Privacy Policy

AllFather is operated by BROKKR TECHNOLOGIES LLC, a Texas limited liability company ("AllFather," "we," "us," or "our"). This Privacy Policy explains what personal information we collect when you use allfatherfantasy.com and our related services (the "Service"), how we use it, who we share it with, and the choices and rights you have.

We are the data controller for the personal information described here. Our contact details are at the end of this policy.

AllFather is an informational fantasy-football companion. It is not a gambling, sportsbook, or daily-fantasy betting service, and we do not endorse, promote, or facilitate gambling. We built it to help you make season-long fantasy football decisions, not to place bets.

Information you give us directly. When you create an account we collect your name, email address, a username, and (for email sign-ups) a password, which we store only as a one-way hash. If you customize your profile, we store an avatar image and your favorite NFL team. When you paste or import a roster, we store your player list, league name, and scoring format.

Content you create. When you chat with Counsel we store your messages and the AI's responses so the conversation has continuity. When you post in the community Feed, Forum, or live-game chat, we store that content and the username attached to it.

From fantasy platforms you connect. If you connect ESPN, Yahoo, or Sleeper, we receive and store the data needed to sync your leagues — your league name and ID, roster, scoring settings, and the access credentials or tokens you authorize. You can disconnect a platform at any time from Settings.

From Google, if you sign in with Google. We receive your name, email address, profile photo, and a Google account identifier.

Payment information. If you subscribe, payments are processed by Stripe. We never see or store your full card number — we keep only a Stripe customer ID, your plan, and your subscription status.

Information we collect automatically. Like most websites, we collect limited technical data such as your IP address, browser and device type, and how you use the Service. We use product analytics (PostHog) to understand usage and error monitoring (Sentry) to fix bugs; our error monitoring is configured to scrub personal identifiers by default.

We use the information above to:

• provide, maintain, and improve the Service;
• ground Counsel's answers in your actual roster and leagues;
• create and secure your account, and verify it's really you;
• process subscriptions and billing (through Stripe);
• send transactional email (for example, password resets and service notices);
• detect, prevent, and respond to fraud, abuse, and security issues;
• operate community features, including moderation of posted content;
• understand product usage so we can make AllFather better; and
• comply with our legal obligations.

For users in the EEA/UK, our legal bases are: performance of our contract with you (to provide the Service), our legitimate interests (to secure and improve the Service), your consent (for non-essential analytics cookies), and compliance with legal obligations.

Counsel is powered by Anthropic's Claude models, accessed through Anthropic's API. Your chat content is sent to Anthropic to generate responses. Anthropic does not use API inputs or outputs to train its models. We never sell your data, and we never train any external AI model on your roster or chat content.

We do not sell your personal information. We share it only with service providers who process it on our behalf to run the Service, and only as needed for the purposes above. Our key providers ("subprocessors") include Microsoft Azure (hosting, database, and file storage), Anthropic (AI), Stripe (payments), Resend (email), PostHog (analytics), Sentry (error monitoring), Cloudflare (security and content delivery), and Inngest (background jobs). If you connect a fantasy platform, data also flows to and from that platform. See our list of subprocessors.

We may also disclose information if required by law, subpoena, or valid government request, or to protect the rights, safety, and security of our users, the public, or AllFather. If AllFather is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We use essential cookies that are required for sign-in and security, and — only with your consent — analytics cookies (PostHog) that help us understand usage. We do not use third-party advertising trackers and we do not build advertising profiles about you. You can manage your choices through our cookie banner, and you can read the details in our Cookie Policy.

We keep personal information only as long as we need it. As a guide:

• Account, profile, rosters, and chat history — for as long as your account is active, or until you delete them.
• Connected-platform credentials — until you disconnect that platform or delete your account.
• Community posts — until you delete them or close your account; a "removed by author" placeholder may remain so replies stay readable.
• Billing records — as long as required for tax and accounting purposes.
• Analytics and usage data — typically up to 13 months.
• Security and server logs — for a short rolling window.
• Password-reset tokens — one hour, single use.

When you delete your account, we remove your profile, rosters, and chat history within 7 days. Residual copies in encrypted backups are purged within about 30 days.

We use appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), encryption at rest for our database and file storage, hashed passwords, access controls, rate limiting, and brute-force protection on sign-in. No method of transmission or storage is 100% secure, but we work to protect your information and to respond promptly to any incident.

Depending on where you live, you may have some or all of the following rights: to know what we collect, to access a copy of your data, to correct it, to delete it, to receive it in a portable format, and to opt out of the "sale" or "sharing" of your personal information. We do not sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of — but you can still exercise your other rights at any time.

The fastest way: you can delete your account and download a copy of your data yourself from Settings. You can also email us at legal@allfatherfantasy.com and we will respond within the time required by applicable law (generally 45 days for U.S. state requests and 30 days under GDPR). We will not discriminate against you for exercising your rights.

In the past 12 months we have collected the following categories of personal information: identifiers (such as name, email, username, account ID, and IP address); customer records and commercial information (such as your plan and subscription status); internet and network activity (such as usage and chat content); coarse geolocation inferred from IP address; visual information (your profile avatar, if you upload one); and the content you create (rosters, chats, and community posts). We collect this from you directly, from fantasy platforms you connect, and automatically as you use the Service. We use it for the business purposes described in "How we use your information" above.

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that would require an opt-out. California residents have the rights to know, access, correct, delete, and not be discriminated against, which you can exercise as described under "Your privacy rights" above.

AllFather is operated from, and intended for users in, the United States, and your information is processed in the U.S. If you access the Service from the EEA, the UK, or elsewhere, you understand your data will be transferred to and processed in the United States, which may have different data-protection laws than your country. Where required, we rely on appropriate safeguards for international transfers. EEA/UK users also have the right to lodge a complaint with their local data-protection authority.

AllFather is not directed to children. You must be at least 13 years old to use the Service. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has given us personal information, contact us at legal@allfatherfantasy.com and we will delete it.

AllFather is an independent product and is not affiliated with, endorsed by, or sponsored by the National Football League (NFL), the NFL Players Association (NFLPA), ESPN, Yahoo, Sleeper, or any fantasy provider.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective" date above and, where appropriate, notify you by email or a notice in the Service. Your continued use after the changes take effect means you accept the updated policy.

Questions about this policy, or to exercise a privacy right:

BROKKR TECHNOLOGIES LLC
5931 Aramburo Lane
Sugar Land, Texas 77479
legal@allfatherfantasy.com