Privacy Policy
Effective date: 22 August 2026. This policy explains what personal data Googly collects, why we collect it, how we protect it, and the rights you have over it — including your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
Who we are
Googly ("we", "us") operates the Googly fantasy cricket platform at googlyfantasy.com and the Googly mobile app. Googly is a free, season-long fantasy sports game played for entertainment. It involves no entry fees, no stakes, and no gambling.
For any privacy question or request, contact us at googlysupport@gmail.com or see our Grievance Redressal page.
What we collect
| Data | When | Why |
|---|---|---|
| Email address, display name, password (stored only as a secure hash) | When you create an account | To create and secure your account, sign you in, and identify you to your league mates |
| Age confirmation and terms acceptance | When you create an account | To confirm you are 18 or older and consented to our terms, as required by law |
| Gameplay data (leagues, teams, rosters, draft picks, trades, waiver claims, scores) | As you play | To run your leagues — this is the product |
| Waitlist email and name (optional) | If you pre-register for a season | To notify you when the next season opens |
| Push notification token (an identifier your phone’s operating system issues to our app on your device) and whether the app is currently open | Only if you turn on notifications in the iOS or Android app | To send you the alerts you asked for — your turn in a draft, being outbid, a trade or waiver that needs you — and to stay quiet while you already have the app open |
| Technical logs (IP address, request identifiers, timestamps, error reports) | Automatically, when you use the service | Security (e.g. blocking brute-force login attempts), debugging, and abuse prevention |
| Usage events (pages viewed, features used such as starting a practice draft, and a random identifier stored in your browser) — no IP address or device fingerprint is stored with them | Automatically, when you use the service | To understand which parts of the product people actually use and where they get stuck, so we can improve it. Measured by us, on our own servers — no third-party analytics or advertising company is involved. |
We do not collect your precise location, contacts, photos, or payment information. We do not sell personal data, and we do not share it with anyone for advertising.
Push notifications
Push notifications are off until you turn them on, and the app asks only after you have done something they are useful for — never when you first open it. If you allow them, your phone gives us a notification token, which we store with your account so we know where to send your alerts. Notifications are delivered through Apple’s push notification service on iPhone and Google’s Firebase Cloud Messaging on Android, so the title and text of each notification pass through Apple or Google on the way to your phone. We use the token for nothing else: not for advertising, not for tracking you across apps, and we do not share it with anyone else. You can turn notifications off at any time in your phone’s Settings. We delete the token when you sign out, when you delete your account, when Apple or Google tell us it no longer works, and otherwise after about nine months without use.
Cookies and local storage
We use browser local storage for keeping you signed in (authentication tokens), remembering interface preferences such as theme, caching game data so the app loads fast, and holding one random identifier used to count visits and measure how features are used. That identifier is a random value — it is not derived from you or your device, it never leaves our own servers, and it is not shared with anyone. If your browser sends a Global Privacy Control or Do Not Track signal, we do not create it at all and record no usage events. We do not use tracking or advertising cookies. If we ever introduce advertising, this policy will be updated first and a consent banner will be shown where required.
Who processes your data
Your data is stored and processed on Google Cloud Platform (databases, hosting, and real-time updates via Google Firestore). Player photographs displayed in the app are loaded from the content delivery network of our cricket data provider. If you opt in to email notifications, emails are delivered through our email provider. These providers process data on our behalf and under our instructions; they are not permitted to use it for their own purposes.
How long we keep it
Account and gameplay data is kept while your account is active, because season-long leagues depend on historical rosters and scores. Technical logs are kept for a limited period for security and debugging. Usage events are deleted after at most 400 days, and lose their link to your account if you delete it. If you delete your account, your personal data is deleted; league records you were part of are retained in de-identified or minimal form so other members' leagues remain intact.
Your rights
You can, at any time:
- Access and correct your data — your profile and gameplay data are visible in the app; contact us for anything else.
- Delete your account — available directly in the app, or by emailing us. Deletion is permanent.
- Withdraw consent — you may withdraw consent to processing by deleting your account or writing to us; the service cannot function without the essential data above.
- Complain — first to our Grievance Officer; if unresolved, you may approach the Data Protection Board of India under the DPDP Act.
Children
Googly is for users aged 18 and over. We do not knowingly create accounts for, or collect personal data from, anyone under 18. Account creation requires confirming you are 18 or older. If you believe a minor has created an account, contact us and we will delete it.
Security
Passwords are stored only as salted bcrypt hashes. All traffic is encrypted in transit (HTTPS). Access tokens are short-lived and rotated. Accounts are protected against brute-force login attempts. In the event of a personal data breach affecting you, we will notify you and the Data Protection Board of India as required by the DPDP Act.
Changes to this policy
If we make material changes — for example, introducing advertising — we will update this page, change the effective date above, and notify active users in the app.