⚽FantasyRateMate
Español ← Back
Privacy & security

Your data, under lock

At Fantasy RateMate we only ask for what the game needs, we encrypt what's sensitive and we never sell your information. Here's exactly what we store and how we protect it.

Last updated: 9 July 2026Scope: Fantasy RateMate mobile app
🔒
🔐

Encrypted passwords

We never store your password in the clear: it's kept as a secure hash that can't be reversed.

🛰️

Secure connection

All communication with the server travels encrypted over HTTPS/TLS.

🚫

No data selling

We don't sell or share your data for advertising. Full stop.

1Introduction

Fantasy RateMate is a private fantasy sports app for groups of friends. This policy explains what personal data we process when you use the app, for what purpose and what rights you have. By creating an account and using the app you accept what's described here.

2Data we collect

We only collect the data needed for the game to work:

  • Account data: alias, email address and password (always stored encrypted as a hash).
  • Profile photo (optional): the image you upload is used as your player's face across your leagues.
  • Game content: leagues and players you create, lineups, votes you cast, wall posts and photos, comments and reactions.
  • Technical data: session tokens, and —if you enable alerts— a device identifier to send you push notifications.
We do not request or collect location data, contacts, or payment information.

3How we use it

  • Create and manage your account and sign you in securely.
  • Run the game: leagues, market, lineups, voting and scoring.
  • Send app alerts (matchday open, voting, results) if you have them enabled.
  • Allow password recovery via a code sent to your email.
  • Handle your support requests.

5Data security

We apply technical measures to protect your information:

  • Hashed passwords: stored encrypted with a secure hashing algorithm; no one —not even us— can read them.
  • Encrypted transport: all communication between the app and the server goes over HTTPS/TLS.
  • Robust sessions: we use short-lived access tokens and rotating refresh tokens, revoked on any suspicious use.
  • Restricted access: access to the database is limited and protected by credentials.
No system is 100% infallible, but we work to protect your data using industry best practices.

6Who we share it with

We don't sell your data. To run the app we rely on trusted providers (data processors) that process data only on our behalf:

RenderServer (backend) hosting.
NeonPostgreSQL database.
Cloudflare R2Photo storage.
Expo / GooglePush notification delivery.
Google (Gmail)Sending emails (e.g. password recovery).

Some providers may host data outside the European Economic Area; in that case the appropriate safeguards required by law apply (e.g. standard contractual clauses).

7Retention

We keep your data while your account is active. When you delete your account, we remove your personal data. Certain historical league results may be kept anonymised so as not to break the standings for other participants.

8Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time:

  • Rectification: edit your alias, photo and player data from within the app.
  • Erasure: delete your account and data from Profile → Delete account.
  • Other rights: write to us and we'll take care of them.
You also have the right to lodge a complaint with the competent supervisory authority (in Spain, the Spanish Data Protection Agency).

9Minors

The app is not directed at children under 14. If you believe a minor has provided us with data without appropriate consent, contact us and we'll delete it.

10Changes to this policy

We may update this policy to reflect changes in the app or in the law. We'll publish the current version here with its update date.

11Contact

For any privacy question or to exercise your rights, write to us:

Questions about your data?

We'll get back to you as soon as we can.

✉️ Write to us