Privacy Policy

We collect only what we need to operate the platform and deliver the features you ask for. This includes anonymous, aggregated usage and demographic data that does not identify you individually, and personal information you choose to provide, such as when:

• •Registering for a DD Fantasy Football account (name, email address, and account preferences);
• •Purchasing a membership or product, where payment details are collected and processed directly by our PCI-compliant payment processor — we never store full card numbers on our systems;
• •Connecting a fantasy league via Sleeper, MFL, FFPC, ESPN, Underdog, or another supported platform;
• •Requesting a roster review, trade question, or other creator service;
• •Entering a contest, redeeming a promotion, or opting into email updates;
• •Contacting us by email or through an in-app form.

Many DD Fantasy Football tools — Portfolio, Trade Room, Lineup Optimizer, Bulk Waivers, WAR Machine and others — work by syncing your fantasy league data from third-party platforms such as Sleeper, MyFantasyLeague, ESPN, and Underdog. When you connect a league, we retrieve league settings, rosters, transactions, matchups, draft picks, and your public platform username or team identifiers so the tools can analyse your teams.

• •We only sync leagues you explicitly connect, and only the data required to power the features you use.
• •Synced league data is used to serve your account. We do not sell it, and we do not publish your league data to other users outside of features you deliberately choose to share.
• •Platform credentials and access tokens (where a platform requires them) are stored encrypted as secrets and are never exposed in the browser or in our client-side code.
• •You can disconnect a league at any time from your Portfolio. Disconnecting stops future syncs and removes the associated cached league data from your account.

Your use of a connected platform remains subject to that platform's own terms and privacy policy. DD Fantasy Football is not affiliated with, endorsed by, or operated by Sleeper, MyFantasyLeague, ESPN, Underdog, Yahoo, or the NFL.

• •Operate, maintain, and improve the site, tools, and analytics you have requested;
• •Authenticate you, secure your account, and enforce membership entitlements;
• •Process payments, renewals, receipts, and support requests;
• •Send service communications such as account, billing, and security notices;
• •Send product updates or offers where you have opted in — you can unsubscribe at any time;
• •Detect, investigate, and prevent abuse, scraping, fraud, and security incidents.

We do not use your personal information or your synced league data to train third-party models, and we do not sell it.

We apply high-standard, defence-in-depth security practices across the platform and review them on an ongoing basis. Current controls include:

• •Encryption in transit (HTTPS/TLS) across the entire site and API surface, and encryption at rest for stored data;
• •Row-level security on our database so records are scoped to the authenticated account that owns them;
• •Managed authentication with hashed credentials, secure session handling, and optional social sign-in — we never store your password in plain text;
• •Least-privilege access: administrative capability is restricted to a small, verified set of staff accounts and validated server-side, never from the browser;
• •Secrets and third-party API keys stored in a managed secret store, never in our source code or shipped to your browser;
• •Server-side input validation, rate limiting, and anti-abuse protections on sensitive endpoints;
• •Payment card data handled entirely by our PCI-DSS compliant payment processor.

No online service can guarantee absolute security, and we do not claim to. What we do commit to is protecting your data with the strongest reasonable safeguards available to us, limiting what we collect, and responding promptly if an issue is identified. If you believe you have found a security vulnerability, please contact us privately so we can investigate before any public disclosure.

DD Fantasy Football does not sell, rent, or lease your personal information or your league data.

We share information only with the service providers required to run the platform — including hosting and database infrastructure, payment processing, email delivery, error monitoring, and fantasy platform integrations you have connected. These providers may only access information to perform services for us, and are contractually required to keep it confidential and secure.

We may disclose information where required to do so by law, or where we hold a good-faith belief that disclosure is necessary to comply with legal process or to protect the rights, safety, or security of our users and platform.

We retain account and league data for as long as your account is active, or as needed to provide the service, meet legal and accounting obligations, and resolve disputes. Cached league data is refreshed on sync and removed when you disconnect a league.

You can review and update your details from your account settings, disconnect leagues at any time, opt out of marketing email using the unsubscribe link, and request access to or deletion of your personal information by contacting us. We will action verified requests within a reasonable period, subject to any records we are legally required to keep.

We use cookies, local storage, and browser databases to keep you signed in, remember your preferences and filters, and cache large datasets so tools load quickly. We also use privacy-conscious analytics to understand aggregate usage. You can clear this data through your browser at any time, though doing so will sign you out and reset your saved preferences.