Seventi Fantasy · Seventi AG

Privacy

How Seventi Fantasy processes personal data when you use the service.

Effective date: 21 August 2026

Operator and contact

Seventi Fantasy is operated by Seventi AG, Switzerland. For privacy questions or requests, email support@seventi.com.

Data we process

We process information you provide, information created through fantasy play, and technical information needed to run the service. If you contact support, we also process your email address, message and any screenshot or other material you choose to send. The categories are described below.

Why we process data

We use data to create and authenticate accounts, operate leagues and drafts, manage rankings and Queue entries, rosters and lineups, calculate scores and matchups, administer waivers, trades and transactions, show in-product notifications, secure and support the service, and diagnose failures.

Account and authentication data

Current registration uses an email address and password. Legacy accounts may also have a username. We store the account display name, an internal user ID, a salted password hash, session tokens and, when created in a supported non-production recovery flow, password-reset records. A hosting environment may supply a visitor ID for session recovery. The current signup flow does not collect a phone number.

Fantasy league and gameplay data

We store league membership and visibility, team and league names, commissioner relationships, draft settings and selections, rankings and Queue choices, rosters, lineups and game locks, waiver claims, trades, transaction and notification records, matchups, scoring and competition history, together with related timestamps.

Technical and usage data

The service records first-party product events and error diagnostics in its own database. API logs include request method, route, response status, timing and timestamps. An IP address is used temporarily in memory to rate-limit authentication attempts. The application code does not persist browser user-agent details. Locale, theme and the app session token are stored on the user’s device. WebSocket connections use the account session and league ID while connected.

Service providers and data sources

The current production architecture uses Railway for API hosting and persistent SQLite storage, Vercel for the public website, ordinary email infrastructure for support messages, and Google Fonts for web fonts. Hosting providers may process IP addresses and request or network metadata in infrastructure logs. Browsers may send similar network information when requesting Google font files. If the app is obtained through Google Play, Google processes store and device information under its own terms.

Sports data

The server obtains hockey schedules, players, statistics and results from public National League and SIHF sources. Current server requests to those sources do not include Seventi account or fantasy-league data.

Information visible to other managers

Fantasy competition requires some information to be visible to other managers. Depending on league visibility and participation, this can include a manager or team display identity, league membership, commissioner role, draft selections, roster and lineup information, matchup results and transactions. Public-league previews may show league and manager display information before a user joins.

Other disclosures

We may provide information to infrastructure providers acting for the service, or disclose it where required by applicable law, to protect users or the service, or in connection with a corporate reorganisation or transfer. The current product has no advertising or data-broker integration.

Data security

We use measures appropriate to the service, including salted password hashing, bearer-session authentication, server-side fantasy permissions, restricted production access and HTTPS transport. No internet service can guarantee absolute security. Please keep your password and session information confidential.

Account deletion

In the app, open Account → Delete account and complete the confirmation. You may also send a deletion request to support@seventi.com from the email address associated with the account. An email request does not delete the account automatically; support may verify account ownership first. Completed deletion is permanent. If a live or paused draft is in progress, the app requires that draft to finish or be cancelled before deletion can complete.

What deletion removes

When deletion completes, active sessions and password-reset records are deleted, the login credential is invalidated, and the email address, phone field, username and personal display identity are removed or replaced. Private rankings and Queue data, private notifications, pending waiver claims, user-linked diagnostics and non-shared first-party analytics are removed.

Shared competition history after deletion

Some shared fantasy records remain in anonymised form where needed to preserve other managers’ league history. These can include league membership references, draft picks, rosters, lineups and locks, matchups, playoff qualifiers, processed waivers and trades, and add/drop/waiver ledger events. The visible identity and team name are replaced with the neutral label Deleted Manager. Lobby-only membership is removed, and unfinished transactions cannot process for the deleted account.

Retention

We retain account and gameplay data while it is needed to provide and administer the service. Account-associated personal data is deleted or anonymised when account deletion completes, as described above. Shared competition history may remain anonymised. Security, operational, support and legal records may be kept as reasonably necessary for security, fraud prevention, legal obligations or dispute handling. No single fixed retention period applies across every category; retention depends on the purposes and circumstances described above.

Your privacy rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction or objection, and data portability. You may also ask how your data is handled. Contact support@seventi.com. We may need to verify your identity before acting on a request.

Children and minimum age

You must be at least 12 years old to use Seventi Fantasy. If you become aware of an account used by someone under 12, contact support@seventi.com. The current service does not verify a user’s age during registration.

International processing

Railway, Vercel, Google and email infrastructure may process technical or service data outside Switzerland, depending on provider configuration and service location. Such processing remains subject to applicable data-protection requirements and the relevant provider arrangements.

Policy changes

We may update this policy when the product, providers or legal requirements change. The current version and its effective date will be published on this page.

Contact

Privacy questions and requests can be sent to Seventi AG at support@seventi.com.