Privacy Policy
DRAFT — pending review; not yet in effect.
This policy explains what Club Level collects, why, and what we do with it. It covers clublevel.live and the Club Level application.
1. What we collect
Account information.Your Club Level ID, email address, and password. Authentication is handled by Amazon Cognito; we don't store your Club Level password ourselves.
Provider connection information. What we hold depends on the provider:
- For providers you authorize through their own site (Yahoo), we store the access and refresh tokens they issue us.
- For providers that identify you by a public username or league ID (Sleeper, Fleaflicker, Fantrax), we store that identifier.
- For MyFantasyLeague, we exchange your credentials for a session token and store that token, which the provider expires periodically.
- For ESPN private leagues, the cookies you supply (SWID, espn_s2) are used for that request only and are never stored on our servers and never written to our logs. If a private ESPN league needs refreshing later, we'll ask you again.
League data. The leagues you choose to import: league settings and scoring rules, teams, rosters, matchups, transactions, standings, and results — for you and for the other members of those leagues, because a league is inherently shared. We also store the computed fantasy scores we produce from it.
Content you post.Chat messages, reactions, and questions you submit, including any league or player context you attach. Chat delivery is powered by GetStream; we also store the messages ourselves so the record is ours rather than a vendor's. If you take part in a live session, recordings may include your questions and your name.
Profile and preferences. Favorite team, colorway, avatar, and settings.
Technical information. Standard server and application logs — IP address, device and browser type, timestamps, and error traces — used to operate and secure the service.
2. What we don't collect
We don't collect payment-card data (we don't currently take payments), we don't ask for government identifiers, and we don't buy personal data about you from data brokers.
3. How we use it
To run the service: import and refresh your leagues, calculate live scoring, show your dashboards, deliver chat and live sessions, and keep your settings. To communicate with you about your account, verification, security, and material changes. To secure the service — detecting abuse, debugging, and preventing misuse. To improve the product, using aggregate and diagnostic information.
We do not sell your personal information, and we do not share it with advertisers.
4. Who we share it with
Service providers who run parts of the platform on our behalf: Amazon Web Services (hosting, database, authentication, storage — United States), GetStream (chat and live video delivery), and our licensed sports-statistics provider (play-by-play and player data — they send data to us; we don't send them yours).
The fantasy providers you connect — necessarily, since we contact them on your behalf to fetch your leagues.
Other members of your leagues and chats, who will see your team, your results, and what you post there.
When the law requires it,or to protect the rights, safety, or property of Club Level or others. If we're ever involved in a merger, acquisition, or sale of assets, information may transfer as part of it; we'll give notice.
5. How long we keep it
Account and league data are kept while your account is active. Chat messages are retained as part of your leagues' history. Recordings of live sessions are retained indefinitely unless you ask us to remove yours. Logs are kept for a limited operational period. When you delete your account we delete or de-identify your personal information within a reasonable period, except where we must keep something to comply with law, resolve disputes, or enforce our agreements — and except for league data that is inherently shared with other members, and content already posted in shared conversations.
6. Security
We use encryption in transit, encrypted storage, access controls, and least-privilege permissions for the systems that hold your data. Secrets are held in managed secret storage, and — as noted above — ESPN cookies are never persisted at all. No system is perfectly secure, and we can't guarantee absolute security.
7. Your choices and rights
You can view and update your profile, disconnect any provider, remove leagues, and delete your account from within the app. Depending on where you live, you may have additional rights — to access, correct, delete, port, or restrict processing of your personal information, and to appeal a refusal. Contact [PRIVACY EMAIL]and we'll respond as required by applicable law. We won't discriminate against you for exercising these rights.
8. Cookies and similar technologies
We use cookies and local storage that are necessary to sign you in, keep your session, and remember your preferences. We don't use advertising cookies.
9. Children
Club Level isn't intended for children under 18. We don't knowingly collect personal information from them. If you believe a child has given us information, contact [PRIVACY EMAIL]and we'll delete it.
10. International users
Club Level is operated from the United States and your information is processed there. If you use it from elsewhere, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.
11. Changes
We may update this policy. Material changes will be announced in the app or by email before taking effect, and the effective date above will change.
12. Contact
Privacy questions: [PRIVACY EMAIL]. Anything else: [SUPPORT EMAIL].
Back to Club Level