Privacy Policy
Last updated: August 2, 2026
1. Controller and Scope
Raivaly is an independent hobby project operated by Claus Marín Kaiser, an individual based in Ireland. Claus Marín Kaiser is the data controller responsible for personal data processed through the Platform.
Privacy questions and requests may be sent to: privacy@raivaly.com.
This Policy applies to Raivaly's public website, authenticated fantasy platform, league features, statistics, and related services.
It should be read together with the Terms of Service.
2. Age Requirement
Raivaly's public informational pages may be viewed without activating an account. You must be at least 16 years old to activate or use a Raivaly account.
Raivaly does not knowingly provide accounts to children under 16 and does not operate a parental-consent programme. We do not collect dates of birth. Users are instead required to confirm that they meet the minimum age requirement when activating an account.
If you believe that a person under 16 has created an account, contact privacy@raivaly.com so that the account can be investigated and, where appropriate, removed.
3. The Data We Collect
We collect only the personal data reasonably necessary to operate, maintain, and protect the Platform.
Account and profile information
- Email address.
- Authentication-provider identifier.
- Username or display name.
- Avatar or profile-picture URL.
- Records confirming account eligibility and acceptance or acknowledgement of applicable legal documents.
This information may be provided directly by you or received from an authentication provider you choose, such as Google, Twitch, or Discord.
Authentication is handled through Supabase. Raivaly does not receive or store your plaintext password.
Fantasy-platform information
- Manager and fantasy-team names.
- League membership and commissioner status.
- Draft selections, roster assignments, and transactions.
- Event lineups and locked roster snapshots.
- Fantasy scores, standings, rankings, and achievements.
- Other actions taken through authenticated Platform features.
Technical and support information
- Session, request, browser, device, and approximate network information required for security and service delivery.
- Error, performance, security, and operational logs.
- Information you provide when contacting Raivaly for support or to exercise a privacy right.
4. How and Why We Use Your Data
We use personal data only for defined purposes and under an applicable lawful basis.
- Performance of our agreement with you: creating and maintaining your account, operating fantasy leagues, managing rosters, calculating scores, and displaying competition results.
- Legitimate interests: securing and improving the Platform, preventing abuse, diagnosing errors, understanding aggregate usage, and preserving the integrity and continuity of fantasy competitions.
- Legal obligations:responding to lawful requests, protecting users' rights, and complying with applicable law.
- Consent, where specifically requested: processing an optional feature or communication that is not required to provide the Platform. Consent may be withdrawn at any time.
Acknowledging this Privacy Policy does not constitute blanket consent to every form of processing.
Raivaly does not sell personal data, operate behavioural advertising, or use personal data to track users across unrelated websites.
Fantasy points, rankings, and tiers are calculated automatically from competition data. These calculations do not produce legal or similarly significant effects concerning users.
5. Information Visible to Other Users
Raivaly is a competitive fantasy platform. Some information is therefore displayed to league participants or publicly where required for leaderboards, standings, and competition features.
Depending on the feature, visible information may include:
- Manager name.
- Fantasy-team name.
- Avatar.
- League membership.
- Roster, draft, transaction, and lineup information.
- Scores, standings, rankings, and achievements.
Your email address and authentication-provider identifier are not intentionally displayed publicly.
You should not include sensitive personal information in a manager name, fantasy-team name, or other user-generated field.
6. Service Providers and International Transfers
Raivaly uses service providers to operate and protect the Platform. These include:
- Supabase for authentication, database infrastructure, and related backend services.
- Vercel for application hosting, content delivery, performance monitoring, and website analytics.
- Google, Twitch, or Discord when you choose one of those services as your authentication provider.
- Email and operational-service providers used to deliver account messages and respond to support requests.
These providers receive only the information reasonably necessary to deliver their services. An authentication provider may also process information under its own privacy policy when you interact directly with that provider.
Raivaly selects European hosting regions where reasonably practical. Some providers or their subprocessors may nevertheless process information outside the European Economic Area.
Where required, international transfers are protected through an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism.
8. Data Retention and Account Deletion
Account and profile information is retained while your account remains active and for only as long afterwards as reasonably necessary to complete deletion, meet legal obligations, resolve disputes, or protect the Platform.
Operational logs, security records, and backups are retained for limited periods determined by their purpose, security requirements, and the lifecycle of the relevant service provider.
Account deletion
You may request deletion of your account by contacting privacy@raivaly.com. We may request information reasonably necessary to verify that the request concerns your account.
When an account is deleted, Raivaly removes the authentication identity and erases or irreversibly anonymises personal profile information, including the email address, username, avatar, and connection to the former manager.
Fantasy teams, transactions, locked event snapshots, scores, rankings, and standings may be retained as anonymised competition history. Retained records will no longer identify the former account holder and may instead display a neutral label such as "Deleted Manager" or"Former Team".
Limited records concerning the deletion request may be retained where reasonably necessary to demonstrate compliance, protect legal rights, or resolve a dispute.
Information remaining temporarily in restricted backups is not restored for ordinary use and is removed as those backups expire through their normal lifecycle.
We will respond to verified privacy requests without undue delay and normally within one month. Where a request cannot be fulfilled in whole, or additional time is permitted by law, we will explain the reason and available options.
9. Your Data-Protection Rights
Subject to the conditions and limitations of applicable law, you may have the right to:
- Access personal data held about you.
- Correct inaccurate or incomplete personal data.
- Request erasure of personal data.
- Restrict certain processing.
- Object to processing based on legitimate interests.
- Receive certain data in a portable format where the right applies.
- Withdraw consent where a processing activity depends on consent.
To exercise a right, contact privacy@raivaly.com. We may need to verify your identity before acting on a request.
Privacy rights are not absolute in every circumstance. If a request cannot be fulfilled in whole, we will explain the applicable reason.
You also have the right to raise a concern with the Irish Data Protection Commission. Further information is available at dataprotection.ie.
10. Data Security
Raivaly uses reasonable technical and organisational safeguards to protect personal data. These include managed authentication, access controls, encrypted network connections, restricted administrative access, database security policies, and monitoring for operational or security failures.
No internet service can guarantee absolute security. If we identify a personal-data breach, we will investigate it and make any notifications required by applicable law.
11. Changes to this Policy
We may update this Privacy Policy as Raivaly evolves or its legal obligations change. The latest version will remain available on this page, and the "Last updated" date will identify the latest revision.
If a change materially affects how registered users'personal data is processed, we will provide an appropriate notice and, where necessary, request renewed acknowledgement or consent.