# Privacy Policy
**Effective Date:** August 24, 2026
**Product:** BuffScore (BuffScore.app)
BuffScore ("we", "our", or "us") provides a unified multi-league fantasy sports tracking platform. This Privacy Policy outlines how your data is collected, used, and protected.
## 1. Information We Collect
- **Device & Anonymous Identifiers:** When you use BuffScore anonymously, we assign an encrypted device identifier (`deviceId`) to persist your preferences, followed teams, and league configurations locally and on our servers.
- **Fantasy Account Identifiers:** Public usernames and league IDs (e.g., Sleeper public usernames). For platforms requiring credentials, all session data is encrypted at rest with AES-256-GCM.
- **Push Notification Tokens:** Firebase Cloud Messaging (FCM) tokens to deliver your personalized player and team notifications.
- **Analytics & Crash Reports:** Aggregated telemetry via PostHog and Sentry to improve stability and performance.
## 2. Information We Do Not Collect
- We do not require or collect fantasy passwords for platforms with public APIs (such as Sleeper).
- We do not sell or monetize personal data to data brokers.
## 3. CCPA / CPRA & State Privacy Rights
Users in California and other jurisdictions have the right to request access to their data or opt out of any data sharing. You can toggle "Do Not Sell or Share My Personal Information" directly in the BuffScore mobile app settings (`You > Settings`), which activates AdMob's Restricted Data Processing (RDP) mode.
## 4. Security & Data Retention
- Authentication credentials at rest are encrypted with AES-256-GCM.
- Entitlement caches in Redis expire automatically.
## 5. Contact
For privacy inquiries, reach us at `privacy@BuffScore.app`.