Privacy Policy
Last updated: January 2025
1. Introduction
Dynasty Football Reference ("DFR," "we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.
2. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Name (if provided)
- Account preferences
ESPN Credentials
To connect your fantasy league, you provide ESPN login credentials. These credentials are encrypted using AES-256-GCM encryption before storage. We never store or have access to your password in plain text. Credentials are used solely to sync your league data and can be deleted at any time from your Settings.
League Data
When you connect a league, we collect fantasy football data including:
- League settings and history
- Team rosters and transactions
- Matchup results and scores
- Player statistics
- Manager/team names
Payment Information
Payment processing is handled by Stripe. We do not store your credit card number, CVV, or full payment details. We receive only limited information from Stripe such as the last four digits of your card and billing address for record-keeping purposes.
Usage Data
We automatically collect certain information when you use the Service:
- Pages visited and features used
- Device type and browser information
- IP address
- Date and time of access
3. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Sync and display your fantasy league data
- Generate AI-powered content (beat reports, recaps) based on your league data
- Process payments and manage subscriptions
- Send service-related communications
- Improve and optimize the Service
- Detect and prevent fraud or abuse
4. AI Processing
Your league data is processed by AI systems to generate personalized content such as beat reporter articles and weekly recaps. This processing uses your league's statistical data, team names, and matchup results. AI-generated content is created for entertainment purposes and is visible to members of your league.
5. Information Sharing
We do not sell your personal data. We share information only in the following circumstances:
- Service Providers: We use third-party services including Stripe (payment processing) and AI providers (content generation) that process data on our behalf
- League Members: League data and AI-generated content is visible to other members of the same connected league
- Legal Requirements: We may disclose information if required by law, court order, or government request
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
6. Data Security
We implement appropriate technical and organizational measures to protect your data. ESPN credentials are encrypted with AES-256-GCM before storage. All data transmission uses HTTPS encryption. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account or disconnect your league, we will delete your ESPN credentials immediately and your league data within 30 days, unless we are required to retain it for legal purposes.
8. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Request a copy of your data in a portable format
- Opt-out: Disconnect your league or delete your account at any time
To exercise these rights, contact us at admin@dynasty-football-reference.com
9. Cookies
We use essential cookies to maintain your session and remember your preferences. These cookies are necessary for the Service to function and cannot be disabled. We do not use advertising or tracking cookies.
10. Children's Privacy
The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
11. California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your California privacy rights, contact us at the email below.
12. International Users
The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at admin@dynasty-football-reference.com
