Privacy Policy

1 · Who is responsible for your data

TheSimFather LLC (“we”, “us”, or “the service”), trading as The SimFather, operates the website and the application at thesimfather.com, and is the party responsible for the personal information described here. We are a daily fantasy sports information and skill-evaluation service, and we are not affiliated with DraftKings, FanDuel, or any other contest operator.

Contact for anything on this page (questions, corrections, or deletion): support@thesimfather.com.

Postal address: 8605 Santa Monica Blvd, PMB 294884, West Hollywood, California 90069-4109.

2 · What we collect, and why

We keep the collection as small as the product allows. There are two different forms on this site and they do different things, so read whichever one you used. Arrival parameters, when the address carries them, are kept as well.

• Sign up creates an account on thesimfather.com, with your email address or by signing in with Google, Discord or Facebook. We collect your email address and your date of birth, and your account page asks for your name and the state you play from. The email is how you sign in and how we reach you about your account: a single-use code or link proves it is yours, and any link is stored only as a hash. If you set a password, it is kept only as a one-way hash, never in a form anyone can read. The date of birth is checked against the minimum age for the state you are playing from, because that age is not the same in every state. We keep the date, not just the yes-or-no answer, so a later check can be re-run rather than trusted.
• If you sign in with Google, Discord or Facebook, that service confirms who you are and shares your name, your email address and, if you have one, your profile picture. That is all we ask it for: no friends list, no posts, no other profile data, and we never post anything for you. You can disconnect it from your account at any time.
• The state and country the request comes from, as reported by our hosting provider from your network connection, at sign-up, at the paywall, and again before any payout. We use it for one purpose: refusing paid play where we do not offer it. It is not a precise location, we do not store a coordinate, and we do not use it for advertising.
• Payment details go to Stripe, not to us. If you subscribe, Stripe collects and holds your card. We never see the card number. What we keep is the Stripe customer and subscription identifier, which plan you are on, and the amount and status of each charge, because that is the record of what you paid us.
• Your lineups and results, once you enter an evaluation: the lineups you submit, what they scored against the real box scores, and how your simulated balance moved as a result.
• The waitlist form is the separate one, and it takes an email address and nothing else. We use it for one purpose: to send you a single notice when the service opens. For visitors in the EU or UK, the legal basis for this is your consent, given when you submit the form.
• Technical data handled automatically by our providers. When you submit the form, or simply load the page, the companies that run the form and the hosting (below) may record ordinary technical details such as your IP address, browser type, and a timestamp, to deliver the request and to block spam and abuse. We do not use this to build a profile of you, and we do not combine it with your email to track you.
• How you arrived, if you allow it. If the address you landed on carries campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term) or a ref or atp code when one is present, and you allow marketing cookies, we keep those values so a later sign-up or checkout link on our own sites still has them. That is the only use.

We do not collect your card number, your contacts, or your precise location. Aside from the arrival parameters above and what a sign-in service shares when you choose one, we do not keep anything you did not type into our forms.

3 · Cookies and privacy preferences

Strictly necessary storage keeps you signed in, protects requests, and remembers your privacy decision. It is always active because the site cannot provide those core functions without it.

Optional storage is off until you choose it. Functional storage can remember your theme, chat panel, and help panel choices. Marketing storage keeps attribution parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term, plus ref or atp when present) in sessionStorage, localStorage, and a first-party cookie named sf_attr. That cookie lasts 30 days and stays within the .thesimfather.com family of hosts.

If marketing is allowed, a click on a Discord invite may send a small first-party event to our own Workers at POST /e. The event contains the page path and any stored attribution. We do not sell it.

If you allow marketing, we also use Google Tag Manager to load the Meta Pixel, which belongs to Meta Platforms, and Google Ads conversion tracking, which belongs to Google. They count visits and these actions on our sites: creating an account, starting a checkout, a completed purchase, a click on the Discord invite, and joining the email list. They can set cookies (_fbp and _fbc for Meta, _gcl_au and _gcl_aw for Google), and they send Meta and Google the page you are on, the action, and details of your browser and device, and for a completed purchase the amount charged, which those companies may use to match the action to an account of theirs and to measure and improve advertising. None of it starts until Marketing is on, and none of it runs in a browser that sends Global Privacy Control. Choosing Do Not Sell or Share My Personal Information in the footer, or switching Marketing off in Cookie Preferences, stops them on the next page and clears those cookies from this browser.

