Privacy Policy
Last updated: 6 October 2026
1. Who is responsible for your data
LYRIDS OÜ, registry code 14707080, Lasnamäe tn 4b-26, Lasnamäe linnaosa, Tallinn, Harju maakond, 11412, Estonia, is the data controller.
Contact: social@goodgamefantasy.com
2. Limited Use disclosure (Chrome Web Store)
Our use of information received from Google APIs, and any user data our extension collects, adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We only collect and transmit data necessary for the extension's single purpose: showing fantasy basketball projections and analysis on the pages of the fantasy league you are signed in to.
We do not sell your data. We do not use it for advertising or for personalised ad targeting, and this applies to data derived from it. We do not allow humans to read it except where you ask us for support, where we need to for security or abuse investigation, or where the law requires it.
3. What we collect
Account data. Your email address and a hashed password. If you sign in with Google, the email address and name Google gives us.
League data read by the extension. When you open your fantasy league pages, the extension reads what is displayed to you: your team and roster, your opponent's team and roster, player names, positions and statuses, your league's settings and scoring categories, matchup scores, and the names of other teams in your league.
With your permission, the extension also loads other pages from your league in the background using your own Yahoo session — the player pool, rosters within your league, and the matchup pages of other teams — so it can show the free agent pool and the league-wide view. You are asked for this permission the first time a feature needs it, and you can withdraw it at any time from the extension. Without it those features do not run.
The extension does not read any other website and does not record your browsing history. It runs only on fantasy league pages.
Yahoo connection. If you connect your Yahoo account, we store the access tokens needed to keep that connection working.
Payment data. Handled by Stripe. We receive a customer identifier, the plan you bought, and whether the payment succeeded. We never receive your full card number.
Technical data. IP address, browser type, and server logs, kept for security and to diagnose faults.
Support messages. Whatever you send us when you write in.
4. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the Service you signed up for | Performance of a contract |
| Processing payments and preventing fraud | Contract; legal obligation |
| Reading additional league pages in the background | Consent |
| Sending reminders and alerts you turned on | Consent |
| Keeping the Service secure and investigating abuse | Legitimate interests |
| Improving our projections and product | Legitimate interests |
| Answering your support messages | Contract; legitimate interests |
Where we rely on legitimate interests we have weighed them against your rights. You can object — see section 8.
Other people's data. To show your matchup and your league-wide view we necessarily read information about other managers in your league: their team names and rosters. We keep this to what the feature needs, do not collect manager names, email addresses or profile details, and do not use it for anything other than showing you your own league.
5. Who we share it with
| Provider | What for | Where |
|---|---|---|
| Vercel | Running the website and API | EU / US |
| Supabase | Database and authentication | EU (North) |
| Stripe | Payments | EU / US |
| Titan Email | Transactional email | EU / US |
We may also disclose data if the law requires it, or to protect our rights or the safety of others. We do not sell your data and do not share it with advertisers or data brokers.
6. International transfers
Some providers process data outside the European Economic Area, including in the United States. Those transfers are covered by the European Commission's Standard Contractual Clauses or, where the provider participates, the EU–US Data Privacy Framework.
7. How long we keep it
| Data | Retention |
|---|---|
| Account data | While your account exists, then 30 days |
| League data | While your account exists, then 30 days |
| Payment and accounting records | 7 years, as Estonian accounting law requires |
| Server logs | 90 days |
| Support messages | 2 years |
You can delete your account at any time from your account settings. Doing so removes your account, your stored league data, your preferences and any connected account credentials from our active database, and cancels any recurring billing. Backup copies may persist until their retention period ends.
8. Your rights
If you are in the EU, EEA or UK you have the right to:
- see what we hold about you;
- correct it;
- have it deleted;
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw consent at any time where we rely on consent;
- complain to a supervisory authority.
Our supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), aki.ee. You may also complain to the authority where you live.
To exercise any of these, write to social@goodgamefantasy.com. We respond within one month.
9. If you are in the United States
Depending on your state, you may have the right to know what personal information we collect, to have it deleted, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information for cross-context behavioural advertising. To make a request, write to social@goodgamefantasy.com. We will not treat you differently for exercising a right.
10. Children
The Service is not for people under 18. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.
11. Cookies
We use cookies necessary to keep you signed in and to keep the Service secure. We do not use advertising or tracking cookies.
12. Security
We use encryption in transit, hashed passwords, and access controls. No system is perfectly secure; if a breach affects your rights we will notify you and the supervisory authority as the law requires.
13. Changes to this policy
If we change how we handle your data we will update this page and, as the Chrome Web Store requires, tell you before the change takes effect — by email or in the extension itself.
14. Contact
LYRIDS OÜ Lasnamäe tn 4b-26, Lasnamäe linnaosa Tallinn, Harju maakond 11412, Estonia social@goodgamefantasy.com