Privacy
Policy

Who operates Fantopy

Fantopy is operated by Benchwarmer Studios Pte. Ltd., a private limited company incorporated in Singapore (UEN 202539650Z). References to "Fantopy", "we", "us", or "our" in this policy mean Benchwarmer Studios Pte. Ltd.

Registered office: 160 Robinson Road, #14-04 Singapore Business Federation Center, Singapore 068914.

For any privacy or data protection question, contact us at support@fantopy.ai.

What Fantopy is

Fantopy is a Premier League fantasy football app. You can build squads, enter competitions, use optional owner-connected agents, and compare results on leaderboards.

Fantopy is an independent product. We are not affiliated with, endorsed by, sponsored by, or officially connected to the Premier League, its clubs, or any player. References to leagues, clubs, and players are descriptive only.

Data we collect

We collect only what we need to operate the product. Categories include:

Account data

• Email address when you request and verify a one-time sign-in code.
• Account identifiers generated by our authentication provider, including a Supabase user ID and authentication session metadata.

Browser session

• Browser storage maintains your signed-in session. The Premier League web game uses a server-side account with a verified email address.

Profile and game identity

• Your display name, team identity, competition memberships, and leaderboard position.

Fantasy and gameplay data

• Squads, competition entries, transfers, points, and leaderboard rank generated by your activity.

Agent activity

• Actions performed through your connected agent, including the acting account, time and relevant game changes.

Agent permission data

• Agent connection type, permission scopes, key name, status, and last-used time. Secret keys are shown once to the owner and are not displayed again.

Diagnostics and logs

• IP address or a derived identifier, user agent, request paths, timestamps, server errors, crash reports, stack traces, and browser or app version information.

Support communications

• Emails to support@fantopy.ai, support ticket context, and any screenshots or details you choose to send us.

Playing the current game does not require payment card, bank account, or digital-asset account details. We do not request contacts, calendar entries, SMS, call logs, health data, or precise location for gameplay. If you email support, your message may contain details or attachments you choose to send.

How we use data

We use the data we collect to:

• Run the Fantopy app, including authentication, fantasy squads, competitions, leaderboards, groups, and optional AI-agent permissions.
• Score fantasy squads and maintain leaderboards using fixture and result data from third-party sports data providers.
• Enforce the permissions you grant your agent and record actions taken through your account.
• Diagnose errors, fix bugs, and keep the service reliable and secure.
• Respond to your support requests and reports of unexpected activity.
• Detect and prevent abuse, fraud, and violations of our Terms of Use.
• Comply with legal obligations.

We do not sell access to you to advertisers and we do not train third-party machine learning models on your data without an appropriate legal basis. The app-hosted review and legal pages do not load advertising trackers. If we add optional analytics or advertising measurement to a separate marketing site in the future, we will disclose it before enabling it.

Agent processing

Fantopy supports agents you choose and operate. We record the connection, permissions, tool requests and resulting game actions needed to enforce your choices and protect the service.

Agent access is controlled by the account owner. Owners can grant scoped permissions and revoke access when it is no longer needed.

Your chosen agent may make mistakes. Check important squad and competition choices in your account, and revoke a connection if you no longer want it to act.

Third-party service providers

We use service providers to run Fantopy. Your chosen agent is a separate service under your control. Provider categories include:

• Authentication and account hosting for sign-in, account identity, and the user database.
• Your chosen agent service receives account and game information within the permissions you grant. Its own privacy terms govern how it handles that information.
• Sports data providers that supply fixtures, results, and player data used for scoring and leaderboards.
• Hosting, backend, and database providers that run our infrastructure.
• Error diagnostics that help us identify and fix bugs.
• Web fonts loaded on the Fantopy website.
• Email and support tooling for handling messages sent to support@fantopy.ai.

An up-to-date list of the specific named providers is available from support@fantopy.ai on request.

What we do not do

• We do not sell personal data.
• We do not collect payment card, bank account, or digital-asset transaction details for current free play.
• Connecting an agent, entering a competition, or finishing the seven-day introductory period does not automatically charge you.
• Competition entry fees and organiser budgets use virtual credits with no cash redemption or automatic prize distribution.
• We do not knowingly collect data from children under 13.

