Privacy Policy
Last updated: May 27, 2026 · LEGAL REVIEW REQUIRED
1. Information We Collect
We collect: (a) account information provided via Clerk (email, display name, avatar); (b) usage data (pages visited, features used) via PostHog analytics; (c) fantasy platform OAuth tokens, stored encrypted (AES-256-GCM) at rest and never transmitted in plaintext.
2. How We Use It
Account data is used to authenticate you and personalise your dashboards. Usage analytics are used to improve the Service. Fantasy tokens are used solely to fetch your league data from third-party providers on your behalf.
3. Sharing
We do not sell your personal data. We share only what is necessary with: infrastructure providers (Vercel, Supabase/Postgres, Upstash Redis) under data processing agreements; Clerk for identity management; Stripe for billing; PostHog for analytics.
4. Cookies & Analytics
We use session cookies for authentication (set by Clerk). PostHog may set analytics cookies. You can opt out of analytics by disabling JavaScript or using a browser extension. If you are in the EU/EEA, you will be asked for consent before analytics cookies are set.
5. Data Retention
Account data is retained until you delete your account. Encrypted fantasy tokens are deleted immediately on disconnect. Analytics events are retained for 12 months.
6. Your Rights
You may export or delete your data at any time from Account > Data. EU/EEA residents may also exercise rights under GDPR by emailing privacy@bocktalks.com.
7. Security
Fantasy OAuth tokens and other secrets are encrypted at rest with AES-256-GCM. All traffic is served over TLS. We run dependency audits and monitor for vulnerabilities.
8. Changes
We may update this policy. Material changes will be announced via the platform. Continued use after changes constitutes acceptance.