Privacy Policy

Oracle's 11 is a fantasy football game. It is run by Keltis LLC, a company registered in Oregon, in the United States.

This page explains what we collect, why we collect it, and what you can ask us to do about it. We have kept it short and plain. If something here is not clear, please write to us.

The short version

• We collect what the game needs to work, and not much else.
• Our app uses PostHog to tell us how the app is doing. We use it to make the app better, and for nothing else.
• We use no ad networks and no third party trackers.
• We do not sell your data, and we never will.
• We do not send marketing email.
• You can ask us to delete your account and everything in it, and we will.

What we collect

When you sign in

You sign in with Google, or with Apple if you use our app. We hold no passwords, so there is never one for us to lose. From your sign in we receive and store:

• your name
• your email address
• a link to your profile photo
• an id number that tells us the account is yours

If you use Sign in with Apple and choose to hide your email, the only address we ever see is the forwarding one Apple creates for you.

While you play

• the squads you pick, your captain, your transfers and your points
• your bracket and your match score predictions
• the leagues you create or join, and any nickname you use inside a league
• your settings: language, whether your profile is public, and which notifications you want

If you turn on notifications

Turning on push notifications stores the address your browser's notification service gives us, the two keys needed to encrypt a message to it, your language, and the name your browser reports for itself. Turn notifications off and we delete all of it.

Tokens and signed in devices

If you create an access token for the API, or sign in from our app, we keep that token scrambled (hashed), along with a name for the device and the dates it was created and last used. We cannot read the token back out. You can revoke either one at any time from Settings.

Server logs

Like every web server, ours writes a line for each request: the IP address it came from, the page asked for, the time, and the browser. We use these to keep the site up and to deal with abuse. They are kept for a short period, normally a few weeks, and then rotated away.

How the app is used

Our app uses PostHog, an analytics tool, to tell us how the app itself is doing: which screens people open, what breaks, where a flow gets stuck. We look at it to make the app better, and for nothing else. We do not use it to follow you around, to build a profile of you, to sell you anything, or to hand anything to advertisers. The website you are reading this on has no analytics on it at all.

Cookies

Two of them, both ours, neither for tracking:

• _oracle_session keeps you signed in. It lasts 30 days.
• locale remembers the language you chose.

This site sets no analytics cookies, no advertising cookies and no third party cookies. That is also why there is no cookie banner standing between you and the game.

What other people can see

Oracle's 11 is a game you play against other people, so some of it is meant to be seen:

• your display name, photo, points and rank, on leaderboards and inside the leagues you join
• your squad, once the gameweek deadline has passed
• link preview images for public leagues and finished gameweeks, which carry names and scores so a shared link looks like something

Turn off "Public profile" in Settings and you drop off the public leaderboards and your profile page closes. The members of leagues you have joined can still see you there, because that is what a league is.

Who else touches your data

We do not sell it, rent it or trade it. A few companies do a specific job for us:

• Google and Apple handle signing in. They know you signed in to Oracle's 11.
• Your browser's notification service (Apple, Google or Mozilla, depending on your device) delivers push notifications. The message is encrypted, so they carry it but cannot read it.
• DigitalOcean rents us the server the app runs on.
• PostHog holds the app usage numbers described above.

Match data (fixtures, players, statistics) reaches us from a football data provider. That traffic runs one way only: we receive facts about matches, and nothing about you is ever sent there.

We will hand data over if the law requires it, and we will tell you when we are allowed to.

Where your data lives

On a single server in Frankfurt, Germany, together with its database and backups. Keltis LLC is based in Oregon, so the people who run that server do it from the United States, which means your data can be reached from there.

How long we keep it

We keep your account and your game data for as long as your account exists. Ask us to delete it and we remove your account, your squads, your predictions and your league memberships. Copies can sit in database backups for a short while longer, until those backups are rotated out. Server logs go sooner, as above.

Your rights

Wherever you live, and in particular under the KVKK in Turkey and the GDPR in Europe, you can ask us to:

• send you a copy of what we hold about you
• correct anything that is wrong
• delete your account and your data
• stop using your data for a particular purpose
• hand your data over in a portable file

Write to privacy@oracles11.com and we will answer within 30 days. If our answer does not satisfy you, you can complain to your local data protection authority: the Personal Data Protection Authority (KVKK) in Turkey, or your national authority in Europe.

Children

Oracle's 11 is not built for children and is not meant for anyone under 13. We do not knowingly collect anything from a child under 13. If you are a parent and believe we have, write to us and we will delete it.

Security

The whole site runs over HTTPS. Tokens are stored hashed, never in a form we could read. We hold no passwords at all. No service can promise perfect security, but we keep very little data in the first place, which is the best protection there is.

Changes

When this policy changes we update the page and the date at the top. If a change actually matters to you, we will say so in the app rather than hope you come back and check.

Contact

Keltis LLC
Oregon, United States
privacy@oracles11.com