Privacy Policy

Last updated: September 25, 2026

1. Who We Are

Tactixity is operated by FAMPARS. Tactixity provides two product families: Tactixity Core, a free Sports Intelligence product, and separate fantasy sports decision-support products for FPL, NFL and NBA. This policy explains what data we collect, how we use it, who we share it with, and how you can contact us. Contact: [email protected]

2. Data We Collect

Data needed to provide and operate the service (collected regardless of your Privacy Choices):

• Account and sign-in: your email address; if you sign in with Google, your Google account identifier and verified email address (we do not store your Google sign-in token itself)
• Tactixity Core searches: the sport, search text and player you choose are sent to our servers to return results. We do not store your Core searches in our database, but because search text is part of the request address, it can appear in our web server logs (Section 13).
• FPL Manager ID — a public identifier you provide, used to look up your public FPL data from the official FPL API. We keep FPL data only in a short, temporary cache, except for Season Plans you generate, which we store linked to that Manager ID so they can be shown and updated. A Manager ID tied to your account may also be remembered in your own browser so you don't need to re-enter it.
• Sleeper username and league data (NFL/NBA) — entered by you, used to fetch your public roster, matchup and league information from Sleeper's API. We store league, roster and recommendation data for the leagues you connect, and a record of recommendations you act on, to provide the product.
• Billing and subscription records — customer, subscription and transaction references from Paddle, our payment processor, your subscription status and billing dates, and records of subscription events such as trial start, payment, renewal, cancellation and refund. We never receive or store your card number.
• Referral code — if you arrive through a referral link, the referral code is stored in your browser and sent with your checkout so the referral reward can be applied, together with records of how referral rewards were applied or blocked. This is part of the referral programme, not advertising measurement, so it does not depend on your Privacy Choices.
• Chat messages and display name — if you use community chat, your chosen display name and message content are stored so chat history can be shown to other members of that product's chat room
• Support messages — if you contact Support, your message, our response, and related status information, linked to your account
• Service emails — sign-in link and trial reminder emails, and a record of reminders sent and of any reminder opt-out so we can respect it
• Push notification data — if you turn on FPL notifications, the push subscription details your browser provides, linked to your account (Section 10)
• Basic technical data — collected automatically by our web server (see Section 13)

Optional measurement data (only with your permission, Section 5): usage events describing how you use Tactixity, an anonymous/session identifier, and campaign data such as UTM parameters, ad click identifiers (e.g. gclid), launch/experiment identifiers and landing page. None of this is collected before you choose, or if you reject it.

3. How We Use Data

• To provide Tactixity Core player information
• To provide chip, captain and transfer recommendations (FPL), and start/sit, waiver, streaming and trade recommendations (NFL/NBA)
• To manage your account, subscription, and billing, and to run the referral programme
• To send service emails, such as sign-in links and trial reminders
• To operate community chat (message history, moderation, and abuse prevention)
• To provide Support and respond to your requests
• With your permission only, to understand how Tactixity is used, improve the product, and measure which campaigns bring visitors to Tactixity
• To send push notifications you have turned on
• To maintain security and prevent abuse of the service

4. Sign-In and Sessions

You can sign in with Google or, in limited legacy cases, with an emailed sign-in link. Tactixity Core and the free tools do not require signing in.

• When you sign in with Google, we verify the identity token Google gives us and store your Google account identifier, your verified email, and the fact it was verified. We never store the Google token itself.
• A Google-authenticated session is kept in a secure, HttpOnly cookie — not readable by page scripts, sent only over an encrypted connection, and valid for seven days.
• A limited legacy sign-in method (an emailed link) instead keeps a sign-in token in your browser's local storage.
• If you link a Google account to an existing Tactixity account, we require proof of ownership of both accounts first — this protects against someone else linking your account without your consent.
• Signing out clears your session cookie and any local sign-in token stored in that browser.

5. Measurement and Privacy Choices

We use necessary storage and records for sign-in, security, billing and the features you request — for example staying signed in, remembering your Manager ID, your theme preference, free-tool usage limits, your referral code, and completing checkout. This is never subject to a choice.

With your permission, we also collect usage and campaign data to improve Tactixity and measure advertising. This optional measurement covers:

• Product usage: events such as page and landing views, feature and tool use, product funnels, sharing, checkout steps, and Tactixity Core usage. Core usage events record the sport and the kind of result, never your search text or the player you looked up.
• Campaign measurement: an anonymous/session identifier, UTM parameters, ad click identifiers (such as gclid), launch/experiment identifiers, and the landing page. The referring page may also be stored in your browser.
• Google Ads: Google's advertising tag is loaded, and a sign-up conversion reported to Google, only after you allow measurement.

