Privacy Policy

Last updated: July 2026

Fantasy90 ("we", "us", "our") is operated from Belgium. This policy explains what information we collect when you use fantasy90.com, why we collect it, and what rights you have over it. This is written in plain language, but if anything is unclear, contact us using the details at the bottom of this page.

Information we collect

We collect only what's needed to run your account and the site:

• Account information, your email address, and a securely hashed password if you sign up directly (we never see or store your password in plain text).
• Google sign-in, if you choose "Continue with Google," we receive your name, email address, and profile picture from Google. We don't receive your Google password or access to any other Google services.
• Saved data, squads, transfer plans, or optimizer results you choose to save to your account.
• Basic usage analytics, aggregate, anonymous visit statistics (see "Analytics" below). We cannot identify individual visitors from this data.

We do not collect or store your full card details. When you make a payment or donation, your card information goes directly to Stripe, our payment processor, we only receive limited transaction information back (such as the amount, date, and payment status).

How we use your information

• To create and maintain your account, and let you log in.
• To send you account-related emails, confirming sign-up, resetting your password. We do not send marketing emails unless you separately opt in to that in the future.
• To save and display your optimizer results back to you.
• To understand overall site usage and improve Fantasy90.

Who we share it with

We don't sell your data. We use a small number of service providers to run Fantasy90, each of whom only processes data on our behalf:

• Supabase (EU-hosted, Frankfurt), our account database and login system.
• Resend, sends account emails (sign-up confirmation, password reset) on our behalf.
• Google, provides the optional "Continue with Google" sign-in.
• Netlify, hosts the website itself.
• Cloudflare, provides privacy-focused, cookie-free visit analytics.
• Stripe, processes payments and donations securely. We never see or store your full card details.

Each of these providers has its own privacy policy governing how they handle data on their infrastructure.

Where your data is stored

Your account data is stored with Supabase in their Frankfurt, Germany data center, within the EU. Data is encrypted in transit (HTTPS) between your browser and our servers.

How long we keep it

We keep your account data for as long as your account is active. If you delete your account, or ask us to delete it, we remove your account data within 30 days, except where we're required to keep something for legal reasons.

Your rights

If you're in the EU (or generally, regardless of location), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us using the details below. If you're not satisfied with our response, you have the right to lodge a complaint with your local data protection authority, in Belgium, this is the Belgian Data Protection Authority.

Cookies and local storage

Fantasy90 uses minimal tracking. See our Cookie Policy for full details on what's stored in your browser and why.

Children's privacy

Fantasy90 is not directed at children under 16, and we do not knowingly collect data from anyone under that age.

Changes to this policy

We may update this policy as Fantasy90 changes. We'll update the "Last updated" date above when we do.

Contact us

Questions about this policy or your data? Reach us at support@fantasy90.com.