Draft, under legal review. This describes how HyzerFlip works today; it may change before sign-ups open, and we will say so here.
Privacy Policy
HyzerFlip Fantasy Golf Last updated: 12 October 2026
The short version
We hold your email address, a display name, a password we cannot read, your settings (among them your time zone and language) and, if you add one, a team photo. If you invite someone to a league, we also hold the email address you typed and send that person the invitation. We also record which version of these documents you accepted, when, and that you confirmed you are old enough to use the service. That is all the personal data there is.
We do not use analytics, advertising or tracking of any kind. If the app or its server crashes, a crash report with your details stripped out goes to our error-reporting service (see "Who else sees your data"). There is one cookie, and its only job is to keep you signed in. We do not sell or share your data, and there is nobody to sell it to — we have no advertisers and no data partners.
You can download everything we hold at any time, and close your account yourself.
Who we are
HyzerFlip Fantasy Golf is run by HyzerFlip Fantasy Golf LLC, a Michigan limited liability company.
HyzerFlip Fantasy Golf LLC
2222 W. Grand River Ave, STE A
Okemos, MI 48864
United States
Questions about this policy: [email protected]
What we collect
What you give us
| Data | Why | Kept |
|---|---|---|
| Email address | To sign you in, to confirm the address is yours, and to send password resets and the notification emails you choose. While you change it, the new address is kept until you confirm it or the 24-hour link expires | Until you close your account |
| Display name | So other managers in your league can tell who you are | Until you close your account |
| Password | To sign you in. Stored only as a bcrypt hash — we cannot read it, and cannot tell you what it is | Until you close your account |
| Team and league names you choose | They are the content of the game | See "What survives closure" below |
| Team photo, if you add one | Shown beside your team name to the other managers in your league. It can be a picture of you, so it is optional, and you can replace or remove it in User Settings | Until you remove or replace it, leave or are removed from the league, or close your account |
| Settings: time zone, language, theme, accessibility choices (colour-vision mode, high contrast, text size, reduced motion), your default league, and whether your lifetime record is private | So the app shows times in your zone, looks the way you set it, and shows your record only to whom you chose | Until you close your account |
| Country, if you give it | Optional. To understand where our players are. Only our admins see it, as counts | Until you change it or close your account |
| Notifications, and your choice of which you get in the app and by email | To tell you what happened in your leagues: the draft, trades, waivers, your results, and a change someone else made to your roster | Each notification 180 days; your choices until you close your account |
| Whether our emails reach you | A record of each email we send (what kind it is, when, and whether it was delivered), kept without your address, and the delivery reports our email provider sends back: delivered, bounced, or marked as spam, with the email's subject and the address it went to. If an address bounces for good, or our email is marked as spam, we stop emailing it and record that, so we do not keep sending mail it cannot or does not want to receive; marking our email as spam also turns off the optional notification emails. User Settings tells you if we cannot deliver to your address | The record and the reports 90 days. If an address bounces for good or our email is marked as spam, the stop lasts until an admin lifts it (for example once the mailbox works again), then 90 days. A stop after repeated temporary bounces lifts itself after 14 days, and never holds back account emails such as a password reset. Closing your account deletes them, except that, for an address that bounced for good or marked our email as spam, we keep a one-way code made from the address (not the address itself), used only to recognise it so we never email it again. |
| Your place on the waitlist for a new league, if you join it | If you join the waitlist for a new league, we keep your place, the optional league name and note you give, and when you joined, so we can send you a pass to create a league | Until you leave the list, we give you a pass, you create a league or you close your account. A pass is kept 30 days after it is used or expires |
| Email addresses of people you invite to a league | To send them the invitation, and so the commissioner can see who has been invited | With the league's invitations. Closing your account deletes the ones that were not accepted |
| Reports you make about a team name, team photo, league name or trade note | So an admin can review the content and act on it. A report keeps what you reported, a copy of the reported text, and your reason if you give one. Only admins see who made a report; the manager reported is not told who | With the league: deleting the league deletes its reports. Closing your account leaves the report with nothing that identifies you |
| Managers you block | If you block another manager, we keep a record of whom you blocked, and when, so their trade notes, team photo and team-name changes stay hidden from you. It is included in your data export and is never shown to the person blocked | Until you unblock them or either account is closed |
| Two-factor sign-in (admin accounts only) | An authenticator key, stored encrypted, and one-use recovery codes, stored only as hashes | Until two-factor is turned off or the account is closed |
| Your acceptance of the Terms of Service and this policy | Which version of each you accepted and when, and the minimum age you confirmed you meet. It records that you agreed, and lets us ask again when either document changes. It is a yes to "I am at least 13", never a date of birth | For as long as the account exists. Closing your account keeps it with the anonymous league record, with nothing left in it that identifies you |
That is the complete list. We do not ask for your date of birth, your address, your phone number or any payment details, and there is nowhere in the product to enter them. Your country, if you choose to give it, and the time zone are the nearest things. The country is only counted: our admins see how many managers are in each country, never who. The time zone says roughly where in the world you are, and it is there so tee times and deadlines show in your own time. It starts as your device's zone, and you can set any zone you like.
