Privacy Policy
Tipoff Fantasy is a free fantasy game for college basketball tournaments. This page explains what we collect, why, how long we keep it, and how to get rid of it. It is written to be read rather than skimmed past.
Who we are
Tipoff Fantasy is an independent product. It is not affiliated with, endorsed by, or sponsored by the NCAA or any college, conference, or athletic association. Questions about anything on this page go to privacy@tipofffantasy.com.
What we collect
When you create an account, you give us:
- Email address — used to sign you in, to recover your account, and to contact you about your leagues. We do not sell it and we do not send marketing email you did not ask for.
- Display name — shown to other managers in your league. Use whatever you like; it does not have to be your real name.
- Date of birth — used only to confirm you are old enough to use the service. We store your age bracket, not a marketing profile.
- Password — handled by Google Firebase Authentication. It is hashed and we never see it.
When you play, we store:
- Your leagues, rosters, draft picks, and scores
- Messages you send in league chat
- Your settings, including notification preferences and accent color
We also collect basic usage analytics:
- Which screens you open and which actions you take, so we can tell what is confusing and fix it
- Device type, browser, screen size, and approximate region derived from your IP address
- A randomly generated identifier tied to your account ID
What we deliberately do not put in analytics: your email address, your display name, your password, or the contents of your chat messages. Analytics events are keyed to an account identifier, not to anything that names you.
What we do not collect
- Payment information. Tipoff Fantasy is free, there are no entry fees, and there are no prizes.
- Precise location. We never request GPS access.
- Contacts, photos, camera, or microphone, except a profile picture you choose to upload.
Why we collect it
To run the game, to keep your leagues working across devices, to send the notifications you turned on, and to understand which parts of the product people actually use. That last one is the only reason analytics exists here. If a feature confuses people, we would rather find out from the data than from someone quitting.
Who we share it with
We use a small number of third-party services, and each sees only what it needs:
- Google Firebase — authentication, database, and hosting. Your account and league data live here.
- ESPN — the source of live game and player statistics. This is a one-way feed. We request public box scores and send them nothing about you.
- PostHog — receives the anonymized usage events described above. It is sent an account identifier that is not your name or email, and never the contents of your messages.
We do not sell your personal information, and we do not share it with advertisers.
Children
Tipoff Fantasy is not intended for children under 13, and we do not knowingly collect personal information from them. We ask for date of birth at signup and block accounts below that age.
If you believe a child under 13 has created an account, email privacy@tipofffantasy.com and we will delete it and the associated data promptly.
Users between 13 and 17 can use Tipoff Fantasy. We limit what we collect from them to what the game requires.
How long we keep it
Account and league data is kept while your account is active. Analytics events are retained for up to 24 months and then deleted. If you delete your account, we remove your personal data within 30 days.
One exception worth being honest about: draft picks and chat messages inside a shared league remain visible to the other managers in that league, because removing them would rewrite a game other people played. Your name is disassociated from them.
Your choices
- Delete your account. Settings, then Danger Zone, then Delete Account. This is permanent and immediate.
- Turn off notifications. Settings, then Notifications. Every alert type can be switched off individually.
- Change your email or password. Settings, then Account.
- Request a copy of your data, or ask us to correct or delete something specific, by emailing privacy@tipofffantasy.com.
Depending on where you live, you may have additional rights over your personal data, including under the GDPR or the CCPA. Email us and we will honor them regardless of where you are.
Security
Data is transmitted over HTTPS and stored in Google Firebase, which encrypts data at rest. Passwords are hashed by Firebase Authentication and are never visible to us. No system is perfect, and we will tell you promptly if something goes wrong.
Changes to this policy
If we change what we collect or why, we will update this page and change the date at the top. Material changes will also be announced inside the app.