1. Introduction

This Privacy Policy explains how Dynasty Stock Exchange, doing business as “Dynasty Exchange” (“we,” “us,” or “our”), collects, uses, shares, and protects information in connection with the Dynasty Exchange website and application (the “Service”). It should be read together with our Terms of Service.

2. Information We Collect

2.1 Information You Provide

  • Account information: email address, username, and password (or credentials from Sleeper authentication).
  • Sleeper account data: when you connect Sleeper, we receive league memberships, rosters, and related fantasy football data you authorize us to access.
  • User-generated content: custom player valuations, watchlists, and trade analysis inputs.
  • Payment information: if you purchase a Premium subscription, billing details are collected and processed by our payment processor, Stripe; we do not store full card numbers.
  • Communications: messages you send to support or in response to our emails.
  • Marketing preferences: if you sign up for or interact with marketing emails, we track your subscription status and engagement (e.g., opens/clicks) so we can honor unsubscribe requests and measure effectiveness.

2.2 Information Collected Automatically

  • Usage & device data: pages viewed, features used, browser type, device identifiers, IP address, and approximate location derived from IP.
  • Cookies and similar technologies: used for authentication (keeping you signed in), internal analytics (understanding feature usage), and advertising (see Section 4).
  • Internal analytics events: aggregated and per-account usage metrics used to improve the Service.
  • Advertising identifiers: when we display ads through Google Ads and Google AdSense, Google and its partners may collect device/advertising identifiers and browsing data to select and measure ads. See Section 4 and Section 5.

3. How We Use Information

We use the information described above to:

  • Provide, operate, and maintain the Service, including authentication, league syncing, valuations, and trade analysis;
  • Process Premium subscription payments and manage billing;
  • Send transactional and service-related email notifications (e.g., trade alerts, account and billing notices);
  • Monitor, analyze, and improve Service performance and features through internal analytics;
  • Detect, prevent, and address fraud, abuse, and security issues;
  • Communicate with you about updates, and, where permitted, optional product or marketing messages, always with the ability to unsubscribe;
  • Display advertising, including personalized/interest-based ads through Google Ads and Google AdSense, and measure ad performance;
  • Comply with legal obligations.

4. Cookies & Tracking Technologies

We use cookies and similar technologies for three purposes:

Category Purpose Typical duration
Authentication (strictly necessary) Keep you signed in and maintain session security Session / until logout
Analytics Understand feature usage and improve the Service (internal analytics) 13 months
Advertising Set by Google Ads and Google AdSense to deliver and measure personalized and non-personalized ads Set per Google’s own cookie policies

Regional cookie consent. Authentication cookies are strictly necessary and are always active. For analytics and advertising cookies, visitors we identify as located in the European Economic Area, the UK, or Switzerland, and visitors located in California, are shown a cookie consent banner before non-essential cookies are set, allowing you to accept or reject those categories, consistent with applicable law (GDPR/UK GDPR/ePrivacy for the EEA/UK, and the CCPA/CPRA for California). Visitors elsewhere may not see this banner by default, though cookie controls in your browser always remain available to you.

You can also manage or block cookies through your browser settings, opt out of Google’s personalized advertising at adssettings.google.com, and opt out of interest-based advertising generally through the Digital Advertising Alliance. We aim to honor recognized opt-out signals such as Global Privacy Control (GPC) for California visitors. See Section 8 for more on your advertising and marketing choices.

5. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

  • Service providers: hosting, payment processing, email delivery, and analytics vendors who process data on our behalf under contractual confidentiality and security obligations.
  • Advertising partners: we use Google Ads and Google AdSense to display advertising and may share device/advertising identifiers and browsing data with Google for ad delivery and measurement. For California residents, this activity may be considered “sharing” under the CCPA/CPRA; see Section 8 for how to opt out.
  • Sleeper integration: data you authorize is exchanged with Sleeper to enable league syncing; use of that data by Sleeper is governed by Sleeper’s own privacy policy.
  • Legal & safety: when required by law, regulation, legal process, or to protect the rights, property, or safety of Dynasty Exchange, our users, or the public.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
  • With your consent: for any other purpose disclosed to you at the time of collection.

6. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Upon account deletion, we will delete or anonymize personal information within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention and financial recordkeeping.

7. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights & Choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of certain uses. You can access or update most account information directly in your account settings, or contact us at contact@dynastystockx.com to make a request.

8.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, request deletion or correction of it, and opt out of the “sale” or “sharing” of personal information (including for cross-context behavioral advertising through Google Ads/AdSense). You may exercise these rights by emailing us at contact@dynastystockx.com. You can also opt out of the sharing of your personal information for targeted advertising purposes by adjusting your browser cookie settings, enabling Global Privacy Control (GPC) in your browser, or using the cookie consent options available on our site. We do not discriminate against you for exercising any of these rights.

8.2 EEA, UK, and Swiss Residents (GDPR/UK GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have rights under the GDPR and UK GDPR. These include the right to access, correct, delete, or restrict the processing of your personal data, the right to data portability, and the right to withdraw your consent at any time. Our legal basis for collecting and using your personal data is typically consent (e.g., for cookies and marketing) or the performance of a contract (e.g., providing our Service). To exercise your rights, please email us at contact@dynastystockx.com. You also have the right to lodge a complaint with your local data protection authority.

9. Children’s Privacy

The Service is not intended for use by individuals under the age of 18, and we do not knowingly collect personal information from children. If we discover that we have inadvertently collected personal information from anyone under 18, we will take steps to delete that information promptly. If you believe we have collected information from a child under 18, please contact us at contact@dynastystockx.com.

10. International Data Transfers

Our Service is hosted and operated in the United States. If you access the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. We implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to ensure that your personal data receives an adequate level of protection when transferred and processed outside your home country.

11. Third-Party Links & Services

Our Service contains links to third-party websites and services, including Sleeper. We do not control and are not responsible for the privacy practices or content of those third-party services. We encourage you to review the privacy policies of any third-party websites or services you interact with.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on our website and updating the “Last updated” date at the top of this policy, or through other reasonable communication channels (such as email or in-app notification). Your continued use of the Service after any changes take effect constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: