Privacy
Projections, players, games and accuracy need no account. An account is free and only keeps your leagues with you on every device.
What we store: your username; your password as a one-way hash (we can't read it); an email address if you give one; the Sleeper leagues you follow; and a record of each signed-in device (no IP address, no browser details).
Sign-in with Google or Discord is not offered yet. If it is added, this page will say what they share with us before it goes live.
Email is optional and used only to send password reset links. No newsletters, no tracking.
New passwords are checked against Have I Been Pwned without sending the password: only the first five characters of its SHA-1 hash leave our server.
Deleting your account (Account page) removes all of the above at once, and signs you out everywhere.
Your leagues are read from Sleeper's public data; we never change anything on Sleeper.
Analytics
We count how the site is used so we can make it better. We run this ourselves: no ad networks, no third-party trackers, and we never sell or share it.
What we record
- The pages you open and features you use, for example opening a player.
- The website that sent you, and campaign tags on links we post.
- Your country (from our network provider), device type and browser family.
What we never record
Your IP address, your full browser string, the full address of the page that sent you, or what you type in search.
Cookies
vf_vid is a random ID that lets us tell a returning visit from a new one. It lasts 13 months. vf_consent remembers your analytics choice, and it also lasts 13 months. Both belong to voltfantasy.com only.
Your choice
Visitors in the EU and the wider EEA (including Iceland, Liechtenstein and Norway), the UK and Switzerland are asked before we set the vf_vid cookie. Until they answer, we count their page views with no ID. If your browser sends Global Privacy Control, or you turn analytics off, we still count the page view but with no ID and no cookie.
How long we keep it
Individual events are deleted 90 to 120 days after they happen. We delete them a whole month at a time, so an event from early in a month goes when that month does. Hourly totals are deleted after 120 days. Daily totals stay. A visitor ID we have not seen for 13 months is deleted.