How your choice works:

• Before you make a choice, and if you select "Reject non-essential," we do not collect or send any of this optional measurement data, and the Google Ads tag is not loaded.
• Selecting "Reject non-essential" also clears any measurement data already stored in your browser.
• Only if you select "Allow measurement" in the Privacy Choices banner or footer link do we collect it.
• Rejecting measurement never blocks you from using Tactixity Core, previewing your team, using the fantasy products, or completing checkout — a rejected checkout simply excludes this measurement data from what we send to our payment processor.
• You can change your choice at any time using "Privacy choices" in the site footer.

We keep a record of your choice itself (accepted or rejected, with a timestamp) so we can remember and respect it on later visits.

6. Payments and Paddle

All checkout and billing is handled by Paddle, our payment processor and merchant of record. Paddle collects your payment details directly — we never see or store your card number or other raw payment credentials. Tactixity Core has no checkout.

• We store the payment-related identifiers Paddle provides (customer, subscription, and transaction references), your subscription status, and relevant billing dates, so we can grant and manage your access.
• At checkout, we send Paddle the product/plan you're purchasing, a secure, one-time reference that lets us confirm the purchase belongs to your account, and your referral code if you have one. If you have allowed measurement (Section 5), we also send the campaign data described there; if you have not, we don't.
• Paddle's checkout only loads when you start a trial or purchase — not before. As part of operating checkout, Paddle automatically loads its own bundled billing/subscription analytics service (part of Paddle's "Retain" product). We do not separately initialize, configure, or send extra data to this service ourselves. Paddle Checkout itself is what's required to process your purchase; ProfitWell/Retain is loaded by Paddle as part of that checkout integration, and loads regardless of your measurement choice.
• You can manage or cancel your subscription through Paddle's customer portal or the links in Paddle's emails.

Paddle's own privacy policy governs how Paddle itself handles your payment data: paddle.com/legal/privacy

7. AI Processing

Anthropic (Claude) is the only AI provider we use in production. Tactixity Core does not use AI to produce its player information.

• FPL narration (paid feature): we send only the minimum sport data needed to write the explanation — deterministic chip recommendations and squad performance figures. We do not send your FPL Manager ID, team name, or email to Anthropic for this.
• NFL/NBA narration (paid feature): we send matchup, waiver, trade, or streaming output already produced by our own recommendation engine — not an account identifier.
• Support: we send the text of your Support message so the AI can help answer it. We do not automatically add your email, user ID, or Manager ID to that request — only the message text itself. If you choose to include personal information in your message, that text is included, because you wrote it.

A small number of routine Support questions (such as "where do I find my Manager ID") are answered automatically without any AI call. AI-assisted Support responses are stored as part of your Support history (Section 8); sport narration responses are shown to you and are not kept as a separate history.

Anthropic's own privacy policy governs how Anthropic processes this data: anthropic.com/legal/privacy

8. Support

If you contact Support, we store your message, our response (AI-assisted or from our team), a category and priority, status, and related timestamps, linked to your account so we can maintain your support history and respond to you.

• A high-priority ticket may trigger an internal alert to our team — this alert contains only a ticket reference, category, priority, and timestamp, never your message content, email, or Manager ID.
• Support messages currently have no fixed automatic deletion period; we keep them while reasonably needed to provide support, resolve disputes, and meet legal obligations, subject to your rights in Section 14.
• Support is available to signed-in users.

9. Community Chat

• If you use community chat, we store your account, the sport/product room, your chosen display name, your message, its moderation status, and when it was sent.
• Chat rooms are separated by fantasy product, and joining one requires an active subscription to that product.
• Chat messages are automatically deleted once they are more than 90 days old, or once a room holds more than 500 messages — whichever happens first — except while a message is held under an active moderation report.
• We may retain reports, bans, and other moderation records for as long as reasonably needed for safety and abuse prevention.

10. Push Notifications

Push notifications are available for FPL only, and only if you turn them on yourself with the "Enable FPL notifications" button on your FPL results page — we never enrol you automatically, and your browser asks for permission first. We store the push subscription details your browser provides, linked to your account and to FPL. Turning on FPL notifications does not sign you up for any other product's notifications, and NFL and NBA push notifications are not currently offered. FPL notifications are only sent while you have an active FPL subscription.

