Rewind Fantasy
Privacy Policy
Last updated 7 September 2026
Rewind Fantasy is a daily game, not a data business. There is no advertising on it, no analytics package, no tracking pixels, and nothing here is sold or shared for marketing. This page says exactly what is collected and who else touches it.
Rewind Fantasy is operated by RR6 Consulting ("we", "us"), which is the controller of the personal data described below. Questions, requests and complaints go to rewindfantasyinfo@gmail.com.
What we collect
Automatically, on every visit
Opening the site creates an anonymous account so you can play without signing up. That account is a random identifier and nothing else — no name, no email, no profile. If you never sign in, that identifier and any rounds attached to it are all we hold.
If you create an account
- Your email address, whether you sign up with a password or through Google
or Apple. From Google and Apple we request only the standard sign-in scopes
(
openid, email, basic profile) and we store the email address. - A display name you choose. It is yours to pick and to change.
When you play
- The seven players you drafted, your score, how many seconds were left when you submitted, and the date you played.
- Nothing about your device beyond what any web server sees.
Display names that get refused
Display names run through a word filter. When one is refused, the text you tried is recorded along with your account identifier. That log exists for one reason: it is the only way we ever find out the filter has wrongly refused a legitimate name. It is not used for anything else.
What we do not collect
No analytics or usage statistics. No advertising or advertising identifiers. No third-party trackers or tracking cookies. No location data. No payment details — the game is free and takes no payments. We do not sell, rent or share personal data for anyone's marketing, and we never have.
What is stored on your device
We set no cookies. Two things are kept in your browser's own storage:
| Your sign-in session | Kept in localStorage by our authentication provider so you stay signed in
between visits. Clearing your browser data signs you out. |
|---|---|
| A sign-in note | Kept in sessionStorage: which provider you last pressed, so that if the
sign-in bounces back with an error we can recover it. It lasts as long as the tab. |
Neither is used to track you, here or anywhere else.
Who else processes it
We use a small number of service providers. They act on our instructions and may only use the data to provide their service to us.
| Supabase | Database and sign-in. Holds your account, display name and rounds. Hosted on Amazon Web Services in the United States (US East, Ohio). |
|---|---|
| Vercel | Hosts and serves the site. Keeps ordinary server logs, which include IP addresses. |
| Resend | Sends account email — confirmation and password reset. Receives your email address. |
| Google Fonts, jsDelivr | Serve the typefaces and one JavaScript library the page loads. As with any resource a browser fetches, they receive your IP address as part of the request. |
| Google, Apple | Only if you choose to sign in with them, and only then. Their own privacy policies govern what they do with that. |
Where your data lives. Our database and hosting are in the United States. If you use the site from elsewhere, your data is transferred there.
What other players can see
If you have signed in and chosen a display name, that name and your score appear on the daily leaderboard. Your lineup does not, and that is deliberate — showing it would spoil the day for anyone who has not played yet. Your email address is never shown to anyone. Guests are not ranked and do not appear at all.
How long we keep it
- Your account and rounds: for as long as the account exists.
- Anonymous accounts: every visit creates one, so most are empty. Empty ones older than 30 days are deleted.
- Refused display names: kept while we are still tuning the filter.
Your choices
Email rewindfantasyinfo@gmail.com and we will:
- Delete your account, which removes your profile and every round attached to it.
- Send you a copy of what we hold about you.
- Correct anything that is wrong.
You can change your display name yourself at any time from the account panel in the menu.
Depending on where you live you may have further rights — to object to or restrict processing, or to complain to your data protection authority. Ask us and we will help rather than make you argue for it.
Children
Rewind Fantasy is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, write to us and we will remove it.
Security
Accounts and game data are protected by row-level security in the database, which means one player's queries cannot reach another's rounds. Scoring is computed on the server and never sent to the browser during a round. No system is perfect, and we do not claim otherwise.
Changes to this policy
If this policy changes materially we will update the date at the top of this page. Continuing to use the game after a change means you accept it.
Contact
RR6 Consulting
rewindfantasyinfo@gmail.com