Legal

Privacy Policy

Effective October 13, 2026

Hashmark is a free fantasy sports platform. This page says exactly what we collect, why we collect it, and how to make us delete it. No dark patterns, no data sales.

1. What we collect

Information you give us

• Account details — email address, display name, and password. Passwords are stored as a one-way hash; we never store or email your plaintext password.
• Gameplay data — the leagues you create or join, your teams, draft picks, waiver claims, trades, lineups, and matchup history.
• Messages you send us — anything you submit through the contact form, including your name, email, subject, and message.

Information created automatically

• Technical logs — IP address, browser user agent, request path, and timestamps, kept by our hosting provider for security and abuse prevention.
• Aggregate analytics — cookieless page-view counts and referrers, only after you accept the consent banner. These are not tied to your account.

2. What we do not collect

• We do not collect your real name, postal address, phone number, or date of birth.
• We do not collect payment card numbers. Real-money play is currently disabled, and the payment integration that exists is switched off by default.
• We do not buy personal data from data brokers, and we do not build advertising profiles.

3. Why we use it

• To run your account and leagues — signing you in, running drafts, scoring matchups, and settling waivers and trades.
• To send transactional email — password resets and, if you opt in, league notifications. We do not send marketing email without consent.
• To keep the site up and safe — rate limiting, abuse prevention, and diagnosing errors.
• To understand what is used — aggregate, cookieless page counts so we know which features matter.

4. Third parties we rely on

• Vercel — hosting, content delivery, and cookieless web analytics.
• Neon — managed PostgreSQL database where your account and league data live.
• Resend or SMTP — transactional email delivery (password resets).
• Sleeper and ESPN — public player, roster, schedule, and box-score feeds. We send them no personal information about you.
• Stripe — payment processing, only if real-money features are ever switched on.

Each of these processors handles data under its own terms and only for the purpose above.

5. Cookies and local storage

Hashmark does not use advertising or tracking cookies. We use your browser's local storage for two things: keeping you signed in, and remembering your consent choice so we do not ask again. The consent banner itself stores nothing until you answer it.

You can clear both at any time in your browser settings. Clearing your sign-in storage logs you out.

6. How long we keep it

• Account and gameplay data — until you ask us to delete your account, then removed within 30 days.
• Technical logs — retained by the hosting provider on a short rolling window for security purposes.
• Contact messages — kept while we resolve your request, then deleted.

7. Your choices

• Access and correction — email us and we will tell you what we hold and fix anything wrong.
• Deletion — ask and we will delete your account and associated gameplay data.
• Analytics opt-out — decline the consent banner, or use the Cookie choices link in the footer to change your answer. Declining does not limit any feature.

8. Security

Traffic is served over HTTPS. Passwords are hashed, database access is scoped, and access to production systems is limited. No system is perfect, so if we ever learn of a breach affecting your account we will tell you what happened and what to do.

9. Children

Hashmark is not directed at children under 13. You must be at least 13 years old to create an account, and if you are 13 to 17 you need a parent or guardian's permission. Free play is open to everyone aged 13 and over; paid leagues are 18 and over only and are not open yet. If we learn an account belongs to someone under 13, we will close it and delete the data. A parent or guardian can ask us to review or delete a minor's account through the contact page.

10. Changes

If we change this policy in a way that matters, we will update the effective date at the top and, for significant changes, tell you in the app or by email.

11. Contact

Privacy questions, data requests, and deletion requests go through the contact page. We aim to respond within a few business days.

Hashmark is an independent fantasy sports product. It is not affiliated with, endorsed by, or sponsored by the National Football League, the National Basketball Association, or any of their teams.