Privacy Policy

Account details when you sign up: your name, email address, phone number, date of birth (to confirm you're old enough), invitation code, and a password (stored only as a secure hash by our authentication provider). If you sign in with Google or Apple, we receive your name and email from them.

Profile and preferences: your @username, profile photo, favorite teams, site colors and display settings, and which leagues you pin or hide.

What you post: chat messages, league stories, comments, photos, team names and logos, and anything else you add to a league.

Your collection: cards you add (details, photos, grading and certification numbers, prices you enter) and any marketplace listings, bids and watchlists.

When you sync a league, we read that league's data — teams, rosters, lineups, scores, standings, transactions, drafts and past seasons — from the site it lives on (Sleeper, ESPN, Yahoo, MyFantasyLeague or Fleaflicker), and show it to the league's members on Flex Club.

Yahoo: if you connect Yahoo, Yahoo gives us permission tokens to read your fantasy leagues. They are stored on our servers only, never shown in your browser, and used only to read leagues you choose to sync. You can revoke access any time in your Yahoo account settings.

MyFantasyLeague: if you give us an MFL API key for a private league, it's stored on our servers only and used only to read that league.

The Flex Club browser extension reads your ESPN leagues from your own browser, using your existing ESPN sign-in, and sends the league data to Flex Club. Your ESPN password never leaves your browser.

Like most websites, our servers and hosting provider record basic technical information when you visit: IP address, browser and device type, pages requested, and timestamps. We use it to run, secure and fix the service.

Cookies and local storage: we use cookies to keep you signed in and to remember choices you make (for example, which cards show team colors, or whether the ticker is hidden). Some preferences are kept in your browser's local storage and never reach us. Advertising cookies are described below.

Sponsor cards on Flex Club are counted in aggregate only — how many times each was shown and clicked per day. We don't record who saw or clicked them.

We show ads to help pay for Flex Club. Some are sponsor placements we sell and serve ourselves. Others are provided by Google AdSense.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to Flex Club and/or other sites on the Internet.

You can opt out of personalized advertising by visiting Google Ads Settings, or opt out of some third-party vendors' use of cookies for personalized advertising at aboutads.info. Learn more about how Google uses information from sites that use its services. Where the law requires it (for example in the EEA, UK and Switzerland), we ask for your consent before personalized ads are shown.

• To provide Flex Club: your account, your leagues, scoring, chat, notifications, your collection and the marketplace.
• To personalize the site with your settings, favorite teams and leagues.
• To send notifications you turn on (for example, push notifications for league events).
• To generate league features such as AI-written weekly recaps from league data.
• To keep the service secure, prevent abuse, and fix problems.
• To show and measure ads, as described above.
• To comply with the law.

We don't sell your personal information.

Other members: your name, username, photo, team details and what you post in a league are visible to that league's members. Your showcase cards are visible to friends and leaguemates.

Service providers who run parts of Flex Club for us, under their own privacy and security commitments: hosting (Vercel), database, authentication and file storage (Supabase), AI text generation for league recaps (Anthropic — league data such as team names and scores is sent to generate recaps), and advertising (Google).

Legal reasons: if required by law, or to protect the rights, safety and property of Flex Club, our members or others. If Flex Club is ever merged or sold, information would transfer under this policy.

We keep your account information while your account is open. League chat messages are kept for up to one year. League data synced from other sites stays as long as the league is on Flex Club. When you delete your account, we delete or anonymize your personal information, except where we must keep it for legal reasons.

• Edit your profile, photo, favorite teams and settings any time on your profile page.
• Leave or hide leagues, disconnect the extension, and revoke Yahoo access from your Yahoo account.
• Turn off push notifications in your browser or device settings.
• Block or delete cookies in your browser (some features, like staying signed in, need them).
• Ask us for a copy of your information, to correct it, or to delete your account, by emailing privacy@flexclub.app. Depending on where you live (for example California, the EEA or the UK), you may have additional rights, including to object to or restrict processing; we'll honor them as the law requires and won't treat you differently for using them.

You must be at least 13 to create a Flex Club account. We don't knowingly collect information from anyone under that age; if we learn we have, we'll delete it.

We use encryption in transit, access controls and managed infrastructure to protect your information. No system is perfectly secure, so please use a strong, unique password.

We'll post any changes to this policy on this page and update the date above; for significant changes we'll give notice on the site. Questions? Email privacy@flexclub.app.

The Games controller is based on “Xbox Inalambric Controller (White)” by DogexorRexUwU, licensed under CC BY 4.0 (recolored).

Trophies are lit by “Studio Small 03” by Sergej Majboroda from Poly Haven (CC0).