Legal

Privacy Policy

Effective October 5, 2026

This policy explains what HIVE Fantasy ("HIVE," "we," "us") collects when you use hivefantasy.com, how we use it, and the choices you have. You can read most of the site without an account, and we only collect what we need to run it.

Questions? Email hivesportsapp@gmail.com.

What we collect

Account information

When you create an account or sign in, we store your email address, the date your account was created, when you last visited, and your founding member status and number. We do not ask for your name, and we do not use passwords.

Sign-in records

  • Sign-in codes and links. When you ask to sign in by email, we send a link and a 6-digit code. We store only a scrambled (hashed) version of the code, along with your email, its expiry time, and which part of the site you signed up from. Codes expire after 10 minutes and links after 24 hours.
  • Sessions. When you sign in, we store a hashed version of your session token (never the token itself), when the session started and was last used, and your browser's user agent (the browser and device type it reports).
  • Abuse protection. To limit repeated sign-in attempts, we keep short-lived counters keyed to a one-way hash of your IP address or email address. We do not store the raw IP address or email in these counters.

Sign in with Google

If you choose "Continue with Google," we ask Google for your basic profile and email address (the openid, email, and profile permissions). From what Google returns, we keep only your Google account ID and your verified email address, which link your Google account to your HIVE account. We do not receive your Google password, we do not store your name or profile photo, and we do not keep any Google access tokens, so we cannot access your Google account after you sign in.

Mock drafts

The mock draft tool saves your drafts and settings in your own browser. When a completed mock draft is saved to our servers, we store the picks, the draft settings, when the draft started and finished, a random ID for your browser, a one-way hash of your IP address (never the raw address), and, if you are signed in, a link to your account.

Usage information

We use Vercel Web Analytics to count page views. It does not use cookies. It records the page visited, the referring page, and general information such as browser, operating system, device type, and country. Like most websites, our hosting provider also processes standard request data, such as IP address and browser type, to deliver pages and keep the site secure.

How we use information

  • To create your account, sign you in, and keep you signed in.
  • To send sign-in emails you request.
  • To send the Hive Mind newsletter. The first time you sign in, we add your email to our newsletter list. You can unsubscribe at any time using the link in any newsletter email.
  • To publish crowd ADP. We combine the picks made by people (not the computer picks) across many saved mock drafts into public average draft positions. Crowd ADP never shows who made a pick.
  • To keep the site secure, prevent abuse and spam submissions, and understand which pages are useful.

Cookies and browser storage

We use a small number of first-party cookies, all needed for signing in. We do not use advertising or tracking cookies.

hive_sid180 days, renewed as you use the site

Keeps you signed in. Holds a random token that matches a session record on our servers.

hive_sid_fresh24 hours

Notes that your session was recently renewed, so we do not renew it on every page.

hive_session30 days

An older sign-in cookie that contains your email in a signed token. We replace it with hive_sid when you visit, but it may be set if our database is briefly unavailable when you sign in.

hive_google_flow10 minutes

Set only while you sign in with Google. Holds encrypted values that protect the sign-in from tampering, and is deleted when sign-in finishes.

The site also saves a few preferences in your browser's local or session storage, such as your board view settings, your mock drafts in progress, whether you have dismissed the sign-up prompt, and the email you typed while signing in (kept only for that browser tab). This information stays on your device. You can clear it at any time in your browser settings.

Service providers

We use these companies to run the site. They process information only to provide their services to us.

  • Vercel hosts the site and provides Web Analytics.
  • Neon hosts our database.
  • Resend delivers sign-in emails.
  • beehiiv manages our newsletter list and sends the newsletter. We share your email address, that you are a founding member, and which page you signed up from.
  • Google provides sign-in, only if you choose "Continue with Google."

Some pages show video and podcast artwork loaded directly from YouTube and our podcast host, and link to our social channels. Those services have their own privacy policies.

Sharing

We do not sell your personal information, and we do not share it for advertising. We share it only with the service providers above, when required by law, or to protect the rights and safety of HIVE, our users, or others. If HIVE is ever part of a merger or sale, your information may transfer to the new owner under this policy.

Retention

  • Account information is kept until you ask us to delete your account.
  • Sessions end when you sign out, or 180 days after you last used the site. Expired sessions are deleted.
  • Sign-in codes are deleted about a day after they expire, sign-in link records after a few days, and abuse-protection counters after about two days.
  • Saved mock drafts are kept to support crowd ADP. If you delete your account, any saved drafts are no longer linked to your account.

Your choices and rights

Wherever you live, you can ask us to access, correct, or delete your personal information, or to stop emailing you. Email hivesportsapp@gmail.com from the address on your account. We may need to confirm the request came from you, and we will respond within 30 days.

  • Newsletter. Unsubscribe with the link in any newsletter email. This does not delete your account.
  • Sign out. Signing out on the account page ends your session in that browser.
  • Google. To unlink Google from your account, email us. You can also remove HIVE Fantasy from the connected apps in your Google Account settings.
  • Delete your account. Email us and we will delete your account, your sessions, and any linked Google sign-in, and remove your email from our newsletter list.

Security

We take reasonable steps to protect your information. Session tokens and sign-in codes are stored only in hashed form, sign-in cookies are not readable by page scripts, and connections to the site are encrypted. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Children

HIVE is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information, email us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date at the top of this page. If we make a significant change, we will give notice on the site or by email.

Contact