Home › Privacy Policy

Privacy policy

Fantasy Lens is built on the promise that your league data works for you and goes nowhere else. This page is that promise written out properly, in the order it actually matters.

Last updated 10 August 2026. Fantasy Lens is operated from Australia and is bound by the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth).

The short version. We hold three things: your email address, your league captures, and a record of whether you have paid. We do not sell any of it, we do not share it with your league, and we do not pool league captures across users to build a database of who owns what. You can delete the lot at any time and we will not keep a copy.

What we collect

Your email address

Collected when you create an account, and separately if you subscribe to our newsletter. It is how you sign in, since we email you a link rather than asking you to invent a password.

Your league captures

When you use the capture tool, it reads the rosters of the teams in your fantasy league from a page you are already looking at, and stores the result against your account. That is player names, team names, round numbers, and where the competition provides it, prices and remaining salary. It is the same information every member of your league can already see on the competition's own website.

Your account status

Whether you are on the free or paid tier, and when your leagues were last updated. If you buy a season pass, payment is handled by our payment provider and we never see or store your card details.

What we do not collect

We never ask for your login details for any fantasy competition, and there is nowhere on this site to enter them. This is structural rather than a policy we could quietly change: Fantasy Lens has no field for a fantasy competition password and no connection to those services. The capture runs inside your own browser using the session you are already signed in with.

We do not run advertising trackers, third-party analytics pixels, or behavioural profiling of any kind.

Where it lives

Until you create an account, everything stays in your own browser's local storage and never reaches us at all. Once you sign in, your leagues sync to a database hosted by Supabase so that they survive a lost laptop and follow you between devices. The site itself is hosted by Vercel.

Both providers act as processors on our behalf and may store or serve data outside Australia. Row level security is enabled on every table, which means the database itself enforces that one account cannot read another account's leagues.

Cookies and local storage

We use local storage in your browser to keep your leagues available offline and to remember which league you had open. We use a cookie only to keep you signed in. There are no advertising or tracking cookies, so there is no consent banner, because there is nothing to consent to.

Email: two separate lists

These are deliberately kept apart. Subscribing to one never subscribes you to the other, and leaving one never affects the other.

The Thursday LensAccount and product email
What it is A weekly newsletter about the round ahead. Public, anyone can subscribe. Sign-in links, receipts, and notices about your account.
Who gets it Anyone who ticks the box on the signup form. Anyone with an account. These are not marketing.
Contains your league data Never. Every reader gets an identical email. Never, unless you have switched on personalised alerts.
How to stop it The unsubscribe link in any issue. It works immediately. Delete your account. Sign-in links only arrive when you request one.

Personalised alerts

We are building an optional alert that tells you when a player in your own team is ruled out. It is off by default and will require you to switch it on explicitly, separately from the newsletter. It is not running yet and no such email has ever been sent. When it does launch, this page will say so before the first one goes out, and turning it off will stop us processing your league data for it, not merely stop the sending.

What we will never do

Three commitments, worth stating plainly because they are the ones that would be tempting to break later.

How long we keep it

League captures stay until you delete them or delete your account. Newsletter subscriptions stay until you unsubscribe, after which we keep only the record needed to make sure we do not email you again. Records we are legally required to retain, such as tax records for a purchase, are kept for as long as the law requires.

Your rights

Under the Australian Privacy Principles you can ask us to:

Deleting a league inside the app deletes it from our database, not just from your screen. Deleting your account removes your leagues with it. Email privacy@fantasyleaguelens.com for anything you cannot do yourself and we will respond within 30 days.

If you are not satisfied with how we have handled a privacy matter, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Security, honestly stated

Access is per account and enforced by the database. Sign-in uses emailed links, so there is no password of ours to leak. That said, no system is perfectly secure, and it would be dishonest to claim otherwise. If we ever have a breach that is likely to cause you serious harm, we will tell you and the Commissioner, as the Notifiable Data Breaches scheme requires.

Children

Fantasy Lens is not intended for children under 15. We do not knowingly collect their information, and we will delete it if we find we have.

Changes

If we change this policy we will update the date at the top. If a change materially affects how we handle your league data, we will email account holders before it takes effect rather than quietly republishing the page.

Contact

privacy@fantasyleaguelens.com

Related