Cap Penalties is a dynasty fantasy sports site run by a small independent team. We try to keep things simple, including how we treat your data. This page explains exactly what we collect, why, and how to opt out.
What we collect
When you create an account, we collect your email address so we can send you the one-time sign-in link and identify your session. We do not require a password. No phone number, no name, no demographic data.
When you connect a fantasy league to your account (Sleeper or MFL), we store the league ID, league year, and a snapshot of the league's public settings (cap amount, roster size, scoring rules). We pull this from the league platform's public API; we do not access anyone's account on those platforms.
You can also subscribe to the newsletter without an account by entering your email on the subscribe form. That email is stored for newsletter delivery only.
We do not run tracking pixels, third-party ad networks, or behavioral profiling tools. We do not fingerprint visitors. Standard server access logs may record IP addresses for short periods for security and abuse prevention.
How we use your email
For account holders: sending you sign-in links, and very occasionally a product-update email when something material changes.
For newsletter subscribers: delivering the Cap Penalties newsletter, which contains dynasty rankings, analysis, and related fantasy sports content.
We do not sell, rent, or share your address with advertisers, data brokers, or any other third party.
Who processes your data
We use a small number of contracted service providers to run the site. They process your data only to deliver the service we hire them for, and are bound by their own contractual privacy commitments to us:
- Supabase stores your account record, your linked leagues, and session cookies. Account data is encrypted at rest.
- Vercel hosts the site and serves requests. Standard access logs may include your IP address.
- Email delivery for sign-in links and newsletters is handled by a transactional email provider on our behalf.
- Anthropic is used server-side to draft editorial commentary on news items. No user data is sent.
Cookies
Cap Penalties uses cookies only for functionality, never advertising or tracking. Full breakdown on the cookies page.
- Session cookies set by Supabase to keep you signed in. Cleared when you sign out or the session expires.
- Preference cookie for the cookie notice banner so it does not re-appear after you dismiss it.
We do not set advertising cookies, share data with ad networks, or build a cross-site profile of your activity.
How to delete your account or unsubscribe
To delete your Cap Penalties account: sign in, open the Account page, scroll to the Danger zone, type DELETE to confirm, and click delete. Your account and every linked league are removed from our database immediately. There is no soft-delete or grace period.
If you can't sign in, email hello@cappenalties.com from the address on the account and we'll delete it within 7 days.
Every newsletter includes an unsubscribe link at the bottom. Click it and you are removed immediately. You can also reply to any newsletter with the word “unsubscribe” and we will remove you manually.
Your rights (GDPR, CCPA, and similar)
You have the right to access the data we hold on you, correct it, export it, or delete it. Email hello@cappenalties.com and we will respond within 30 days. We do not sell personal information.
Changes to this policy
If we change how we handle data, we will update this page and refresh the date at the top. Material changes that affect existing accounts or subscribers will be communicated by email before they take effect.
Contact
Questions about privacy or data on Cap Penalties go to hello@cappenalties.com.