An invitation email goes to someone who may not have an account. It names the league, the commissioner's display name and the team, and links to where they sign in or join. Nothing is sent to that address again unless someone invites it again.
What the game creates
Playing generates records: your draft picks, roster moves, trades, waiver claims, weekly line-ups and scores. These are the substance of your league's competition rather than facts about you, and other managers in your league can see them — that is the point of a fantasy league.
The app also records which walkthroughs and result pop-ups you have already seen, so it does not show them to you twice.
We record when you last signed in (a single date and time, replaced each time you sign in) so we can count how many accounts are active. It is included in your data export and deleted when you close your account.
What we do not collect
- No analytics. No Google Analytics, no Segment, no Mixpanel, no product analytics of any kind.
- No advertising or tracking pixels. None, from anyone.
- One cookie, and only one. It signs you in. It is marked
httpOnly, so no script on the page can read it, and it is sent only to our own API. It is strictly necessary for the service to work, which is why there is no consent banner asking about it. There are no advertising, analytics or tracking cookies of any kind. - A few things kept in your browser. The site stores, in your browser's own storage, that you are signed in, the league you last opened, your theme and similar screen choices. They stay on your device, are never sent to anyone, and exist only so the pages open the way you left them. If you start creating a league before confirming your email address, the league name, your team name and the email addresses of the managers you are inviting are kept in your browser's local storage for up to 24 hours, so the form is still filled in when you return from the confirmation link. They are not sent to us until you create the league, and they are deleted when the league is created, when you sign out, or when another account signs in on that browser.
- No location data, beyond whatever your internet provider reveals to any website by virtue of you connecting to it. Our server logs record that internet address with each request (see "What closure actually does").
- No third-party session recording or heat-mapping.
Professional player data
The product shows professional disc golf players — names, PDGA numbers, divisions, ratings and tournament results — so you can draft and score a fantasy team.
That is information about professional competitors in public tournaments, not about you, and it does not come from our users. It remains the property of its owners. HyzerFlip is not affiliated with, endorsed by, or sponsored by the PDGA or the Disc Golf Pro Tour.
Where it comes from, and how long we keep it. Player, event and course data is provided by the Professional Disc Golf Association (PDGA) under its developer licence. We keep the season being played in full. We keep the previous season's too until the new season has started and no league can still draft, because the draft board and player research pages rank players on the previous season. A league may draft until its own second week, and never later than 30 days after the season's first tournament.
After that, all of the previous season's PDGA data is deleted, and so is that of any older season: hole-by-hole scores, round statistics, tee times, each player's finishing places and total strokes, who entered each tournament, the course played, and the season's ratings. What stays is what identifies a player or a tournament (names, PDGA numbers, divisions, dates), so a league's history still says who played where; each player's current rating; and our own fantasy data: every league's fantasy points, results, match-ups and standings, and the previous-season points the draft board and player research pages show, worked out under each league's rules before the data they came from is deleted. The tournaments the public demo league plays are kept in full for the demo. A record of 2024 results that was compiled by hand from public results pages, before the licence, is kept as a historical record; it was never received from the PDGA. If the PDGA asks us to remove its data, we do so within 24 hours.
If you are a professional player and want to raise something about how your competition record appears here, write to us at the address above.
Who else sees your data
Five, and only five:
Your league. Other managers in a league you join can see your display name, your team name, your team photo if you added one, and the moves you make. Your email address is visible only to your league's commissioner, who needs it to reach a manager who has not set a line-up.
Your lifetime record is the one thing that goes beyond a single league: your totals across every league you have played in (wins, losses and ties, points for and against, how many leagues and seasons, leagues you have run, championships, playoff appearances, best finish and best week, trades and waiver claims, and when you joined). Anyone who currently shares a league with you can see those totals, but never the names, opponents or week-by-week scores of a league they are not in; the list by league is shown only to you. To hide the totals, switch on "Make my lifetime record private" in User Settings, and then only you and our admins can see them.
A team photo is served from an address that includes a long random key. It is not protected by sign-in, so someone given that address could open it, but the address cannot be guessed. It stops working as soon as the photo is removed, though a browser that already showed it may keep its own copy for up to a day.
Our email provider. Password reset emails, the link that confirms your email address, the league invitations a commissioner sends, and the notification emails you choose in User Settings (each with a link to stop that kind) are sent through Amazon Simple Email Service, run by Amazon Web Services (Amazon Web Services, Inc.) from its US East (Ohio) region in the United States. They see the address each message goes to and its contents, and tell us whether each message was delivered, bounced, or marked as spam (see "Whether our emails reach you" above). Nothing else is emailed. No message is marketing.
Our hosting provider. DigitalOcean (DigitalOcean, LLC) runs the application and stores the database, its backups and the team photos, in its New York region in the United States. They have the access any hosting provider necessarily has.
