Privacy Policy

Last Updated: July 11, 2026

SquatchyPicks (squatchypicks.com), operated by SpiralOrbit LLC ("SquatchyPicks," "we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Services. If you do not agree, please do not use the Services.

1. Scope and Data Controller

This Policy applies to personal information we collect when you visit squatchypicks.com, use our applications or APIs, or communicate with us. SpiralOrbit LLC (operating as SquatchyPicks) is the "controller" of your personal information under applicable data-protection laws. SquatchyPicks shares a common account and billing system with other SpiralOrbit LLC products; when you use a single sign-on, account data is handled under this Policy for your use of SquatchyPicks.

2. Information We Collect

2.1 Information You Provide

• Account information: name or username, email address, and password (or a token from a sign-in provider) when you create or use an account.
• Sleeper handle: the Sleeper username or user ID you enter to sync your leagues. We use it to retrieve public, read-only league, draft, and roster data from Sleeper's API.
• Payment information: billing details processed securely by Stripe. We do not store full card numbers.
• Preferences & settings: selected leagues, scoring/format settings, saved weights, and notification preferences.
• Communications: messages, support requests, and feedback you send us.

2.2 Information Collected Automatically

• Device & log data: device/browser type, IP address, access times, referring URLs, and error/performance logs.
• Usage data: pages and features used, drafts viewed, clicks, and navigation paths.
• Cookies and similar technologies: see Section 7.

2.3 Information From Third Parties

• Authentication providers (e.g., Google, Microsoft): basic profile information such as name and email, as permitted by those services.
• Sleeper API: public league, draft, roster, and player data associated with the handle you provide.
• Payment processor (Stripe): payment status, last four digits of a card, and fraud indicators.
• Analytics/ad partners: aggregated or de-identified usage statistics.

We do not knowingly purchase personal data from data brokers.

3. How We Use Your Information

4. Legal Bases for Processing (EEA/UK/Switzerland)

• Performance of contract: to provide the Services, operate your account, and process payments.
• Legitimate interests: to secure and improve the Services, prevent abuse, and market similar services to existing customers, where not overridden by your rights.
• Consent: for certain cookies and marketing; you may withdraw consent at any time.
• Legal obligations: to meet accounting, tax, and other legal requirements.

5. Information Sharing and Disclosure

5.1 Service Providers

This lists categories of sub-processors and representative providers. A current list is available on request at privacy@squatchypicks.com.

5.2 Legal, Business Transfers, and Consent

We may disclose information to comply with law or lawful requests, to protect rights and safety, and to enforce our Terms. In a merger, acquisition, financing, or sale of assets, information may transfer as part of the transaction. We may share information for other purposes with your consent.

6. Data Retention

Upon a verified deletion request, we delete or anonymize your personal data within a reasonable period (we target 30 days), except where retention is required by law or for legitimate business purposes such as fraud prevention.

7. Cookies and Tracking Technologies

You can control cookies through your browser settings. Disabling essential cookies may affect functionality. Because we do not "sell" or "share" personal information as defined under U.S. state privacy laws, there is generally no sale or sharing for a Global Privacy Control (GPC) signal to stop; where we receive a GPC signal we will treat it as a valid opt-out to the extent such activity would otherwise apply. We do not currently respond to "Do Not Track" signals, as no uniform standard has been finalized.

8. Your Rights and Choices

• Access, correction, deletion, portability, restriction, objection, and consent withdrawal, subject to legal exceptions and depending on your location.
• Marketing opt-out: use the unsubscribe link or contact us; transactional emails (security, billing) still send as needed.
• Account controls: review and update account information in your settings.

To exercise these rights, contact privacy@squatchypicks.com. We may verify your identity and will respond within the timeframes required by law (generally 30–45 days).

9. Data Security

We use reasonable technical and organizational measures, including encryption in transit (TLS) and at rest, secure authentication (OAuth 2.0, password hashing), access controls, monitoring, and secure cloud infrastructure (Microsoft Azure). However, no method of transmission or storage is completely secure; you provide information at your own risk and are responsible for keeping your credentials confidential.

10. Children's Privacy

The Services are intended for adults (18+; see the Terms of Service) and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact privacy@squatchypicks.com and we will delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where we or our service providers operate, which may have different data-protection laws than your country. Where required, we implement appropriate safeguards such as Standard Contractual Clauses and data-processing agreements.

12. U.S. State Privacy Rights

Residents of California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have rights to know, access, correct, delete, and port their personal information, to opt out of targeted advertising, sale, or profiling, and to non-discrimination for exercising these rights. We do not sell personal information. To exercise these rights, contact privacy@squatchypicks.com. Nevada residents may opt out of the sale of covered information (we do not sell it).

13. European Privacy Rights (GDPR/UK GDPR)

If you are in the EEA, UK, or Switzerland, you have the rights in Section 8 plus the right to lodge a complaint with your local supervisory authority. We process data on the legal bases in Section 4 and honor consent withdrawal without affecting prior lawful processing. For data-protection inquiries, contact privacy@squatchypicks.com.

14. Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date shows the latest revision. For material changes we will provide additional notice (e.g., a prominent notice on the site or an email). Where required by law, we will obtain your consent. Continued use after changes take effect constitutes acceptance.

15. Contact Us