If you allow analytics, we use Google Analytics to count visits and see which pages people use, so we can tell what works. It starts only once the Analytics preference is on, and never before. It sets first-party cookies named _ga and _ga_ followed by our property ID, which Google keeps for up to two years, and it sends Google the pages you view, how you arrived, and your device, browser and approximate location. We have turned off Google signals and ad personalization, so it is not used to link you across devices or other sites or to show you ads. Turning Analytics off stops it on the next page and clears those cookies from this browser.

If you allow analytics, we also use Microsoft Clarity to see how pages are used: where people click and scroll, and short recordings of a visit, so we can find what confuses people and fix it. It starts only once the Analytics preference is on, and never before. Clarity hides what you type, and the places that show your email address are hidden from it too. It sets first-party cookies named _clck and _clsk, keeps them for up to a year, and sends Microsoft the pages you view, your clicks and scrolls, and your device, browser and approximate location. We do not allow it to be used for ads. Turning Analytics off stops it on the next page and clears those cookies from this browser.

Separately, our hosting provider may collect cookie-free, aggregated delivery measurements without building a visitor profile.

You can choose Accept All, Reject Optional, or set each optional category separately. Use Cookie Preferences in the footer whenever you want to change your choice. Turning marketing off clears the stored attribution from this browser. Turning functional storage off clears the interface choices it remembered.

Our hosting and security providers may use strictly necessary, network-level cookies to deliver and protect the site. A bot check may load when you use a protected form. Those security tools are not used to track you across other websites.

We honor Global Privacy Control. If your browser sends it, advertising and social-media tags, including the Meta Pixel, stay off even after Accept All. We do not respond differently to the older browser “Do Not Track” (DNT) signal.

4 · The providers who touch your data

We use a small number of established services to run the site. Each handles data under its own privacy policy, acting on our behalf to operate the service:

• Formspree runs the waitlist form. When you submit, Formspree receives and stores your email address, delivers it to us, and may log technical data for spam prevention. (Formspree privacy policy)
• Cloudflare hosts and delivers this website and protects it from attacks, processing network-level data such as IP addresses in the course of doing so. (Cloudflare privacy policy)
• Google Workspace hosts the inbox where we read the waitlist notices Formspree sends us. (Google privacy policy)
• Stripe takes and holds every payment. If you subscribe, your card details go to Stripe and never touch our servers. Stripe tells us which plan you bought, whether the charge succeeded, and its own identifiers for you. (Stripe privacy policy)
• Clerk runs sign-in and accounts. It holds your email address, your name, the one-way hash of any password, your profile picture if a sign-in service shared one, and a record of your sign-ins, and it emails the codes that prove your address is yours. (Clerk privacy policy)
• Google, Discord and Facebook (Meta), only if you choose to sign in with one of them. It confirms who you are and shares the details named in section 2, under its own privacy policy. (Google privacy policy, Discord privacy policy, Meta privacy policy)
• Cloudflare Email Service delivers the sign-in links and the account notices from thesimfather.com. (Cloudflare privacy policy)
• Discord, only if you choose to join the community. Joining is optional and takes you to Discord, which then handles your data under its own terms. Joining does not give us your email; signing in with Discord is separate and is described above. A click on the invite may send the first-party event described in section 3. (Discord privacy policy)
• Google Analytics, only if you allow analytics. It measures how the site is used, as described in section 3. (Google privacy policy)
• Microsoft Clarity, only if you allow analytics. It shows how pages are used, as described in section 3. (Microsoft privacy statement)
• Google Tag Manager, Google Ads and Meta Platforms (the Meta Pixel), only if you allow marketing. They measure advertising, as described in section 3. (Google privacy policy, Meta privacy policy)

We do not sell your personal information for money, and we do not rent or trade it. If you allow marketing, the Meta Pixel and Google Ads send Meta and Google information about your visit and the actions listed in section 3, which California law may treat as a “sale” or “sharing”; you can stop it with Do Not Sell or Share My Personal Information in the footer. The other providers above act on our behalf to run the service.

