Privacy policy
Effective September 23, 2026
We collect very little, and we sell none of it. This page says exactly what, why, and what you can do about it.
Who we are
This site is published by Ancona AI LLC, a New Jersey limited liability company doing business as Under Review ("we", "us"). Contact: legal@underreviewfantasy.com, 971 US Highway 202N, Ste R, Somerville, NJ 08876.
What we collect
- Your email address, if you subscribe to the newsletter. That is the only thing the form asks for.
- What you send us, if you email us.
- Standard server logs, kept by our hosting provider when you load a page: IP address, browser type, the page requested and the time. We do not use them to identify you.
Visit statistics, only if you agree. We use Google Analytics 4 to count visits and see which pages and tools people use — including clicks on things like the waitlist, the trade analyzer and player notes. It sets cookies in your browser and sends Google your IP address (shortened by us), the pages you view and those events.
Nothing analytics-related loads until you choose. The first time you visit, a banner asks; we load Google Analytics only if you accept, and remember a refusal. Advertising and personalisation signals are switched off. To change your mind, clear this site's data in your browser and choose again, or install Google's opt-out add-on. Google keeps this data under its own terms; we do not sell or share it.
Your fantasy team, if you enter it. The trade analyzer can remember a team you add. Signed out, it is kept in your own browser's storage on your device, never sent to us, and "Forget my team" deletes it. Signed in, it is saved to your account so it follows you between devices — see below. If you import from Sleeper, your browser asks Sleeper for your leagues and roster directly, under Sleeper's privacy policy; your username does not pass through our servers.
An account, if you choose to make one. Nothing on this site requires one: every ranking, call, injury page and tool is readable signed out. An account holds three things, and only these:
- Your email address, which is how you sign in. We send a link rather than asking you to invent a password.
- Your saved team — the players, your lineup slots, your league's scoring, and the league name if you imported one.
- What you want emailed — the weekly calls, injury news about your players, a Sunday reminder. Each is a switch you set.
If you sign in with Apple or Google instead, they tell us your email address and nothing else. Accounts are stored with Supabase, our database and sign-in provider, and the database refuses to let one reader's session read another reader's row. You can delete the account, and everything in it, from your account page at any time; deletion is immediate and we keep no copy.
We do not run advertising trackers, and we set no cookies of our own beyond the choice you make in that banner. Signing in stores a session token in your browser so you stay signed in; signing out removes it.
How we use it
- To send the newsletter you asked for, and nothing else.
- To answer you.
- To keep the site running and secure.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Who else handles it
Service providers who process it on our behalf and only for these purposes: Netlify (hosting and the signup form), Supabase (privacy policy) for accounts and the data in them, and, once the newsletter begins sending, our email delivery provider, which will be named here. We may disclose information if the law requires it.
How long we keep it
Your email address stays until you unsubscribe or ask us to delete it. An account and everything in it lasts until you delete it, which you can do yourself from your account page. Server logs are kept by our hosting provider under its own retention periods.
Your choices and rights
- Unsubscribe at any time from the link in any newsletter.
- Access, correct or delete the information we hold about you by emailing legal@underreviewfantasy.com. We will answer within 30 days.
- California residents have the right to know what personal information we collect, to delete it, to correct it, and not to be discriminated against for asking. We do not sell or share it.
- Visitors in the EU and UK: we rely on your consent for the newsletter and on our legitimate interest in running a secure website for server logs. You may withdraw consent, and you may complain to your data protection authority.
Children
This site is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us an email address, tell us and we will delete it.
Changes
If this policy changes, the new version will appear here with a new effective date before the change takes effect.