Our website and domain provider. Cloudflare (Cloudflare, Inc.) delivers the website's pages and runs our domain name. It sees the internet address of each visit and the page asked for, as any website you connect to does. Your account data does not pass through it: the app talks to our hosting provider directly.
Our error-reporting service. When the app or the API crashes, a crash report goes to Sentry (Functional Software, Inc.), which stores it in the United States. A report carries the error, the page or API address with ids and tokens removed, the browser or server it happened on and, from the API, your account's internal id. It carries no email address, name, form contents or cookies, and no screen recording. Sentry sees the internet address a report is sent from, as any website you connect to does. We use it to find out that something broke, and for nothing else.
We do not sell, rent or share your data with anyone else, for any purpose.
Where your data is held
In the United States. The database, its backups and the team photos are stored in DigitalOcean's New York region. Crash reports are stored by Sentry, and the emails we send are sent by Amazon Web Services from its US East (Ohio) region, both in the United States. Cloudflare delivers the website's pages from its servers around the world.
How long we keep it
Until you close your account, and no longer. A team photo goes sooner if you remove or replace it, or leave (or are removed from) the league it belongs to.
If you sign up but never confirm your email address, we delete the account and everything stored with it 30 days after sign-up. An account that has taken part in a league is never deleted this way.
Apart from that, there is currently no automatic deletion of inactive accounts. An account you abandon stays as it is until you close it.
Your choices
Get a copy of your data
User Settings → Your account → Download my data. It returns everything we hold about you, immediately, as a
file you can keep. No request form, no waiting period.
Close your account
User Settings → Your account → Close my account.
This happens straight away and cannot be undone.
If you are the commissioner of a league that other managers play in, another manager has to take over as commissioner first, so the league is not left with nobody who can run it. Write to us and we will hand it over.
What closure actually does
Erased immediately and irreversibly: your email address, your display name, and your password. Your sign-in is ended everywhere, on every device, at once. Your team photos are deleted, along with your settings, the record of which walkthroughs you have seen, your notifications and notification choices, the record of whether our emails reached you, any password-reset links, and every league invitation you sent or were sent that was not accepted. An accepted invitation stays as part of the league record, with your email address removed from it.
One exception: if our email to your address bounced for good or was marked as spam, we keep a one-way code made from the address, not the address itself, so we never email it again. The records of support actions on your account keep the same kind of code instead of your address.
Two copies that last a little longer. Our backups: our hosting provider backs up the database every day and keeps those backups, with point-in-time recovery, for 7 days. A backup taken before you closed your account still holds what it held then, so your email address, display name and password hash remain in those backups for up to 7 days after closure. They are used only to recover the service after a failure. Team photos are not in the backups: a deleted photo is gone at once. And our server logs: like any web server, ours records the internet address each request came from and the address of the page or API it asked for, and an error line can name an email address an invitation could not be delivered to. Logs are deleted as they rotate out, by size rather than by date; a fixed retention period is being set with our hosting provider.
Kept: the league record — the trades you made, the votes you cast, the line-ups you set, the scores your team earned — with your name removed from it. So is the record that the account accepted the Terms of Service and this policy, because that league record was made under them.
Why we do not delete the whole record. Your moves are entangled with other people's seasons. A trade has two sides; a veto vote decided whether somebody else's trade went through; your weekly scores determined who won a matchup. If we erased all of it, we would be rewriting the history of leagues that other people played in and still care about.
So we destroy everything that identifies you, and leave behind an anonymous participant. If that is not acceptable to you, please write to us before joining a league rather than after.
Correct something
Change your display name in settings. For anything else, write to us.
Security
What we actually do, rather than what is usually claimed:
- Passwords are stored as bcrypt hashes. We cannot read them, and a database breach would not reveal them.
- Sign-in tokens can be revoked. Resetting your password ends every existing session immediately — so if someone else is in your account, resetting genuinely removes them.
- The API refuses all requests by default and permits only what is explicitly opened, and this is verified automatically on every change.
- We keep the amount of personal data deliberately small, because the cheapest way to protect data is not to hold it.
No system is perfectly secure, and we will not pretend otherwise. If you find a problem, please tell us at [email protected] — we would rather hear it from you.
Children
HyzerFlip Fantasy Golf is not intended for anyone under 13 years old, and we do not knowingly collect personal data from them. This matches the minimum age in the terms of service.
Sign-up asks you to confirm that you are at least 13, and refuses to create an account for anyone who says they are younger. It asks for that confirmation rather than your date of birth, so that no birth date is ever stored.
Where the law of a country or US state sets a higher minimum, that higher age applies there, and sign-up will ask where you live so it can apply it. No such place is listed today, so sign-up does not ask.
If you believe someone under 13 has given us personal data, email [email protected] and we will delete the account and its data.
Changes to this policy
If we change it, we will update the date at the top and, for anything that materially affects you, tell you by email before it takes effect. The date is also the policy's version: when it changes, the app asks you to read and accept the new version the next time you sign in.