The short version. We collect only what the game needs: your email, a username, and what you do in your leagues. Other people in your leagues see your username, team name, picture and messages. We do not sell your information, show ads, or track you across other sites. We use one cookie, to keep you signed in.
1. Who we are
3Squads runs this site. Questions about your information: [email protected].
2. What we collect
What you give us
- Account: your email address, a username, and your password. Your password is stored only as a one-way scrambled form, so nobody, including us, can read it.
- Profile: an optional picture (we resize it to a small square and do not keep the original), and your choices about which emails you want.
- Leagues: league names and settings, your team name, your draft picks, lineups, waiver claims and bids, trade offers, and anything else you do in a league.
- Messages: what you write in a league's chat, and notes with invitations.
- Contact messages: if you write to us through the contact form, your name (if you give it), email address and message. We keep them as long as we need to deal with your message and for a reasonable time afterwards. They are deleted if you delete your account.
- Invitations: if you are a commissioner, the email addresses you invite. We store them so we can send the invitation and show you its status.
What the site records as you use it
- Sign-in: a record that you are signed in, so you do not have to log in on every page (see cookies below), and the time your account was made and when you agreed to these policies.
- Server logs: like most websites, our server keeps standard logs of requests (your IP address, the time, the page asked for and your browser type) for security and to find faults.
- Notifications and emails: the notifications shown to you, and a record of the emails we send you, so that we can fix delivery problems.
We do not use advertising or analytics trackers, and we do not collect your location or contacts.
3. Why we use it
- To run the game: to make leagues, drafts, lineups, scores and standings work, and to show you to the other people in your leagues.
- To keep your account safe: signing you in, confirming your email address, resetting a password, and noticing misuse.
- To contact you: account emails, invitations you ask for, and the notifications you choose.
- To keep the site working and improve it, and to follow the law.
4. Who sees what
- Other people in your leagues see your username, team name, picture, roster, results, trades, chat messages, and (once a game has started) your lineup. They do not see your email address.
- A league's commissioner also sees the list of managers, and the addresses they themselves invited.
- Anyone can see a public league's name, settings and how many seats are open. Your profile picture is a plain web address, so anyone who has it can load it.
5. Who else handles your information
We do not sell your information. We use these kinds of companies to run the site, and they only get what they need:
- Hosting (Hostinger): the servers and database where the site and your information live.
- Email delivery (Resend): receives the address, subject and text of each email we send you.
- Team logos (ESPN's image servers): your browser loads each team logo straight from ESPN, so ESPN can see your IP address and browser details, as with any image on a web page.
- Network and security services: a content delivery and protection provider may sit in front of the site and see requests as they pass.
We also download public NFL data (the nflverse project) to work out scores. We send no personal information when we do. We may disclose information if the law requires it, or to protect people's safety or our rights, or if the site is transferred to a new owner (we would tell you).
6. Cookies
The cookie 3squads_session keeps you signed in. It is not readable by scripts on the page and lasts up to 30 days or until you log out. It is needed for the site to work, so we do not ask before setting it.
We set no advertising or tracking cookies, so there is no cookie banner.
7. How long we keep it, and deleting your account
We keep your account information for as long as you have an account, and league records (results, trades, messages) for as long as the league exists, because other people's history depends on them.
You can delete your account yourself at the bottom of your profile. You need your password. What happens:
- We remove your sign-in, your notifications, your email records and any confirmation or reset links, and any invitations sent to your address.
- We strip your username, email address, password and picture from the account. It is kept only as an anonymous number, so your email address and username can be used again by anyone.
- A league that only you were in, and that has not drafted, is deleted. Your seat in any other league that has not drafted is freed.
- In a league that has already drafted, your team stays and plays on automatically as “Former manager”, because other people's results depend on it. Messages you posted there stay, shown without your name.
- If you are the commissioner of a league with other managers, hand it to someone else first (or delete it before its draft). We cannot choose a commissioner for you.
- We email the address once to say it was done, and then we no longer hold it.
If you cannot sign in, write to [email protected] from the address on the account and we will delete it for you within 30 days. We may keep limited records where the law requires it, or to deal with abuse.
8. Your choices and rights
- On your profile you can change your email, password and picture, remove your picture, and choose which emails you get.
- You can delete your account yourself (see section 7). You can ask us to give you a copy of your information or to correct it by writing to [email protected] from the address on the account. We will answer within 30 days.
- Depending on where you live (for example, in the European Economic Area, the United Kingdom or California) you may have further rights over your information. Write to us and we will honour them.
9. Keeping it safe
Passwords are stored scrambled; sign-in and email links are stored only as one-way codes and expire; the connection to the site is encrypted. No system is perfectly safe, so please use a password you use nowhere else. If we learn that your information has been exposed we will tell you as the law requires.
10. Children
The site is not for anyone under 13. We do not knowingly collect information from children under 13. If you think a child has given us information, tell us and we will delete it.
11. Where information is handled
Our service providers may handle information in other countries than yours. We choose providers that protect it appropriately.
12. Changes
We may update this policy. The date at the top shows the latest version, and we will say so on the site or by email if a change matters.