Privacy Policy

Effective date: October 19, 2026

This Privacy Policy explains what information Fantasy Apples ("the App") collects, how we use it, and what choices you have. The App is a web app, operated by Studio Infinite Lives, LLC ("we", "us", "our"). By using the App you agree to the practices described here.

Free public beta. Fantasy Apples is a free public beta, so expect rough edges, changes and the occasional reset. Features may change or be removed, and the App may be unavailable at times. We may need to reset or migrate the data you enter during the beta; we will try to warn you first, but please keep your own copy of anything you can't easily re-enter (such as your projection files). This policy applies in full during the beta.

1. Who we are

Studio Infinite Lives, LLC operates Fantasy Apples. You can reach us about anything in this policy at support@infinitelives.io. This policy sits beside our Terms of Service, which set out the rules for using the App (in the App under Account → Terms of Service, and at https://fantasyapples.com/terms.html).

2. Information we collect

Account information. You sign in with your Yahoo or Google account. The one you choose shares your name, email address and profile picture with Google Firebase Authentication, which gives you a Firebase user ID. If you link the other one too (under Account), it shares the same details, and either sign-in opens the same account. We never see or store your password. When you sign in with Yahoo, Yahoo also gives the App a short-lived access token (a temporary key, not your data) for reading your Yahoo Fantasy data. The token itself is kept only in your browser's memory, never stored, and gone when you reload the page or sign out.

Leagues and settings you enter. The leagues, managers and rosters you enter or import, draft picks, scoring and roster slot settings, the season schedule you import (each week's dates, which of your league's teams play each other and, when the file has them, each finished week's final scores), imported projections and custom positions, the alternate player names the App learns from your imports, your watchlist and "Don't Pick" list, your Players grid settings and bookmarks, which team news and polls you have already seen, the polls you voted in and your pick in each, the polls you make, and the league invite links you make (section 4).

Weekly predictions. Once a league has a season schedule, our servers read its rosters, roster history, scoring, roster slots, custom positions and schedule each day to compute each week's predicted matchups and, once the week is over, its estimated results from public NHL statistics. These predictions and results are stored in your account with the league, private to you like the rest of it, and are deleted when you delete the league.

Push notifications. If you allow notifications, we store your browser's push token with your platform, app version and a device ID, so we can send you news about your players. Turning notifications off, or signing out on that device, removes the token.

OG status. The OG is free: you earn it when we approve a feature request you posted, and OG+ when we build one (section 4). We store your OG tier, the tier your feature requests earned and when you first earned one, linked to your account. Nothing about it is shared, and there is nothing to pay.

Tips. If you use Support (under Account, on the OG sheet or on the welcome message), the App opens PayPal's own payment page in a new tab; the App itself stores nothing about it. PayPal processes the tip under its own privacy policy and, as with any PayPal payment, shows us what a payee sees: your name, email address, the amount and the date. We keep that only for our accounting; it is not linked to your account in the App.

Usage analytics (optional). If you allow analytics cookies, Google Analytics for Firebase records which screens you open and which features you use (for example creating a league, importing a file, sorting the player grid, opening a player card or an invite link), linked to your Firebase user ID. These events carry only kinds and rough counts (such as "10–49 rows"), never names. Analytics also records which version of the App you use, the site address you opened it on (the domain only, never the rest of the link), your device type (operating system, browser, phone or desktop) and whether you installed the App. We do not send your name, email address, league, team, player or projection names, or any other league contents to analytics. Analytics is off until you allow it.

Technical data. Your IP address and connection details, which Google Firebase necessarily sees when your browser talks to it, and the browser storage described in section 9.

The hockey statistics, schedules, lines and news shown in the App come from public sources (NHL.com and DailyFaceoff). They are about players, not about you.

3. How we use your information

To sign you in and keep your leagues and settings in sync across your devices.
To show your teams' players, statistics, ratings and news.
To compute your leagues' weekly predictions and results.
To send the push notifications you asked for.
To give you the OG status your feature requests earn.
To operate, maintain and improve the App.
To protect the App against abuse and automated attacks (Firebase App Check / reCAPTCHA).

We do not sell your personal information, we do not share it for advertising, and the App shows no ads.

4. Who can see your data

Your leagues, settings and lists are private to your account. Firestore security rules allow only your own account to read or write them. Other users cannot see them.

The one exception is an invite link you choose to make with a league included. It stores a copy of that league (its name, scoring, roster slots, manager names, rosters, colours, draft picks and season schedule, but not which team is yours) that anyone signed in who has the link can open, and copy to their own account, for 48 hours. When you make the link you may also choose to include the league's custom positions, the alternate player names the App learned from your imports, and any of your projections; those are copied along with the league. While the link works, your edits to the league and to what it includes update the copy. You can revoke the link at any time, and deleting the league deletes it.

