Privacy Policy

Last updated November 7, 2026

SportsRPG is a browser game run by Brett Feldman in the United States ("we"). This page explains what we collect when you play, why, who else handles it, and how to see or delete it. We don't show ads, we don't sell or share your data for advertising, and we don't use third-party analytics or tracking cookies.

What we collect

Your account: the username you choose and your password, stored only as a scrypt hash. We can't read your password.
An email address, if you add one: it's optional. We store it only after you open the confirmation link, and we use it only to send that link and password reset links.
Your game: your career save, activity feed, market listings and orders, club membership, tournament entries and similar game records.
What you write: club chat messages, club names and descriptions, reports you file about other players, and feedback you send from Settings.
Sign-in sessions: a random session cookie, plus a coarse device label such as "Chrome on Android" and when each session was last used, so you can see and sign out your devices.
Push notifications, if you turn them on: the push address your browser gives us.
Technical data: your IP address is used briefly to limit sign-in and sign-up attempts. Server logs record each request's path, status, timing and account id, but not request bodies, cookies or passwords. If the game crashes in your browser, it sends us the error message so we can fix it.

Cookies and local storage

We set one cookie, sid, which keeps you signed in for up to 30 days. Your display settings (theme, sound, number format) are kept in your browser's local storage. The game also caches its own files so it loads quickly and can open offline.

What other players see

Your username, level, profile, leaderboard positions, club and market listings are visible to other players. Club chat is visible to members of that club. Moderators can see reports and the chat messages they point to.

Why we use it

To run your account and the game you signed up for: your account, save, sessions and what you write.
To keep the game safe and working: IP-based sign-in limits, server logs, crash reports, moderation and backups.
Because you chose to: your email and push notifications. You can remove either at any time.

Who else handles your data

These companies process data for us only to provide their service. All store it in the United States, so if you play from elsewhere, your data is transferred to and kept in the United States.

Hosting: the game runs on Fly.io.
Database: game and account data are stored in a PostgreSQL database run by Neon.
Backups: an encrypted copy of the database is made daily and stored with GitHub.
Email: confirmation and reset messages are sent through Resend. Mail to our support address passes through Cloudflare.
Push: notifications travel through your browser maker's push service (for example Google, Mozilla or Apple).

How long we keep it

Your account and game data are kept while your account exists.
Sessions end after 30 days or when you sign out. Email links expire after 24 hours (confirmation) or 30 minutes (password reset).
Encrypted database backups are kept for 14 days, so deleted data can remain in them until they expire.
Server logs are kept by our host for a short time and then deleted.

Your choices

Download your data: Locker, then Account, then "Download my data".
Delete your account: Locker, then Account, then "Delete account". Your name becomes "deleted player" everywhere other players can still see your old chat or trades. Your save, email, sessions, push subscriptions, activity and feedback are removed. Deleting can't be undone.
Remove your email or sign out other devices from the same Account card.
Anything else: to ask what we hold about you, correct it, delete it or object to how we use it, email support@sportsrpg.app. We answer within 30 days. Depending on where you live, you may also complain to your local data protection authority.

Children

SportsRPG is for players 13 and older. We don't knowingly collect data from children under 13. If you think a child under 13 has an account, email support@sportsrpg.app and we will delete it.

Changes

If we change this policy, we'll update the date above and say so in the game's "What's new" notes.

Contact

Email support@sportsrpg.app, or when signed in use Settings, then "Send feedback".

Terms