Privacy Policy

1. Who We Are

fantasyhoopsedge.com is operated by Fantasy Hoops Edge, an independent sole trader based in the United Arab Emirates. You contract with Fantasy Hoops Edge.

We are the controller for the personal data we collect about users of our site and product.

For any privacy question, request, or complaint, contact fantasybballai@gmail.com.

2. What This Policy Covers

This policy applies to fantasyhoopsedge.com and the services operated directly by Fantasy Hoops Edge. It does not extend to third-party websites or services we link to or integrate with, including Fantrax and Paddle. Those platforms operate under their own privacy policies, which you should review independently.

3. Information We Collect

4. Why We Use It, and Our Legal Basis

• Creating and running your account — performance of our contract with you
• Recording game entries, scores and leaderboards — performance of our contract with you
• Providing The Deep Edge against your connected leagues — performance of our contract with you
• Selling, granting and ending season pass access, and honouring advertised discounts — performance of our contract with you
• Keeping purchase and refund records — our legal obligations, including tax and accounting
• Transactional emails about your account — performance of our contract with you
• Keeping the platform secure, and preventing fraud and abuse of paid access — our legitimate interests in protecting the service and paying users
• Understanding aggregate usage to improve the product — our legitimate interests, or your consent where the law requires consent for analytics cookies
• Marketing emails — your consent, withdrawable at any time

We do not sell your personal data to anyone, and we do not use it for behavioural advertising or profiling.

5. Fantrax and ESPN League Connectors

When you connect a Fantrax league, you provide a Fantrax Secret ID. It is stored exclusively in your browser's sessionStorage — a temporary, client-side store that exists only within your active browser tab or window — and is sent from your browser directly to Fantrax.

Your Fantrax Secret ID is never transmitted to, stored on, or logged by any Fantasy Hoops Edge server at any point. We have zero server-side access to it. The sessionStorage is cleared when you close the tab or window. What we do store is the league identifier and the league data Fantrax returns for it, which needs no credentials to fetch.

ESPN. ESPN offers no equivalent of the Secret ID, so reading a private ESPN league requires two cookie values from your own ESPN login (called SWID and espn_s2), which you copy in yourself or collect with a bookmark we provide. We never ask for your ESPN password.

Unlike the Fantrax Secret ID, these cookies do pass through our server: your browser cannot send them to ESPN directly, so it sends them to us over an encrypted connection with each request for an ESPN league, and we use them to make that request to ESPN on your behalf. By default they are held only in your browser's sessionStorage, cleared when you close the tab or window, and we do not store them, write them to logs, or place them in a URL. (The bookmark passes them to our site in the part of the web address after the “#”, which browsers never send to any server, and our page removes it from the address bar immediately.)

Remembering your ESPN login (optional).Because phones close tabs and make these cookies hard to find again, you can tick a box to have us remember your ESPN login on your account. If you do, we store it encrypted at rest (AES-256-GCM) with a key held outside our database, tied to your account, and we use it only to read your own ESPN leagues. You can delete it at any time from the ESPN connect screen, or by contacting us. If it stops working (ESPN logins expire), we will ask you for a fresh one. We store a one-way hash of your cookies only to keep one person's private league data from ever being shown to another, and we store the league identifier and the league data ESPN returns for it.

6. Who We Share Data With

Service providers that process data on our behalf:

• Supabase — authentication, database, and file storage for profile pictures
• Vercel — hosting and server infrastructure
• Resend — email delivery; receives the recipient address and the message content only
• Google Analytics — aggregate usage analytics
• HCTI / htmlcsstoimage.com — image generation for shareable cards; receives only the card content

Others we share with, for their own purposes:

• Paddle — our reseller and Merchant of Record. Paddle handles the sale of the season pass, payments, receipts, refunds, and tax compliance and invoicing, and is an independent controller of the payment data it collects. See Paddle's privacy policy.
• Google — if you choose to sign in with Google, to authenticate you
• Professional advisers (such as accounting or legal advisers), where needed
• Authorities or other parties, where required by law or to protect rights, property, or safety

These services receive no user personal information: Basketball Monster (statistical data accessed via paid subscriber API, documented and authorised), and the dynasty ranking sources whose rankings form the FHE Consensus (FBI-HE, Dynatyze, Angle Fantasy Basketball, Moneyballers, and Dizzle Dynasty, each of whom consented to that use).

If Fantasy Hoops Edge were ever sold or transferred, user data could transfer with it, subject to this policy.

7. Where Your Data Is Stored

Our database and file storage run in Supabase's Tokyo, Japan region. Hosting, email delivery, analytics, and payment processing are provided by companies based in the United States, which process data there and in other countries. Using this platform involves your data being transferred outside your own country. Where those transfers are subject to UK or EU data protection law, they rely on the standard contractual clauses or equivalent safeguards offered by each provider.

8. How Long We Keep It

• Account, profile, game and league data — while your account exists. If you ask us to delete your account, this data is deleted or anonymised.
• Purchase and refund records — kept after account deletion for as long as tax, accounting, and dispute-resolution obligations require. Paddle keeps its own records as merchant of record.
• Waiting list and discount records — until the discount is used or the offer is long past.
• Server logs and analytics — for the retention period of the provider concerned, typically months rather than years.

When data is no longer needed for the purpose it was collected for, it is deleted or anonymised.

9. Cookies and Browser Storage

Essential. Session cookies and authentication tokens keep you signed in. Without these, accounts cannot work.

Analytics.Google Analytics cookies measure aggregate site usage. If you are in the UK or the EEA, we ask you before any analytics cookie is set: the analytics script is not loaded at all until you accept, and rejecting leaves it unloaded. Your choice is remembered in your own browser, and you can change it by clearing your browser storage for this site. Elsewhere, analytics loads by default and you can block it with your browser's cookie settings, a content blocker, or Google's opt-out add-on. Blocking analytics does not affect any feature of the site.

Browser storage. We use localStorage and sessionStorage in your own browser to remember preferences, to keep the Deep Edge working between pages, and to hold your Fantrax Secret ID and ESPN cookies for the duration of your tab. Clearing your browser storage removes all of it.

Marketing. We use no advertising cookies, tracking pixels, retargeting technology, or behavioural profiling.

10. Security

We apply technical and organisational measures appropriate to the data we hold: traffic is encrypted in transit, passwords are hashed by our authentication provider, database access is restricted by row-level security and server-only keys, and administrative surfaces are access-controlled. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Privacy Rights

Whoever and wherever you are, you can ask us to give you a copy of the personal information we hold about you, correct it, or delete it. Contact fantasybballai@gmail.com and we will respond within a reasonable time.

If you are in the UK or the EEA, you also have the rights to access, rectification, erasure, restriction of processing, data portability, and objection to processing, and the right to withdraw consent at any time. We will respond within one month, extendable where the law allows. You may also complain to your local data protection authority, or to the Information Commissioner's Office in the UK.

If you are in California, you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

Payment data held by Paddle is Paddle's own responsibility as controller; requests about card or billing data should go to Paddle. See our Refund Policy for payment and refund questions.

12. Children's Privacy

Fantasy Hoops Edge is not directed at persons under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have inadvertently collected data from a minor, we will delete that information promptly. If you believe a minor has provided us with personal information, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will post notice on the website. Where practicable, we will provide at least 30 days' notice before material changes take effect. Continued use of the platform after changes become effective constitutes your acceptance of the revised policy.

14. Contact

For privacy-related queries, requests, or complaints:

Fantasy Hoops Edge

fantasybballai@gmail.com

Last updated: 19 September 2026