Privacy Policy

This Privacy Policy explains how VeloFantasy (“we”, “us”) collects, uses, and shares your personal data when you use our fantasy cycling game at velofantasy.com (the “Service”). By using the Service, you agree to the practices described here.

1. Information we collect

• Account information — your email address, username, and a securely hashed password when you register.
• Gameplay data — the teams you build, your rider picks, predictions, booster plays, league memberships, and standings.
• Payment information — when you buy credits, payment is processed by Stripe. We do not see or store your full card details; we retain a record of your purchases and credit balance.
• AI feature inputs — if you use our optional AI features, the relevant game data (e.g. your team, the stage) is sent to our AI provider to generate a response.
• Technical data — basic logs such as IP address, browser type, and pages visited, used to operate and secure the Service.

2. How we use your data

• To create and manage your account and run the game.
• To process credit purchases and maintain your balance.
• To send you service emails (verification, password resets, transfers) and, where relevant, occasional game updates. You can opt out of non-essential emails.
• To provide optional AI features you choose to use.
• To secure the Service, prevent abuse, and comply with legal obligations.

3. Who we share it with

We do not sell your personal data. We share it only with the service providers we rely on to run VeloFantasy, and only as needed:

• Stripe — payment processing.
• Resend / Amazon SES — sending email.
• Anthropic — powering optional AI features.
• Our hosting and storage providers — running the app, database, and image storage.

These providers process data on our behalf under their own terms and security commitments. We may also disclose data if required by law.

4. Cookies

We use a small number of essential cookies to keep you signed in and secure your session. We do not use them for third-party advertising.

5. Data retention

We keep your data for as long as your account is active. If you delete your account or ask us to remove your data, we will delete it, except where we are required to keep certain records (for example, payment records for tax and accounting).

6. Your rights

Depending on where you live (including under the EU/UK GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, contact us at [email protected]. You can also unsubscribe from non-essential emails at any time via the link in those emails.

7. Security

We protect your data with measures such as encrypted connections (HTTPS) and hashed passwords. No system is perfectly secure, but we work to keep your data safe.

8. Children

VeloFantasy is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, for significant changes, may notify you by email.

10. Contact

Questions about this policy or your data? Email us at [email protected].