Privacy Policy

Who this policy covers

MySquad is operated by Techsport Innovation. This policy describes how we handle information when you visit our website, create an account or use our fantasy-team and league features. For privacy questions and requests, contact Techsport Innovation at the address below.

Information we handle

Account information includes your email address, display name, sign-in provider and email-verification status. Profile information can include your country and favorite team. Our authentication provider processes the credentials you use to sign in.

Game and community information includes your teams, league memberships, selections, transfers, results, achievements, messages and feedback. If you contact us by email, we receive your address, message and any attachments you choose to send.

Device and service information includes browser and device details, IP addresses, session activity, technical logs and push-notification tokens when you enable notifications. Usage and performance information is described under Analytics and browser storage.

How we use information

We use information to create and secure accounts, run teams and leagues, calculate and display results, maintain device sessions, deliver selected notifications, send essential account emails and answer support requests. We also use technical and usage information to diagnose problems, understand how the service is used and investigate misuse.

What other participants can see

Your display name, team identity, league participation, rankings and game activity can be visible to other participants through the features you use. Messages are visible to people who can access the relevant conversation or league. Do not include private information in publicly visible names or messages. Other people may retain copies of content they have seen.

Service providers and disclosures

We use service providers for hosting, storage, sign-in, notifications, email and technical operations. These include Google Firebase for authentication and push notifications, Amazon Web Services for backend processing and storage, Vercel for website hosting and performance measurement, and PostHog for aggregate usage measurement. Account-email delivery can use Firebase or Resend, depending on the email and the delivery configuration. Our contact mailbox is hosted by Gmail.

Providers process information needed for their roles, such as account identifiers for sign-in, email addresses and message contents for delivery, and technical data for hosting and diagnostics. Processing may take place outside your province or country, including in the United States, where local laws may permit access by authorities.

We may disclose information when required by law or when legally permitted and necessary to investigate misuse, protect users or operate and secure the service. Contact us for questions about providers or the handling of your information.

Analytics and browser storage

The app uses browser storage to maintain sign-in state, device sessions, preferences such as language and appearance, and local app functionality. Blocking or clearing this storage can sign you out or reset preferences.

When enabled on the deployed website, PostHog measures visits, page categories, active time and successful game actions, such as creating a team or saving a lineup. Our integration uses cookieless measurement and does not send account names, email addresses, account IDs, URL parameters or message contents in these events. Session recording is disabled. PostHog processes technical request information to estimate visits; these estimates are not a count of registered accounts. Vercel Web Analytics and Speed Insights measure page usage and loading performance, including page addresses, referrers, browser/device characteristics, approximate location and performance metrics. Vercel describes its Web Analytics service as cookie-free.

You can restrict cookies and tracking through your browser controls or extensions. These controls do not remove operational records already collected or disable information needed to provide the service. Contact us if you have questions about analytics or requests concerning your information.

Your choices and requests

Settings lets you edit supported profile details, choose language and appearance, manage push-notification categories, view and revoke registered device sessions and request deletion. Password accounts can change their password and verify a new email address; credentials for Google-only accounts are managed through Google.

Your browser or device also controls permission for push notifications. Essential account-security emails are separate from optional push preferences.

For access, correction, deletion, consent-related questions or a privacy complaint beyond the available controls, contact us below. We may need to verify your identity. We will explain any limits that apply to your request and respond as required by applicable law.

Deletion and retention

We keep active account and game records to provide the features you use. Deletion requires recent sign-in and confirmation. You must first resolve any leagues you own. The background deletion process removes your sign-in account and active personal account records, including your profile, teams, memberships and messages. A completion email is sent after processing succeeds.

Deletion does not necessarily remove shared competition history, copies retained by other participants, operational logs or backups. Shared history can still contain names or identifiers from earlier activity. Retention depends on the record and its purpose, including continuity of shared results, recovery, security investigations and applicable legal requirements; this policy does not promise a fixed deletion period for those records. Contact us to ask about retained information or request further review.

Protecting your information

We use authentication, access controls and other operational safeguards to help protect information. No service can guarantee complete security. Keep your credentials private, review your device sessions and contact us if you suspect unauthorized access. We never need your password or an authentication code in a support email.

Children and young users

MySquad does not provide a separate child-account or parental-consent process. Where a young person cannot provide valid consent or enter an agreement independently, the permission and involvement required by applicable law must be in place. If you believe a child has provided personal information without the required permission, contact us so we can review and address it.

Changes to this policy

We will update the date on this page when this policy changes. For material changes affecting how we handle personal information, we will provide an appropriate notice through the service or email and seek consent where required by applicable law.