Privacy policy
Last updated 17 September 2026
This Privacy Policy explains how SlapStat collects and uses personal data when you use the service.
Who is responsible
SlapStat is operated by Alexander Berglund, based in Sweden. Alexander Berglund is the controller of your personal data.
For privacy questions or to exercise your rights, contact privacy@slapstat.com.
What we collect
We collect only the information needed to operate and improve SlapStat.
Account information
When you create an account, we collect your email address and account information such as your account ID, account status, and creation date. We use this to provide and secure your account and to communicate with you about the service.
If you sign in with Google or Facebook, we store the account identifier they provide. If you add a username or a profile picture, we store those too.
Saved data
We store the projections and settings you save in SlapStat. A saved projection may include a league name and league identifier, as well as team names entered or edited by you.
If you connect Yahoo Fantasy, we store your Yahoo user ID where provided by Yahoo, together with encrypted access and refresh tokens needed to maintain the connection. League and team data is retrieved from Yahoo when needed and is not otherwise stored by SlapStat. League and team information may become part of a saved projection when you use it to set up a draft.
If you add your ESPN cookies (espn_s2 and SWID) to read a private ESPN league, we store them encrypted and use them only to read your leagues from ESPN.
When you share a projection, anyone with the link can see it, together with your username.
Payments
Premium is sold through Link, a Stripe service that acts as the merchant of record. Stripe processes your payment details under its own privacy policy. SlapStat never receives your card details.
We store your subscription's status and renewal date, and the customer and subscription identifiers Stripe gives us. If your email address is verified, we send it to Stripe to fill in checkout.
Analytics
If you consent to analytics cookies, we use PostHog to understand how the service is used and to improve it. Analytics data may be associated with your SlapStat account when you are signed in. If you do not consent, we do not set analytics cookies.
Communications
If you contact us by email, we process the contents of your message and your contact details to respond to you and handle your request.
If you send feedback from SlapStat, we store your message, the page you sent it from, your email address and your account ID in a private GitHub repository, so we can act on it and reply to you.
Why we use your data
We process personal data to:
- provide and secure SlapStat and your account;
- provide features you request, including third-party integrations;
- process Premium subscriptions and payments;
- communicate with you about your account or requests;
- understand and improve the service where you have consented to analytics; and
- comply with legal obligations and protect the service against misuse.
Depending on the purpose, our legal basis is performance of a contract, our legitimate interests, compliance with a legal obligation, or your consent.
Who we share it with
We do not sell your personal data or use it for third-party advertising.
We use service providers to operate SlapStat, including providers for hosting, email delivery, analytics, error monitoring, issue tracking, authentication, third-party integrations, and payment processing. These providers process personal data only as necessary to provide their services.
Some of our providers are located outside the European Economic Area. Where we transfer personal data outside the EEA, we rely on the European Commission's standard contractual clauses or on an adequacy decision. You can request a copy of the relevant safeguards by emailing privacy@slapstat.com.
Third-party services that you choose to connect, such as Google, Facebook, Yahoo, or ESPN, process data under their own privacy policies.
Cookies and similar technologies
SlapStat uses necessary cookies and similar technologies to provide the service, maintain your session, and remember your preferences.
Analytics cookies are only used where you have given consent. You can change or withdraw your consent through the available cookie controls.
Third-party services may also receive information directly from your browser when their content or software is loaded. We limit such integrations to what is necessary to provide the relevant feature.
How long we keep your data
We keep your account and saved data while your account remains active.
Yahoo access and refresh tokens are kept while your Yahoo connection is active, and ESPN cookies until you replace them. You can request removal of the stored Yahoo connection or ESPN cookies by contacting us.
If you ask us to delete your account, we delete your personal data unless we need to retain it to comply with a legal obligation, resolve a dispute, prevent abuse, or otherwise comply with applicable law. Stripe keeps records of your payments as the seller, under its own obligations.
Analytics data is retained only for as long as reasonably necessary for the purposes described above.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or receive a copy of your personal data, and to object to certain processing. Where we rely on consent, you may withdraw it at any time.
To exercise your rights, contact privacy@slapstat.com.
You also have the right to lodge a complaint with your local data protection authority. In Sweden, this is the Integritetsskyddsmyndigheten (IMY).
Changes
We may update this Privacy Policy when our processing of personal data changes or when required by law. We will publish the updated version on this page and update the date above.