Retention and deletion

We keep account, gameplay, permission and support records as long as needed to operate Fantopy, respond to requests, meet legal obligations and protect the service. After a verified deletion request, we delete or anonymise eligible personal data. Some competition results may remain in anonymised form so other players' standings still make sense. Backup copies may persist until replaced through the normal backup cycle.

• Account records: kept while needed to operate your account and handle deletion or legal requests.
• Fantasy and leaderboard entries: after account deletion, squad, competition, and leaderboard records may be anonymised and retained so that historical leaderboards and competition results remain intact.
• Agent connection and activity records: kept as needed to show and audit access granted to your account.
• Support messages and diagnostics: kept as needed to investigate and resolve requests or security issues.

We may retain limited records for longer where we are required to do so to comply with law, resolve disputes, or enforce our Terms of Use.

Account deletion

You can request deletion of your Fantopy account at any time:

• From the web: visit fantopy.ai/account-deletion.html to prepare an email request.
• By email: write to support@fantopy.ai from the email address you signed in with.

The web page opens your email app; you must send the message for us to receive it. We may confirm that you control the account email before processing a request. We will reply with the outcome and explain any records we must retain. Clearing browser storage does not delete your server-side account.

Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your account and personal data, subject to the retention rules above.
• Withdraw consent or object to processing where the processing relies on consent or legitimate interests.
• Receive a portable copy of certain personal data you have provided.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email support@fantopy.ai from the address linked to your Fantopy account. We may confirm account ownership before acting and will respond in line with applicable law.

If you are in Singapore, Benchwarmer Studios Pte. Ltd. is the responsible organisation under the Personal Data Protection Act 2012 (PDPA). If you are in the European Economic Area or the United Kingdom, we process your data in line with the GDPR or UK GDPR; the legal bases we rely on are typically the performance of our agreement with you, our legitimate interests in operating and securing the service, and your consent where applicable.

Children and minors

Fantopy is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13. If you are between 13 and 18 (or the age of majority in your jurisdiction), please use Fantopy only with the involvement of a parent or guardian, and only where local law allows.

If you believe a child under 13 has provided us with personal data, email support@fantopy.ai and we will delete the data where required.

Profiling and automated decisions

We do not use your personal data to make decisions about you that have legal or similarly significant effects through fully automated means. Agent features may generate responses or actions in real time within permissions the owner grants, but they do not decide eligibility, pricing, or anything similar based on profiling.

Cookies and similar technologies

The Fantopy website and app use cookies and similar technologies limited to what is needed to operate the service, understand website traffic, and measure marketing:

• Authentication and session cookies set by us or our authentication provider to keep you signed in.
• Preference cookies that remember settings like your language or display choices.
• Diagnostics set by our error and crash diagnostics provider, when enabled, to identify and fix issues.

Loading web fonts on the website may also involve a network request to the font provider that includes your IP address and basic browser information.

You can control cookies through your browser settings. Disabling essential cookies may prevent parts of Fantopy from working.

Links to third-party sites

Fantopy may contain links to third-party websites, apps, or services we do not operate, including the websites of our service providers. We do not control those sites and are not responsible for their privacy practices or their content. If you follow a link, you should read the privacy policy of the site you are visiting.

Security

We use HTTPS and TLS for data in transit, restrict access to systems holding personal data, log administrative access, and rely on managed cloud providers that maintain industry-standard security controls. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security, but we work to apply reasonable safeguards appropriate to the data we hold.

International processing

Fantopy is operated from Singapore, and our service providers (including those listed in section 06) operate infrastructure in jurisdictions that may include Singapore, the United States, the European Economic Area, the United Kingdom, and other regions. Your personal data may be transferred to and processed in those jurisdictions.

Where personal data is transferred internationally, we rely on contractual safeguards, the legal frameworks our processors maintain, and providers whose practices we consider appropriate for the data involved.

Changes to this policy

We may update this Privacy Policy when the product, our processors, or applicable law changes. When we do, we will update the effective date at the top of this page and, for material changes, we will notify you through the website or by email where required.

Contact

For any privacy question or request:

• Email: support@fantopy.ai
• Operator: Benchwarmer Studios Pte. Ltd., Singapore

The support page explains how to contact us.