries that may have different data protection laws than your jurisdiction. We rely on appropriate safeguards (such as standard contractual clauses) where required.
13. Children's Privacy
Our Services are not directed to, and we do not knowingly collect personal information from, children under 13 (or under 16 in jurisdictions where that is the relevant age). If you believe a child has provided us personal information, please contact us and we will take steps to delete it.
14. Third-Party Links and Integrations
The Services may contain links to third-party sites and embedded content (such as Sleeper, Spotify, YouTube, Discord, and our advertising partners). We are not responsible for the privacy practices or content of those third parties.
15. Do Not Track
Our Site does not currently respond to Do Not Track ("DNT") browser signals, as no consistent industry standard exists.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Services after changes become effective constitutes acceptance of the updated policy.
17. Contact Us
If you have questions about this Privacy Policy or our data practices, please use our Contact Form on the About page.