Privacy Policy
Effective October 4th, 2026
About this policy
Fantasy Projections (fantasyprojections.com, “we”) is a free fantasy football projections site operated by John Connell, based in the United States. This policy explains what personal information we collect, how we use and store it, and the choices you have. It applies to the website and its sign-in services.
Information we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Your email address, your Google or Discord account ID, and your profile picture link | Google or Discord, when you sign in with them |
| Profile | Display name, avatar, preferences (such as scoring format) | You |
| Username checks | Each username you try, and whether our check allowed it | You, and the check |
| Contact messages | Your message, the email address and name you give, our email replies, and your IP address and browser type when you send it | You, when you use the contact form |
| Activity | Player and challenge picks, and the scores, streaks, rankings and achievements computed from them | You, and our scoring |
| Technical logs | IP address, browser type, pages and API requests, response times | Your browser, automatically |
We don’t collect payment details, phone numbers, precise location or contacts. We don’t use advertising or tracking tools. Cloudflare, which delivers the site, provides us with traffic analytics; see Cloudflare below.
How we use it
We use your information only to run the site:
- Create your account and keep you signed in.
- Record and score your player and challenge picks, and build leaderboards, rankings and achievements.
- Show your public profile and your place on leaderboards.
- Keep the site secure: detect abuse, fix errors, and protect accounts.
- Understand how the site is used, from Cloudflare’s traffic analytics.
- Check that usernames, which everyone can see, aren’t offensive.
- Read messages you send through the contact form, reply to them by email, keep automated spam out, and act on abusive messages, including reporting them or blocking the IP address they came from.
The site never sends automated email: no newsletters, notifications or marketing. Notifications about your picks, achievements and challenges appear only on the site, under the bell in the header; they are never sent by email or push. Your account’s email address is used only to identify your account.
If you contact us through the contact form, we reply by email to the address you provide. We use that address only to respond to your message and any follow-up about it, and never add it to a mailing list.
We don’t sell your personal information, use it for advertising, or build profiles of you for anyone else.
Who sees or handles it
Other users see your display name, avatar, public profile, and your picks, scores and rankings once they are on a leaderboard. Your email address is never shown.
Service providers handle data for us, only to run the site:
| Provider | What they do | What they receive |
|---|---|---|
| Cloudflare | Delivers the site, protects it from attacks, and provides traffic analytics | All traffic to the site, including IP addresses |
| netcup | Website hosting | Everything stored on the server |
| Google, Discord | Sign-in | That you are signing in to our site |
| TypeSafe | Checks usernames for offensive language | Each username you try, and nothing else about you |
| Cloudflare Turnstile | Checks that the contact form is sent by a person, not a bot | Your IP address and browser signals while you are on the contact page |
| Discord | Delivers contact messages to us in a private channel | Your contact message, with the topic and name you gave and whether you were signed in; never your email address |
Cloudflare. Every request to the site passes through Cloudflare, which delivers our pages and blocks attacks. In doing so, Cloudflare collects information about each request, including your IP address, browser and device type, approximate location and the pages you visit, and provides us with analytics based on it, such as visitor numbers, popular pages, visitors’ countries and blocked threats. We use these analytics only to understand how the site is used and to keep it running.
Cloudflare is not optional. The site can only be reached through Cloudflare, so its processing, including its analytics, applies to every visit and can’t be opted out of on our site. Cloudflare handles this information under its own privacy policy.
We may also disclose information when the law requires it, to protect the safety or rights of users or the site, or as part of a sale or transfer of the site, under this policy.
Cookies and browser storage
We use only what the site needs to work. There are no advertising, analytics or tracking cookies.
| Item | Purpose | How long |
|---|---|---|
| Sign-in tokens (browser storage) | Keep you signed in | Until you sign out; renewed while you use the site |
| Sign-in cookies | Complete a Google or Discord sign-in | Up to 30 days, or until you sign out |
| Member cookie (fp_member) | Note that this browser has signed in, so pages load in their signed-in layout. It holds no account details | 1 year, or until you sign out |
| Picks made before signing in (browser storage) | Keep your picks until you sign in to save them | Until you sign in or clear it |
| Theme setting (browser storage) | Remember light or dark mode | Until you clear it |
Cloudflare may set its own security cookies to block automated attacks. Blocking all cookies and storage will stop sign-in from working.
Where it’s stored, and for how long
All data is stored in the United States.
| Data | Kept for |
|---|---|
| Account, profile, picks and scores | As long as your account exists |
| Usernames you tried | As long as your account exists |
| Contact messages (including the IP address they came from) and our email replies | Up to 2 years after we’ve dealt with them |
| Request logs (IP address, requests) | up to 30 days |
| Backups | up to 90 days |
When you delete your account, it is removed from the live site right away. Copies in backups expire within 30 days. Scores already counted in season totals may stay in anonymous aggregate form.
How we protect it
- All traffic is encrypted with HTTPS, between you and Cloudflare and between Cloudflare and our server.
- You sign in through Google or Discord, so we never hold a password for you.
- Our servers accept connections from Cloudflare only. Administration and backups run over a private, encrypted network.
No system is perfectly secure. If a breach affects your personal information, notifications will be made as required by law.
Your choices and rights
- See and change your display name, avatar and preferences in your account settings.
- Get a copy or delete your account through our contact page. We’ll confirm it’s you, then act within 30 days.
- Sign-in provider: an email address can sign in only one way, with Google or with Discord. To switch, contact us.
- Cloudflare can’t be turned off. If you don’t want Cloudflare to process your information, as described above, please don’t use the site.
US state privacy laws. Residents of California, Colorado, Virginia and other states with privacy laws may have the right to know, access, correct and delete their personal information, and to opt out of its sale or use for targeted advertising. We don’t sell or share personal information, and we don’t do targeted advertising, so there is nothing to opt out of. You can make any of these requests through our contact page, and we won’t treat you differently for doing so.
Children
The site is not directed to children under 13, and we don’t knowingly collect their personal information. If you believe a child under 13 has an account, contact us and we will delete it.
Changes and contact
We’ll post any change to this policy on this page and update its effective date. For significant changes, we’ll also tell signed-in users on the site.
For questions or requests about this policy or your information, use our contact page.