5 · Where your data is processed

These providers are based in the United States, and your information is processed there. If you are visiting from the EU, the UK, or elsewhere, submitting the form means your email is transferred to and stored in the United States by the providers named above, under the safeguards set out in their respective privacy policies.

6 · How long we keep it

A waitlist email is kept only as long as it is doing the job you gave it: until the service launches and the one launch email has gone out, and after that, if you have not become a customer, no longer than 90 days, at which point the entry is deleted. If you ask us to delete it sooner, we do it when you ask.

An account lasts while you have one. Delete it yourself from your account page, or ask us to close it, and we delete the account and what is attached to it: your date of birth, the state we recorded, your lineups and your results. We keep the record of what you paid, because tax and accounting rules require it, and we keep enough to honour a self-exclusion request so that closing an account cannot be quietly undone by opening another one. A sign-in link is stored only as a hash, expires, and is marked used the first time it is opened, so the same link never works twice.

Attribution in your browser, when you allow it, lives in session storage for the tab, in local storage until you clear site data, and in the sf_attr cookie for 30 days. Turning Marketing off in Cookie Preferences removes it. A Discord click may send the event in section 3. That is not a profile we keep on you.

7 · Email, and how to stop it

The only message we intend to send from the waitlist is a single notice when the service opens. If we ever send more than that, every commercial email will carry a one-click way to unsubscribe and a valid postal address, and we will honor an unsubscribe promptly, as US law (CAN-SPAM) requires. You can also opt out at any time by emailing support@thesimfather.com.

8 · Your rights and choices

Everyone

Whatever jurisdiction you are in, you can email us at support@thesimfather.com to ask what we hold about you, to correct it, or to have it deleted. To protect your data, we confirm the request by replying to the email address on file before acting on it. You can also delete your account yourself, signed in, from your account page; the steps are on Delete your account and data. Deleting your account deletes what a sign-in service shared with us too, and you can disconnect Google, Discord or Facebook from your account at any time under Manage account.

California residents (CCPA / CPRA)

You have the right to know what personal information we have collected and how it is used, to request its deletion, to request correction, and to opt out of the “sale” or “sharing” of your personal information. We do not sell your personal information for money. If you allow marketing, the Meta Pixel and Google Ads (section 3) may count as “sharing” it for cross-context behavioral advertising. To opt out, use Do Not Sell or Share My Personal Information in the footer of any page; we also treat a Global Privacy Control signal from your browser as that opt-out. We will not discriminate against you for exercising any right. California’s “Shine the Light” law lets you ask which categories of personal information we disclosed to third parties for their direct marketing; ask at support@thesimfather.com.

EU / UK residents (GDPR / UK GDPR)

You have the rights of access, rectification, erasure, restriction, data portability, and objection, and the right to withdraw your consent at any time (which does not affect anything done before you withdrew it). You may also lodge a complaint with your local data protection authority. Because the only processing here rests on your consent, withdrawing it, by asking us to delete your email, ends it completely.

9 · Security

The site is served only over an encrypted (HTTPS) connection, so your email is protected in transit. Once submitted, it is held by Formspree and in our Google Workspace inbox, both of which use industry-standard protections. No method of transmission or storage is ever perfectly secure, and we cannot guarantee absolute security, but we collect little, keep it briefly, and delete it on request, which is the strongest protection of all.

10 · Children

Daily fantasy sports is for adults. This site is not directed to anyone under 18 (or under 21 where that is the local requirement), and we do not knowingly collect personal information from anyone under those ages. If you believe a minor has given us their information, email us and we will delete it.

11 · Changes to this policy

If this policy changes, we will update this page and change the “last updated” date at the top. If a change is significant, we will make that clear rather than bury it.

Questions, corrections, deletions, or anything else about your data: support@thesimfather.com. See also the Terms of Use.