Privacy Policy

BlitzCap is a free fantasy football game operated by Tanner Matthew Rohr, an individual, in California. We collect the minimum needed to run it: an email address to sign you in, a username and team name you choose, your confirmation that you are 13 or older, and the moves you make in the game.

There is no analytics, tracking, advertising, or third-party marketing software on this site of any kind — no Google Analytics, no pixels, no session recording, no ad networks. We do not sell or share your personal information, and we do not use it to build a profile of you.

When you sign in. Sign-in is passwordless — a one-time email link, or Google. Either way our authentication provider stores your email address and timestamps for when the account was created, confirmed, and last used.

If you use Google sign-in, Google returns a standard profile payload that is retained with your authentication record. It includes your full name, a link to your Google profile picture, your email and its verified status, and Google’s account identifier. BlitzCap never displays, uses, or copies your real name or photo anywhere in the game — the only name shown to anyone is the username you choose. We are disclosing this because the data is retained even though it is unused.

What you give us in the game. Your username, your team name, your confirmation that you are 13 or older, and which week you joined.

What you do in the game. The players you add and drop, the prices you paid, your rosters, your weekly scores, and any groups you create or join (including invite links you generate).

What we do not collect. No payment details (there is nothing to pay for), no date of birth, no phone number, no address, no precise location, and no contacts.

Public — visible to anyone, including people who are not signed in:

• your username;
• your team name;
• your settled weekly scores and the rosters for weeks that have already completed;
• which week you joined.

Private — visible only to you:

• your live roster and any unsaved or in-progress moves for the current week;
• your full transaction history (every add, drop, and price you paid);
• any preseason roster you build before the season starts;
• your email address, and anything Google returned about you.

This split is enforced in the database itself, not just hidden in the interface. Group membership is visible to other members of that group.

We use two cookies. Neither is used for advertising or tracking.

• A session cookie, set by our authentication provider, which keeps you signed in. Without it you would have to sign in on every page.
• bc_pending_invite, a short-lived cookie that remembers which group invite link you opened so that you still join the right group after clicking your sign-in email.

We use three service providers. We do not sell your data to anyone.

• Supabase — our database, authentication, and the service that sends sign-in emails. It stores your account record and all game data.
• Vercel — hosting. As part of serving the site it records standard request logs, which include IP addresses, user agents, and the pages requested.
• Google — only if you choose Google sign-in, to verify who you are and return the profile payload described in section 2.

Player statistics and draft-position data come from public third-party sources. Those are data about players, not about you, and we send nothing about you to them.

We keep your account and game data for as long as your account exists, so that scores and history stay intact across a season. Hosting request logs are kept for a short period by our hosting provider under their own retention schedule.

You can delete your account yourself, from the Account page. It asks you to type your username to confirm, then signs you out. You will not be able to sign back in with that account.

If you cannot reach your account — locked out, lost access to the email — write to blitzcapgame@gmail.com from the address you signed up with and we will do it for you.

What is removed: your login is disabled, your email address is erased from our records along with any Google profile data held with it, and your username and team name are permanently replaced with anonymous placeholders. None of it can be linked back to you.

What is kept, and why: your weekly scores stay on the season leaderboard under the anonymous name. Removing them would change every other player’s past standings — someone who finished below you would silently move up, weeks after the fact — so we keep the numbers and drop the identity. For the same reason, any group you created stays open for its members.

Two honest caveats. Copies held in database backups age out on their own schedule rather than immediately. And the preview image that appears when someone shares a link to your profile is regenerated from your anonymized details — our own copies of it expire within minutes — but if you shared such a link before deleting, the app you shared it in may keep its own copy for longer, which is outside our control.

Your email address is freed when you delete, so you are welcome to sign up again later with the same address. That creates a genuinely new account, not a restoration of the old one.

You can change your username and team name at any time from your account settings, and you can request a copy of your data or its deletion by emailing blitzcapgame@gmail.com.

If you are a California resident, you have rights under the CCPA/CPRA to know what personal information we hold, to have it deleted, and to correct it. We do not sell or share personal information, so there is nothing to opt out of. We will not treat you differently for exercising any of these rights.

BlitzCap is not for children under 13. You confirm you are 13 or older when you sign up, and we do not knowingly collect information from anyone under 13. If you believe a child under 13 has an account, email blitzcapgame@gmail.com and we will delete it.

Sign-in is passwordless, so there is no password of yours for us to lose. Access to private data is enforced at the database level. That said, no service is perfectly secure, and because sign-in works by email, anyone who controls your email account can sign in as you — please keep it protected.

If we change what we collect, we will update this page and its “last updated” date. This document is a draft pending legal review and is expected to change.

Questions: blitzcapgame@gmail.com. See also our Terms of Service.