Privacy Policy

1.Information We Collect

We collect information in two ways: information you provide directly, and information collected automatically when you use the Service.

1a. Information you provide

• Account credentials — Your username and email address, used to create and authenticate your account. Passwords are stored as one-way cryptographic hashes and are never stored in plain text.
• Profile information — Optional fields you may choose to fill in: first name, last name, a short bio (up to 500 characters), favorite sport, favorite team, OOTP forum username, social media profile links, a profile image, and a status message.
• Account security settings — Whether you have enabled two-factor authentication (2FA) on your account and related preferences.
• Privacy preferences — Settings that control how your profile information is visible to other users of the Service.
• Content you post — League news, draft activity, roster moves, and other content you submit while using the Service.
• Support communications — Messages you send via our contact form or support email.

1b. Information collected automatically

• Log data — When you sign in or use the Service, our servers record your IP address, browser user-agent string, the date and time of the request, and whether authentication was successful.
• Activity logs — We record in-platform activity events (such as roster changes, draft picks, and league administration actions) associated with your account, along with the IP address and browser user-agent string at the time of each action. These logs are used for security auditing and dispute resolution.
• Session data — We use server-side sessions to keep you signed in between page visits. A session identifier cookie is stored in your browser for this purpose.
• Last-active timestamp — We track when your account was last active on the Service.

2.Payment Information

Subscription payments are currently processed through external payment providers (such as PayPal, Venmo, or similar services) entirely outside the SimLeaguesPro platform. All financial transactions are completed directly through those providers’ own interfaces and are governed by their respective privacy policies.

When a payment is confirmed, SimLeaguesPro records only the following non-sensitive transaction metadata:

• A unique internal transaction reference ID.
• The payment amount and currency.
• The transaction status (e.g., pending, completed, refunded).
• The name of the external payment provider used (e.g., “PayPal”).
• An external reference token or transaction ID issued by the provider — not a card number or bank account number.
• The subscription plan associated with the payment.

Future integrations with payment processors such as Stripe are planned. When implemented, all payment data will be tokenized by the processor; SimLeaguesPro will store only the payment token issued by the processor, never raw card data.

3.How We Use Your Information

We use the information we collect to:

• Create and manage your account, and authenticate you when you sign in.
• Display your profile to other users in accordance with your privacy settings.
• Operate league features including standings, rosters, drafts, statistics, and news feeds.
• Process and record subscription payments and maintain your subscription status.
• Send transactional communications related to your account (e.g., password resets, subscription notices, security alerts).
• Provide customer support and respond to your inquiries.
• Detect, investigate, and prevent fraudulent or unauthorized activity and abuse of the Service.
• Comply with legal obligations and enforce our Terms of Use.
• Improve, maintain, and develop the Service (using aggregated, anonymized data where possible).

We do not sell your personal information. We do not use your information to serve third-party advertising.

4.Cookies & Similar Technologies

SimLeaguesPro uses cookies and similar browser-storage mechanisms solely to operate the Service:

• Session cookies — A strictly necessary cookie that identifies your login session. Without it, you cannot remain signed in. This cookie expires when your session times out or you sign out.
• CSRF tokens — A security token embedded in forms to protect against cross-site request forgery attacks. This is a security requirement, not a tracking mechanism.
• Preference cookies — Small values that remember UI preferences between visits.

We do not use third-party advertising cookies or behavioral tracking cookies. If you disable cookies in your browser, the Service may not function correctly and you will not be able to sign in.

5.How We Share Your Information

We do not sell, rent, or trade your personal information. We may share it only in the following limited circumstances:

• Other users of the Service — Profile information you make public (such as your username, bio, and profile image) is visible to other registered users. You control visibility via your privacy settings.
• Service providers — We may share information with trusted vendors who help us operate the Service (e.g., web hosting, email delivery, cloud storage). These vendors are contractually obligated to process your data only on our behalf and in accordance with this Policy.
• Payment processors — When you make a payment, we share only the information necessary to complete the transaction with the external payment provider. That provider’s privacy policy governs how they handle your financial data.
• Legal requirements — We may disclose your information if required to do so by law, subpoena, court order, or other governmental request, or when we believe disclosure is necessary to protect the rights, property, or safety of SimLeaguesPro, our users, or the public.
• Business transfers — If SimLeaguesPro is acquired or merged with another entity, your information may be transferred as part of that transaction. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.

6.Third-Party Integrations

The Service may offer optional integrations with third-party platforms, including Discord for league notifications and community features, and cloud-storage providers for sim data exports (available as a paid add-on). When you connect a third-party integration, that platform may receive information necessary to operate the integration (such as your Discord user ID or username).

Your use of any third-party service is subject to that service’s own privacy policy. SimLeaguesPro is not responsible for the data practices of third-party services.

SimLeaguesPro is not affiliated with, endorsed by, or sponsored by Out of the Park Developments GmbH or any other simulation game publisher. Statistics and game data you import are processed only as instructed by you.

7.Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service:

• Account data — Retained until you request deletion. After deletion, personal identifiers are removed from active systems within 30 days.
• Activity logs and login records — Retained for up to 12 months for security and fraud-prevention purposes, then purged.
• Transaction records — Retained for a minimum of 7 years to comply with financial record-keeping obligations. These records contain only transaction metadata — no payment card numbers.
• Support communications — Retained for 3 years after the close of the support interaction.

We may retain anonymized or aggregated data indefinitely for operational and analytical purposes; such data cannot be used to identify you.

8.Security

We implement reasonable technical and organizational measures to protect your personal information, including:

• Passwords stored using one-way cryptographic hashing (bcrypt).
• CSRF token validation on all state-changing requests.
• Optional two-factor authentication (2FA) for your account.
• IP address and user-agent logging on authentication events to detect unauthorized access.
• HTTPS encryption for all data in transit.

Despite these measures, no method of Internet transmission is 100% secure. We cannot guarantee absolute security. If you become aware of any unauthorized access to your account, please notify us immediately at support@simleaguespro.com.

9.Your Rights & Choices

Regardless of where you are located, we provide all users with the following choices:

• Access and correction — You can review and update most of your personal information at any time from your account settings page.
• Privacy settings — You can control what profile information is visible to other users via the privacy settings in your account.
• Account deactivation — You may deactivate your account from the account settings page. Deactivated accounts are hidden from other users.
• Account deletion — To request full deletion of your account and personal information, contact us at support@simleaguespro.com. We will process your request within 30 days, subject to the legal retention obligations described in Section 7.
• Data portability — To request a copy of the personal information we hold about you, contact us at the address below.

If you are a resident of the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under applicable data protection laws (such as the GDPR or CCPA). Please contact us to exercise those rights and we will respond within the timeframe required by applicable law.

10.Children’s Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@simleaguespro.com and we will take steps to delete that information promptly.

11.Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the revised Policy on this page and update the “Last updated” date above. For significant changes that affect how we use your personal information, we will make a reasonable effort to notify registered users via email or an in-app notice at least 14 days before the changes take effect.

Your continued use of the Service after the effective date of any revised Policy constitutes your acceptance of those changes. If you do not agree, you should stop using the Service and may request deletion of your account.

The most current version of this Privacy Policy is always available at https://www.simleaguespro.com/privacy.