The feature board. Everyone signed in can see the feature requests other users post, once we approve them (until then, only the author and we see a request): each request's title, description and status, its vote count and our note on it. Requests show no names: other users can't see who posted or voted for a request. We store which account posted each request and which accounts voted for it, so you can edit or delete your own request and take your vote back.

Polls. Everyone signed in can see every poll and its results: its question, its choices (player names for a Compare poll, NHL clubs for the welcome's poll) and how many votes each choice has. A Compare poll also shows the scoring and roster slot settings of the league you had selected when you made it, but not the league's name, its managers or its rosters. Polls show no names: other users can't see who made a poll or who voted for what. We store which account made each poll, and which choice each account voted for, so it counts once and you can change or remove your answer. A player poll takes votes for two weeks; until then, the account that made it can delete it.

5. Who else processes your data

We use these service providers ("sub-processors"):

Google Firebase: Authentication, Firestore, Cloud Functions, Cloud Messaging (push notifications), Hosting, Analytics, and App Check / reCAPTCHA.
Yahoo: sign-in, and the Yahoo Fantasy data you allow the App to read.
Google: sign-in, if you choose to sign in with Google.
PayPal: payment processing for tips (Support). PayPal handles your payment under its own privacy policy: https://www.paypal.com/myaccount/privacy/privacyhub.

Your data is stored and processed in the United States. If you use the App from outside the United States, you are transferring your information there.

6. Retention and deletion

We keep your leagues and settings for as long as your account is open. Analytics data is retained for Google's default retention window. Fantasy data read from Yahoo (such as player statistics) may be cached on our servers for no more than 24 hours; the Yahoo access token is never stored (section 2). Your OG status is deleted with your account.

There is no in-app account deletion yet. To delete your account and all of its data, write to support@infinitelives.io from the email address of the Yahoo or Google account you sign in with. We will delete your sign-in record, leagues, projections, settings, lists, push tokens, OG status, the polls you made and your votes, and any invite links you made along with the league copies they hold, and confirm by email. Deleting your account revokes your invite links at once; their copies are not kept for the rest of their 48 hours. Deleted data may persist briefly in encrypted backups before those are cycled out. Aggregate analytics no longer linked to you are not deleted.

7. Security

We protect your data with Google Firebase Authentication, encryption in transit (TLS), and Firestore security rules that limit each document to the account that owns it. Backend endpoints are protected by Firebase App Check. No service can promise perfect security, but we work to keep this one sound.

8. Your choices and rights

Access and edit. You can view and edit your leagues and settings in the App at any time.
Deletion. See section 6.
Analytics. Analytics is off until you allow it. You can change or withdraw that choice at any time under Account → Cookie Preferences.
Notifications. You can turn push notifications off in your browser's site settings.
If you are in the EEA or the UK, you have the right to access, correct, erase and port your data, to object to or restrict processing, and to complain to your data protection authority. We process your data to provide the App you asked for and on the basis of our legitimate interest in keeping it working and secure. Analytics is processed only with your consent.
If you are in California, you have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share your personal information.

To exercise any of these rights, contact us at support@infinitelives.io. We respond to every request, including access and deletion requests, within 30 days.

9. Cookies and browser storage

The App stores some information in your browser. We group it by purpose so you can decide what to allow.

Essential (always on). These are strictly necessary to run the App and cannot be turned off:

Keeping you signed in (Firebase Authentication).
Protecting the App against abuse (App Check / reCAPTCHA security tokens).
Remembering your display choices, such as light or dark theme, which help topics you have read, whether you have seen the welcome message, and a copy of your Players table settings so they apply as soon as the App loads.
Remembering your cookie choice itself.

Analytics (optional, off until you allow it). Google Analytics for Firebase sets cookies (`_ga`, `_ga_<id>`) to measure aggregate usage. These are not set until you opt in. We do not use advertising or marketing cookies.

You choose your analytics preference the first time you open the App, and you can change or withdraw it at any time under Account → Cookie Preferences. Withdrawing consent turns analytics collection off and clears the analytics cookies.

10. Children

Fantasy Apples is not intended for children under 13, or for anyone under 16 in the EEA or the UK unless local law allows a lower age. We do not knowingly collect personal information from them. If we learn that an account belongs to someone under those ages, we delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The effective date at the top shows when it last changed. For material changes we will also tell you in the App.

12. Contact

Questions about your privacy? Contact us at support@infinitelives.io.