Privacy policy
Last updated 29 October 2026
Fantasy Zone ("we", "us") runs an NBA fantasy basketball app at fantasyzone.app. This policy explains what we collect, why, and the choices you have. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
What we collect
- League and team details - league and team names, rosters, lineups, trades, waiver claims and results.
- Login details - if you set up an email login: your email address and a password (stored only as a one-way scrambled hash we can't read). If you use a league code and PIN, the PIN is stored the same way.
- Profile details you choose to add - owner name, photo, team logo and colour, bio, favourite NBA team, and phone number. Your phone number is only shown to people logged in to your league.
- Messages - league chat messages and anything you send us with "Report a problem".
- Device information - an anonymous device ID that keeps you logged in, your browser type, and whether you use a phone or computer. If you turn on notifications, a notification address supplied by your browser.
- Usage - which league you opened and when, so we can see how many people use the app and fix problems.
We don't collect payment card details in the app. If we add paid features, payments will be handled by a payment provider (for example Stripe, Google Play or the App Store) under their own privacy policies.
How we use it
- To run your league: scoring, matchups, standings, trades, chat and notifications you've switched on.
- To send emails you ask for or that keep your account safe, like login codes and league emails your commissioner has turned on.
- To keep the app working, secure and improving, and to answer problem reports.
We don't sell your information and we don't use it for advertising profiles.
Who can see it
- Your league sees team names, rosters, results, chat and the profile details you add (phone only to logged-in league members).
- Your commissioner can manage teams, reset PINs and see which teams have an email login.
- Service providers that run parts of the app for us: Supabase (database), Netlify (website hosting), Cloudflare (domain and email forwarding), Resend (sending emails), and your browser's push service (Google, Apple or Mozilla) for notifications. Some of these store data outside Australia, including in the United States.
- Player stats and news come from public NBA data (ESPN). We don't send them your personal information.
How long we keep it
We keep league data while the league exists so history and records work. If a league is deleted, its teams, chat and results are deleted with it. Usage records are kept for up to 2 years.
Your choices
- You can edit or remove your profile details at any time from 👤 in the app.
- You can turn notifications off from 🔔, or in your phone or browser settings.
- You can ask us for a copy of your information, to correct it, or to delete your email login and personal details by emailing owner@fantasyzone.app.
Security
Passwords and PINs are stored as one-way hashes, all connections use HTTPS, and the database only lets each person change what they're allowed to. No system is perfectly secure, so please use a password you don't use elsewhere.
Children
Fantasy Zone is meant for people 16 and over. If a younger person is using it, a parent or guardian should contact us.
Contact and complaints
Email owner@fantasyzone.app. If you're not happy with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this policy we'll update the date at the top, and tell you in the app if the change is significant.