"Disable FPL notifications" removes that browser's subscription record from our servers. Turning notifications off in your browser settings instead stops delivery to that browser, but does not by itself delete the stored subscription record on our servers — that record is removed when you use "Disable FPL notifications", when your account is deleted, or via a verified privacy request or routine operational cleanup.

11. External Services and Data Sharing

We do not sell your data. We share data only as needed to provide and operate the product, with the following providers — each of which also processes data under its own privacy terms:

• Google — Google Identity Services for sign-in; Google Fonts, which your browser loads from Google when you visit the site; and, only if you allow measurement, the Google Ads tag (Section 5)
• Paddle, including its bundled ProfitWell/Retain billing-analytics service — for payments, subscriptions, and billing
• Cloudflare — the network provider that requests to our site pass through, for delivery and security
• Resend — to deliver our service emails (sign-in links and trial reminders)
• Anthropic — for AI-assisted narration and Support (Section 7)
• The official Fantasy Premier League API — to fetch the public FPL data tied to the Manager ID you provide, and FPL player data for Tactixity Core
• Sleeper's public API — to fetch the public roster/league data tied to the username and league you provide (NFL/NBA), and public player data
• Sports data providers (such as Sportmonks) — we request public sports statistics from them; we do not send them your personal data
• Your browser's push service — delivers FPL notifications you turned on (Section 10)
• Telegram — for sanitized, internal critical-alert notifications to our own team only (Section 8)

FAMPARS operates Tactixity directly. FAMPARS is not a separate outside company we share your data with — it is us. Business and operational records (such as subscription, payment, refund and referral records) and, only if you allowed measurement, usage and campaign measurement data are also processed in FAMPARS's own internal systems to operate, measure and improve the product. If you have not allowed measurement, no optional usage or campaign data about you is created, so none reaches those systems. Records used only to run trial reminder emails stay within Tactixity.

12. Data Retention

• Chat messages: up to 90 days or 500 messages per room, whichever comes first, except while held for an active moderation report.
• Technical/security logs: our web server's access logs are currently kept approximately 14 days under our log rotation; application logs are limited by size and rotation.
• Account, subscription and billing records: kept while your account or subscription is active, and afterward as needed for security, dispute resolution, or legal obligations.
• Support messages and measurement/attribution records: we currently have no fixed automatic deletion period for these. We keep them while reasonably needed for support, security, product measurement, fraud prevention, dispute resolution, and business records, subject to a manual privacy request (Section 14) and any legal obligations.
• FPL Season Plans and connected NFL/NBA league data: kept while needed to provide the product, subject to a manual privacy request (Section 14).
• Push subscription data: kept until you turn FPL notifications off in Tactixity, your account is deleted, or it is removed via a verified privacy request or routine operational cleanup.
• Paddle billing records: controlled by Paddle under its own retention and legal obligations, separate from our own records.

13. Security and Technical Logs

• All data in transit is encrypted via HTTPS.
• Our web server automatically logs routine technical request information — such as IP address, requested page or address (which can include Tactixity Core search text), referrer, and browser/user agent — for security and troubleshooting, kept per Section 12. These logs are operational and are kept regardless of your Privacy Choices.
• We do not intentionally log your authentication tokens, session cookies, or full request contents. We do not claim our internal logs are entirely free of any internal reference used for troubleshooting.
• Payments are handled by Paddle under PCI DSS compliance.

14. Your Choices and Rights

• Privacy Choices: allow or reject optional measurement at any time using "Privacy choices" in the site footer (Section 5).
• FPL notifications: turn them off at any time with "Disable FPL notifications" (Section 10).
• Trial reminder emails: use the unsubscribe link in the email.
• Access, correction, export, or deletion: you can request any of these at any time by emailing [email protected]. We do not currently have a self-service deletion or export tool, so these requests are handled manually by our team.
• Before acting on a request, we verify it genuinely comes from you — for example, through your signed-in account or another way of confirming account ownership. We do not act on a request based only on an unverified email claiming to be you.
• Some information may need to be retained even after a deletion request — for example, minimum billing, security, or legal records we're required to keep, and billing records that remain under Paddle's own control.
• We aim to respond to and complete verified requests promptly, but we do not promise instant or unconditional deletion, particularly where a legal, security, or billing obligation applies.
• Some data lives only in your own browser — such as a remembered Manager ID, a referral code, or your Privacy Choices selection. Deleting your account on our servers does not remotely clear that browser's local storage; you can clear it yourself using your browser's "clear site data" option (Privacy Choices clears the optional measurement data).

This policy describes our actual data practices. It is not a guarantee of compliance with any specific law in every jurisdiction.

15. Contact

[email protected]