Privacy, without
the fine-print fog.

We process only the information needed to authenticate participants, place them in a league, preserve the league record, and operate the season.

Connected sign-in is used only to create or authenticate your Empire FFB account. The pilot does not request access to your email contents, contacts, calendar, cloud files, or social posts.

• Verify accounts and keep sign-in sessions secure.
• Match invited participants to the correct league and team.
• Run drafts, rosters, waivers, trades, scoring, and standings.
• Preserve season history and an auditable commissioner record.
• Investigate errors, prevent abuse, and support pilot participants.
• Evaluate pilot reliability and improve the product before public release.

We do not use connected-account data for advertising, credit decisions, or unrelated profiling.

Fantasy league information is collaborative by design. Other authenticated members of your league may see your display name, team, roster, lineup, transactions, matchup results, standings, and shared league history. Pending waiver bids and other intentionally private competitive data are limited to authorized team managers and the commissioner where the product design requires it.

Commissioners have elevated access to operate the league, resolve pilot issues, manage membership, and review the audit trail. Do not place secrets, passwords, financial account details, or unrelated sensitive information in team names, notes, or other league fields.

Empire FFB uses service providers to operate the pilot. Supabase provides authentication, database, and related backend services. Netlify hosts and delivers the web application. Those providers may process data on our behalf under their own service and data-processing terms.

If you choose connected sign-in, the identity provider also processes the authentication under its own policies. We may disclose information when reasonably necessary to protect the pilot, respond to valid legal process, or prevent fraud or harm.

Account and active league information is generally retained while the pilot account or league remains active. When an account-deletion request is verified, we will delete or de-identify personal account information as reasonably practical for the pilot.

Some shared league results, transactions, commissioner audit entries, fraud prevention records, and de-identified statistics may remain where needed to preserve the integrity of the league’s record, protect participants, or meet legal obligations. Provider logs and backups may persist until they rotate under the provider’s retention process.

The pilot uses authentication, role-based access, database row-level controls, and audited commissioner operations intended to reduce unauthorized access. No internet service can guarantee absolute security, so participants should use a unique password, protect connected accounts, and report suspicious activity to their commissioner promptly.

• You may use email and password instead of a connected sign-in provider.
• You may remove Empire FFB access from your provider’s connected-app settings; doing so does not automatically erase the pilot account.
• You may ask the commissioner to correct profile or membership information.
• You may request account deletion using the published pilot steps.

Empire FFB is not directed to children under 13, and the private pilot should not be used by anyone who cannot lawfully agree to these policies in their location. If the pilot’s data practices materially change, this page and its update date will change before the new practice applies where notice is required.

For privacy or account questions, sign in and contact the commissioner who invited you through your league’s established communication channel. If you cannot sign in, contact that same commissioner outside the app. The pilot does not currently operate a public support inbox.