Fantasy Manager · Effective date: July 29, 2026
This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use the Fantasy Manager mobile application and website (together, the "Service"). We process your data lawfully, fairly, and transparently in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Fantasy Manager is an AI-assisted analytics tool for fantasy football, provided for informational and entertainment purposes only. It is not affiliated with, endorsed by, or sponsored by the NFL, Sleeper, or any team, league, or player.
The controller within the meaning of Art. 4(7) GDPR is:
Lukas Schachtmaier & Johann Warkentin GbR (honeyapps)
Represented by: Lukas Schachtmaier, Johann Warkentin
Rosenstraße 19
38550 Isenbüttel
Germany
Phone: +49 174 9783003
Email: info@honeyapps.de
VAT ID (§ 27a UStG): DE461049022
Full provider identification is available in our Imprint.
Account & profile
Fantasy football data
Information about other members of your league. When you connect a Sleeper league, the league data we retrieve necessarily includes information about the other managers in that league — their public Sleeper username and display name, avatar, roster composition, and win/loss record. We process this data because it is an inseparable part of your league (Art. 6(1)(f) GDPR — our and your legitimate interest in providing league analysis), display it to you in the app, and include it in AI-generated analyses (e.g. matchup previews). We do not use other managers' data for any other purpose, and we do not contact them. If you are such a league member and want your data removed from a user's account, contact info@honeyapps.de.
Usage, device & technical data
Subscription & purchase data
We do not knowingly collect special categories of data (Art. 9 GDPR); please do not submit such information through the Service.
Provision of the Service (Art. 6(1)(b) GDPR – performance of a contract):
Consent (Art. 6(1)(a) GDPR):
Legitimate interests (Art. 6(1)(f) GDPR):
Legal obligation (Art. 6(1)(c) GDPR): compliance with legal obligations and enforcement of our terms.
Some features send relevant fantasy context to our AI processor (Anthropic PBC, USA — "Claude") to generate a response. Depending on the feature, this context can include: your rosters, matchups, league settings and standings; your question and the recent conversation history, including summaries of your previous Copilot conversations; your in-app personalization profile (e.g. risk tolerance, experience level, preferred level of detail); display names of other managers in your league; and a pseudonymous user identifier used for rate limiting and abuse prevention. We never send your email address, password, or payment details to the AI provider. Under our agreement with Anthropic, API data is not used to train AI models. AI outputs are generated automatically, may be inaccurate, and are provided for informational and entertainment purposes only. We keep technical AI-usage telemetry (model, token counts, latency) for up to 90 days; it is deleted earlier if you delete your account.
Supabase (database & authentication)
Provider: Supabase Inc., 970 Mission Street, San Francisco, CA 94103, USA
Server location: EU (Ireland)
Privacy: https://supabase.com/privacy
Purpose: storage of account and fantasy data, user authentication.
Basis for third-country transfer: EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Vercel (web hosting & CDN)
Provider: Vercel Inc., San Francisco, USA
Privacy: https://vercel.com/legal/privacy-policy
Purpose: hosting of the web service and edge/server logs (incl. IP address).
Basis for third-country transfer: EU Standard Contractual Clauses.
Upstash / Vercel KV (caching)
Purpose: caching and rate limiting to keep the Service fast and secure. No profile data is stored beyond short-lived counters and cache entries.
Anthropic (Claude – AI processing)
Provider: Anthropic PBC, San Francisco, USA
Privacy: https://www.anthropic.com/legal/privacy
Purpose: AI processing for assistant, rankings, and analysis features. Receives the fantasy context needed to generate output; not your email, password, or payment data.
Basis for third-country transfer: EU Standard Contractual Clauses.
RevenueCat (in-app purchases)
Provider: RevenueCat Inc., San Francisco, USA
Privacy: https://www.revenuecat.com/privacy
Purpose: management of subscriptions and purchases. Receives a pseudonymous user ID and subscription status. Payment data is not shared with RevenueCat.
Basis for third-country transfer: EU Standard Contractual Clauses.
Apple App Store & Sign in with Apple
Provider: Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA
Privacy: https://www.apple.com/legal/privacy/
Purpose: app distribution, in-app purchase payment processing, and optional sign-in. Payment is handled solely by Apple; we receive no payment data. Sign in with Apple provides a pseudonymous ID and, if you allow it, your (possibly relay) email.
Google Play (Android distribution & in-app purchases)
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy: https://policies.google.com/privacy
Purpose: distribution of the Android app and payment processing for in-app purchases. Payment is handled solely by Google; we receive no payment data.
Google Sign-In
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy: https://policies.google.com/privacy
Purpose: optional sign-in. Provides a pseudonymous Google account ID, your email, and possibly your display name.
Sleeper (fantasy data)
Provider: Blitz Studios, Inc. (Sleeper)
Purpose: at your request, we retrieve your league, roster, and matchup data from the Sleeper API for the accounts you connect. We are not affiliated with Sleeper.
Expo (app delivery & push notifications)
Provider: 650 Industries, Inc. (Expo), USA
Privacy: https://expo.dev/privacy
Purpose: app delivery infrastructure and transport of push notifications (if enabled).
GitHub Pages (hosting of this policy)
Provider: GitHub Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA
Purpose: hosting of the public version of this Privacy Policy on honeyapps.de. Standard hosting logs (IP, user agent, timestamp) are processed.
Basis: Art. 6(1)(f) GDPR (legitimate interest in publicly providing legally required information).
We have concluded data-processing agreements (Art. 28 GDPR) with the processors above and do not sell your personal data.
We keep your data while your account is active and as needed to provide the Service. When you delete your account, your personal data is removed from our production systems immediately. Residual copies in server logs, diagnostics, and encrypted backups are purged on a rolling schedule within at most 90 days. We retain limited records longer only where the law requires it (accounting and tax obligations, defense of legal claims).
Under the GDPR you have the right to:
To exercise your rights, contact info@honeyapps.de. We will respond without undue delay and within 30 days (Art. 12(3) GDPR).
We use technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS/TLS), row-level access controls in our database, secure on-device token storage (Keychain / encrypted storage), and least-privilege access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Your primary data is hosted in the EU.
The mobile app uses secure device storage to keep you signed in and cache data for offline use. The website uses strictly necessary cookies and local storage for authentication and core functionality; these are required and are not used for cross-site advertising.
Fantasy Manager is not directed to children. You must be at least 17 years old to use the Service (see our Terms of Service). We do not knowingly collect personal data from anyone under this age; if we learn that we have, we delete it immediately.
Our competent data-protection supervisory authority is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover, Germany
Email: poststelle@lfd.niedersachsen.de
Web: https://lfd.niedersachsen.de
You also have the right to lodge a complaint with any other supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.
We may update this Privacy Policy from time to time. The current version is always available here and in the app. For material changes we will notify you by email or in-app notice.
For privacy questions or to exercise your rights:
Lukas Schachtmaier & Johann Warkentin GbR
honeyapps · Rosenstraße 19, 38550 Isenbüttel, Germany
Email: info@honeyapps.de