Privacy Policy

Last updated: February 2025. UK GDPR compliant.

Data Controller

The data controller for Fantasy Steam League is Max Wilson. Contact: support@fantasysteam.com.

Lawful Basis for Processing

We process your data on the basis of: (a) contract — to provide the service you sign up for; (b) legitimate interests — to operate and improve the service; and (c) consent — where you explicitly opt in (e.g. marketing, if applicable).

What Data We Collect

Authentication (Google): When you sign in with Google, we receive your email address, display name, and profile photo. This is used to identify you and display your profile in leagues.

Firestore: We store your league memberships, team names, draft picks, and scores. This data is necessary to run the fantasy league.

How We Use Your Data

We use your data to provide the Fantasy Steam League service: creating and joining leagues, running drafts, calculating scores, and displaying leaderboards. We do not sell your data.

Third Parties

Firebase (Google): Hosts our authentication and database. Google processes data in accordance with their privacy policy.

IGDB / Steam: We fetch game metadata and scores from these services. We do not send your personal data to them.

Data Sources

Fantasy Steam League is not affiliated with Steam or Valve. It uses data from the following third-party services. Game covers and metadata are attributed to their respective providers.

IGDB (Twitch)

Game metadata, cover images, genres, and company information are sourced from IGDB . Cover images are served from images.igdb.com .

Steam

Review counts and concurrent player (CCU) data come from Steam. Game pages link to the Steam store for each title.

Firebase (Google)

Authentication (Sign in with Google) and database storage (leagues, teams, picks, scores) are provided by Firebase .

Data Retention

We retain your data for as long as your account and leagues are active. If you request erasure, we will delete your personal data within 30 days, except where we must retain it for legal obligations.

Your UK GDPR Rights

Under UK GDPR you have the right to:

Access — request a copy of your data
Rectification — correct inaccurate data
Erasure — request deletion of your data
Restriction — limit how we process your data
Portability — receive your data in a portable format
Object — object to processing based on legitimate interests
Withdraw consent — where processing is based on consent
Complain to the ICO — the UK supervisory authority: ico.org.uk

To exercise any of these rights, contact support@fantasysteam.com.

International Transfers

Firebase may process data in the US or other countries. Google provides appropriate safeguards (e.g. Standard Contractual Clauses) for international transfers. See Firebase's privacy documentation.

Cookies

We use cookies for authentication and session management. See our Cookie Policy for details.

Contact

For privacy enquiries: support@fantasysteam.com.