1. Who we are
The Service is operated in connection with Gander Labs. CEBL Fantasy League is an independent fan fantasy basketball experience and is not affiliated with the Canadian Elite Basketball League (CEBL), Basketball Canada, or their respective licensors. Names and marks are used for identification only.
2. Information we collect
- Account and profile. Email address, password (stored only as a secure hash), display name, profile image URL if you add one, and account settings. If you verify your email, we store verification status and related timestamps.
- Fantasy and gameplay data. Leagues you join or create, teams, rosters, draft picks, trades, waivers, scores, and other game actions needed to run leagues and display standings and history.
- Community features. Forum posts, comments, subscriptions, and moderation records where applicable. In-league and support chat messages you send, including timestamps and, where we log it for safety or legal compliance, network information associated with a message.
- Payments (Premium). If you subscribe or pay for optional features, our payment processor (Stripe) collects and processes payment method details. We receive limited billing metadata from Stripe (for example customer and subscription identifiers, payment status, and what you purchased)—not your full card number.
- Optional integrations. If you link Discord, we store your Discord user identifier and related linkage needed to manage roles or features you choose. Discord’s own privacy policy applies when you use their services.
- AI features. If you use tools that call AI services (for example lineup or roster assistance), your prompts and minimal context needed for that request may be sent to our AI provider. Do not submit sensitive personal data in free-text prompts.
- Technical data. IP address, browser type, device identifiers, cookies or similar technologies used for sessions, security, and basic operation (for example keeping you signed in).
3. How we use information
We use the information above to:
- Provide, operate, and improve the Service (accounts, leagues, scoring, drafts).
- Authenticate you, protect accounts, detect abuse, and enforce our Terms of Service.
- Send service-related emails (for example verification, password reset, league notices) using our email delivery provider when configured.
- Process payments and manage Premium access through Stripe.
- Operate community features, moderation, and support conversations.
- Comply with law and respond to lawful requests.
- Measure aggregate product usage with analytics tools when you opt in to optional analytics (see Cookies below).
4. Cookies and similar technologies
We use cookies and similar technologies that are necessary to operate the Service, including authentication and session management, security, and remembering preferences such as display theme. Third-party sign-in (for example Discord) may set additional cookies governed by their policies.
Optional analytics. If you choose “Accept analytics” in the cookie banner, we load Google Analytics 4 (Google) to understand traffic and usage in aggregate. If you choose “Essential only,” we do not load that analytics script. Your choice is stored in your browser (typically localStorage) so we can respect it on return visits. You can change your choice anytime via Cookie preferences in the site footer.
5. Sharing and subprocessors
We do not sell your personal information. We share data only as needed to run the Service, including with:
- Infrastructure. Hosting and database providers where the application and data are stored.
- Payments. Stripe, for payment processing and subscription management.
- Email. Transactional email providers when we send email through them.
- AI. Model providers when you use AI-powered features.
- Discord. When you connect Discord or use Discord-related features, subject to Discord’s terms and policies.
- Analytics. Google (Google Analytics 4) when you opt in to optional analytics cookies, subject to Google’s terms and policies.
- Legal. When required by law or to protect rights, safety, and integrity of users and the Service.
6. Retention
We keep information for as long as your account exists and as needed to provide the Service, resolve disputes, and meet legal obligations. Some data may persist in backups for a limited period. You may request deletion of your account subject to our ability to retain certain records where the law requires.
7. Security
We use industry-standard measures appropriate to the nature of the Service (for example encryption in transit, access controls, and hashed passwords). No method of transmission or storage is 100% secure; use a strong, unique password and protect your login credentials.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, or delete personal information, or to object to or restrict certain processing. You can update much of your profile in account settings. To exercise other rights or ask questions, contact us using the channels linked from the site footer (for example Gander Labs). We may need to verify your identity before fulfilling requests.
9. Children
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will take steps to delete it.
10. International users
We may process and store information in Canada and other countries where our providers operate. By using the Service, you understand your information may be transferred to jurisdictions with different data protection laws.
10. Changes
We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the updated policy where permitted by law.
12. Contact
Questions about this Privacy Policy: email [email protected]. For more information, use the contact options linked in the site footer, including Gander Labs.