Privacy Policy

1. Who we are

[COMPANY LEGAL NAME], [REGISTERED ADDRESS], runs Fan Fortune and is responsible for the personal information described here. Contact us at [SUPPORT EMAIL].

2. What we collect

Account details

Your email address and whether you have confirmed it, your date of birth, the state you declare as where you live, and which version of the Terms you accepted and when. Your password is stored only as a one-way hash; we never store it in readable form. Links we email you to confirm your address or reset your password are stored only as hashes and expire.

Guest profile

If you play without an account, a cookie links your browser to a guest profile identified by a random code.

Gameplay and coin history

Your picks, the amounts played, the chances and returns shown to you, results, game receipts, your coin history (bonuses, plays, returns, refunds and purchases), your level and XP, Season Pass progress and claimed rewards, division seasons, streaks, missions and daily gifts, favorite clubs, roster discovery progress, and whether you skip game playback.

Your name on ladders and friends

Other players see your display name (one you choose with an account, or one we generate), your division, your division-season points and your prestige stars on ladders. If you follow friends, we keep who you follow and show them on your friends ladder; players connected by an invite see each other there. Reports of a name are kept for review.

Purchases

What you bought, the price, any bonus coins, when, how you paid (Apple Pay, Google Pay, a saved method or a card), and the reference our payment provider gives us. If you save a payment method for one-tap purchases, we keep the provider's reference for it with its brand and last four digits; you can remove it at any time. If you are in Club Rewards, we keep your points, your tier and whether you left; only you can see them. We do not receive or store your full card number; the payment provider handles it.

Partner and invite tracking

If you arrive through a partner link or an invite link, or enter a code at sign-up, we record which source brought you (first touch only) and when, so partners and friends can be credited. Partner link visits are counted using a daily hash of your IP address and browser; the address itself is not stored for this purpose.

Identity details for verification

If we ask you to verify your identity (not required to play today), your legal name, date of birth and home address (street, city, state and ZIP code). These details are stored encrypted. We also keep the outcome (pending, verified or rejected), any reason given and when it was decided.

Location checks

When you play, the state we determine you are in, how we determined it, the outcome (for example allowed or blocked) and the time. Today this uses the state you declare. If we add a location service in future, it may use your IP address or device location and we will update this policy first.

Responsible-play settings

Your play and spending limits, any pending limit changes, breaks, self-exclusions and reminder preferences.

Device and session data

Session cookies (we store only a hash of each sign-in token), your IP address (used for request limits, sign-in protection and security), and the time of each request. Your browser keeps a few preferences locally (sound, reduced motion, the lobby view and an unfinished pick); they never leave your device.

Usage events

Counts of in-app events such as a matchup viewed, a pick made, a game played again or skipped, and a result viewed. We use our own counters for this; we use no third-party analytics or advertising tools.

Operator audit logs

Records of significant actions, such as changes to play limits, breaks, self-exclusions, identity decisions, purchases and state settings, with who made them and when.

Messages

Anything you send to support.

3. Why we use it

• To run the game: accounts, balances, games, receipts, history, seasons, levels and the store.
• To check eligibility: your age and your state, and your identity if we ask for it.
• To meet legal requirements, including age and location checks and records that regulators, auditors or payment providers may require.
• To keep the game fair and secure: preventing multiple accounts, bots, bonus abuse, payment fraud and chargebacks, and keeping audit records.
• To apply the responsible-play tools you set, and to enforce breaks and self-exclusions.
• To credit partners and friends who referred you, and to pay what we owe them.
• To understand how the game is used and improve it, with our own event counts and aggregate reports. To measure a feature we may show it to some players and not others for a limited time (for example the premium pass); this never affects game results.
• To contact you about your account, security, purchases or changes to these documents. We send marketing email only if you opt in, and every such email has an unsubscribe link.

We never use your information to change a game result. Your pick, amount, balance, purchases and history do not affect results.

4. How long we keep it

• Account details: while your account is open, then 2 years, unless a self-exclusion or a dispute requires longer.
• Game records, receipts, coin history and purchase records: 5 years, because they are needed to check results, answer disputes and meet tax and payment rules.
• Identity verification details: 5 years after the decision, as the law requires or allows.
• Location checks: 2 years.
• Breaks and self-exclusions: for as long as they apply and 5 years afterwards, so that we can honor them.
• Sign-in sessions and emailed links: until they expire or are revoked, then 90 days.
• Operator audit logs: 7 years.
• Support messages: 2 years after the matter is closed.

After these periods we delete or anonymize the information.

5. Who we share it with

We do not sell your personal information and we do not share it for targeted advertising.

We share it only with service providers that work for us under contract and may use it only to provide their service:

• hosting and database: Render (servers in Virginia, United States);
• email delivery: Resend;
• payments: our payment provider, which receives your payment details directly and shares only a reference with us;
• identity verification and location checks: a verification provider, if we ask you to verify.

Partners who refer players see only aggregate numbers (visits, sign-ups, purchases and amounts), never your name or email.

We may also disclose information when the law requires it, to protect players or prevent fraud, to our auditors and professional advisers, to a buyer of our business (under this policy), or with your consent.

6. Security

• Identity verification details are stored encrypted.
• Passwords, sign-in tokens and emailed links are stored only as one-way hashes.
• Operator controls require a separate sign-in, and their sessions can be revoked.
• Significant operator and account actions are logged, and game and coin records cannot be edited once written.
• All traffic to Fan Fortune is encrypted (HTTPS).

No method of storing or sending information is completely secure. If a breach affects your information, we will tell you as the law requires.

7. Your choices and rights

• See your game history and download your receipts in the app at any time.
• Change your password, your play and spending limits, breaks, self-exclusion and reminders in the Account area.
• Ask for a copy of your information, or for it to be corrected or deleted, by writing to [SUPPORT EMAIL]. We will confirm your identity first and reply within 45 days. Some records must be kept as described in How long we keep it, for example game records, purchase records and self-exclusions.
• Close your account by contacting us.
• Cookies: the session cookie is needed to play; a partner-link cookie lasts 30 days. We use no advertising cookies and no third-party trackers.
• Residents of California and other states with privacy laws have the rights those laws give, including to know, delete and correct personal information, and not to be discriminated against for using them. We do not sell or share personal information as those laws define it. To appeal a decision about a request, reply to our answer and we will have a different person review it.

8. Children

Fan Fortune is only for adults, at least 18 or the higher minimum age in their state. We do not knowingly collect information from anyone under that age. If we learn that we have, we will delete it and close the account.

9. Changes to this policy

We may update this policy. Each version has a version number and an effective date. We will tell you about material changes by email or by a notice in the app before they take effect.

10. Contact