Privacy Policy

College Units Fantasy ("CUF," "we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By using CUF, you consent to the data practices described in this Privacy Policy. If you do not agree with this Policy, please do not use the Platform.

This policy complies with applicable U.S. privacy laws, including the California Consumer Privacy Act (CCPA) for California residents.

Information You Provide:

• Account registration data: name, email address, date of birth
• Payment information: processed securely by our payment processor (we do not store full card numbers)
• Identity verification documents (when required for withdrawals or compliance)
• Communications you send to our support team
• Contest entries, draft picks, and gameplay decisions

Information We Collect Automatically:

• IP address and approximate geolocation
• Device information (browser type, operating system, device identifiers)
• Usage data (pages visited, features used, time spent)
• Log data (errors, performance data, API calls)

We use your information to:

• Provide, maintain, and improve the Platform
• Process transactions and manage your account balance
• Verify your identity and eligibility to participate in paid contests
• Comply with legal obligations, including tax reporting requirements
• Detect and prevent fraud, cheating, and abuse
• Send transactional emails (account confirmations, deposit/withdrawal notifications)
• Send promotional communications (only with your consent)
• Respond to customer support inquiries
• Analyze usage patterns to improve the user experience

We do not sell your personal information to third parties for their marketing purposes.

We may share your information with:

• Service Providers: Third-party vendors who assist us in operating the Platform (database hosting, payment processing, email delivery). These providers are contractually obligated to protect your data.
• Legal Compliance: When required by law, court order, or government authority, including to comply with IRS reporting requirements for gambling winnings.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the new entity.
• With Your Consent: Any other disclosures you specifically authorize.

We do not share your contest entries or draft strategies with other users beyond what is publicly displayed in contest results.

We use cookies and similar tracking technologies to:

• Maintain your authentication session
• Remember your preferences
• Analyze Platform usage via privacy-respecting analytics

Types of Cookies:

• Essential: Required for Platform functionality (authentication, security). Cannot be disabled.
• Analytics: Help us understand how users interact with the Platform. Can be disabled.
• Preference: Store your settings and preferences. Can be disabled.

You can control cookie settings through your browser. Note that disabling certain cookies may affect Platform functionality.

We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit
• Database encryption at rest (AES-256)
• Row-level security (RLS) policies enforced at the database level
• Regular security audits and penetration testing
• Secure credential storage using bcrypt hashing

No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you promptly of any security breach affecting your personal information, as required by applicable law.

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

• Account data: Retained while your account is active and for 7 years after closure (for tax/legal compliance)
• Transaction records: Retained for 7 years per IRS requirements
• Compliance logs: Retained for 5 years
• Support communications: Retained for 3 years

After the applicable retention period, we will securely delete or anonymize your data.

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and personal information (subject to legal retention requirements)
• Portability: Receive your data in a machine-readable format
• Opt-out: Unsubscribe from promotional communications at any time

California Residents (CCPA): You have additional rights under the CCPA, including the right to know what personal information is sold or disclosed and to opt-out of the sale of your personal information (we do not sell personal information).

To exercise any of these rights, contact us via our support form.

CUF is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a person under 18, we will promptly delete that information and close the account.

If you believe a minor has created an account on our Platform, please contact us immediately via our support form.

For questions about this Privacy Policy or your personal information, contact us at:

College Units Fantasy — Privacy Team
Contact: collegeunitsfantasy.com/support
Response time: Within 30 days of receiving your request

For California residents who wish to submit a CCPA request, please email us with the subject line "CCPA Request" and include your full name and email address associated with your account.