🔐 Privacy Policy

1. Introduction

Fancraze Lineup Automator ("Extension") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

2. Information We Collect

2.1 Authentication Token

What: Your Fancraze authentication token (JWT)
How: Captured from fancraze.com when you visit the site
Purpose: Required to authenticate API requests to Fancraze services
Storage: Stored securely in Chrome local storage on your device only
Retention: Until you remove the extension or manually clear it

2.2 Usage Data

• Match data: Contest information you select (match ID, challenge type)
• Lineup data: Player selections, moment IDs, and lineups you generate
• Session data: Submission logs, timestamps of actions performed
• Error logs: Technical errors for troubleshooting purposes

2.3 Data NOT Collected

3. How We Use Your Information

3.1 Authentication Token

• Authenticate requests to Fancraze APIs
• Fetch your owned moments collection
• Submit lineups to contests
• Retrieve match and challenge data

3.2 Usage Data

• Generate lineups based on your selections
• Improve lineup quality and performance
• Provide submission status logging
• Troubleshoot technical issues

3.3 Form Data (L15 Player Statistics)

Downloaded from Fancraze API for smart scoring, used to calculate player form scores, never stored permanently on your device, only used during lineup generation session.

4. Data Storage & Security

What We Don't Do: ✗ Store data on external servers · ✗ Share data with third parties · ✗ Use data for advertising · ✗ Sell data · ✗ Track across websites.

5. API Communication

The extension communicates directly with these Fancraze endpoints: /v1/profileInfo, /v1/matches, /challenge3/challenge/*, /v1/moment/getUserOwnedMomentMap, /v2/submitLineupV3.

Data sent to Fancraze: Your authentication token (for authentication), selected lineup data, contest IDs, moment IDs and player selections.
Note: Fancraze receives the same data as if you submitted lineups manually through their website.
📘 Fancraze’s own privacy policy applies: https://www.fancraze.com/privacy

6. Permissions Explanation

• Storage – stores your authentication token securely in Chrome local storage.
• Tabs – detects when you visit fancraze.com to automatically capture your token.
• Host permissions (apis.fancraze.com) – direct communication with Fancraze API endpoints.
• Content script – injects script into fancraze.com to capture auth token from cookies.

7. Your Privacy Rights

Access & Control: You have full control over your authentication token (store, delete, refresh). Clear all stored data by removing the extension.
Data Deletion: Delete token in extension settings anytime. Logs cleared on browser restart. Removing extension deletes all stored data automatically.
No Tracking: We do not track usage patterns, create user profiles, follow you across websites, or use analytics tools.

8. Third-Party Services

9. Data Retention

• Authentication token: Stored until you delete it or remove extension. You can delete anytime.
• Session data: Only during active browser session; cleared on browser close.
• Form data: Not permanently stored; freshly fetched per session, purged after lineup generation.

10. Children's Privacy

This extension is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to Privacy Policy

We may update this policy occasionally. Changes are effective upon posting. Continued use means acceptance of the updated policy. Last Updated: April 10, 2026.

12. Contact & Support

Questions about privacy: Check extension settings/documentation, review logs, or contact Fancraze support for Fancraze-related data concerns.
Reporting issues: Document the issue with screenshots, note date/time, and contact us through the Chrome Web Store extension page.

13. Compliance

GDPR Compliance (EU Users)

Your data stored locally (no data transfer outside EU unless you authorize). Rights to access, delete, port data. No profiling or automated decision-making. Legitimate interest: improving fantasy cricket experience.

CCPA Compliance (California Users)

You can request data collected, deletion, opt-out of data sales (we don't sell data), no discrimination.

Other Privacy Laws

Secure data storage, transparent practices, user control, no unauthorized sharing.

Responsible Disclosure

If you discover a privacy/security vulnerability, do not publicly disclose — report through Chrome Web Store extension page.

15. Legal Basis for Processing

• Your Consent: You consent when installing the extension; withdraw by uninstalling.
• Legitimate Interests: Providing functionality, improving performance, preventing fraud, legal obligations.
• Contractual Necessity: Processing required to fulfill extension's function (authenticated requests require your token, lineup submissions require your data).

16. Summary — In Plain Language