Privacy Policy

Forza is currently in a closed beta for invited players. This is a starting draft covering the basics — it has not been reviewed by a lawyer, and should get that review before Forza is opened up beyond a closed friend group.

1. What we collect

Account info: your email address and whatever display name/avatar you set.
If you sign in with Google: your Google account's email address and name, used only to create/authenticate your Forza account — we don't receive your Google password or access anything else in your Google account.
League activity: leagues you join, drafted rosters, trades, waiver claims, chat messages within a draft room — visible to other members of your leagues.
Crash and error diagnostics (which screen/action failed, device type, app version) — not your personal info or request contents, see section 5.

2. What we don't collect

We don't collect payment information (Forza doesn't process payments) and we don't sell your data to anyone.

3. How we use it

To run the app: authenticate you, show your leagues and rosters to you and your league-mates, send email notifications you haven't opted out of (invitations, draft reminders, weekly recaps — see Account Settings to manage this), and to fix bugs when something breaks (via error-tracking tooling).

4. Who can see your data

Other members of a league you're in can see your team name, avatar, roster, and league activity. Your email address is not shown to other members — only used for login and notifications.

5. Third-party services

Forza relies on a small number of infrastructure providers to operate: a database/auth provider (Supabase), an email delivery provider (Resend), sign-in via Google (if you choose that option), an error-tracking tool (Sentry — configured not to receive your personal info or request contents, only crash/error diagnostics), and a hosting provider (Fly.io) for the real-time draft service used by live and mock draft rooms. Each only receives the data needed to perform its function.

6. Your choices

You can opt out of non-critical email notifications anytime from Account Settings or the unsubscribe link in any email. You can permanently delete your account and personal data yourself, anytime, from Account Settings → Delete Account — no need to contact anyone. This actually deletes your login and profile (not just deactivates it); past picks, trades, and draft history you took part in remain visible to your former leaguemates, but are no longer tied to your identity.

7. Contact

Questions about this policy or a data request? Reach out to whoever invited you to your league, or the app's administrator.