Privacy Notice

Controller and contact

FantaVoice is operated by Matteo Lippiello. Email support@fantavoice.it for privacy, data-access or support requests.

Data processed

• Account, email, display name, language and preferences
• Leagues, teams, player entries, budgets, rosters, auctions, bids, purchases and history
• Anonymous guest sessions, technical device identifiers, team binding, connection state and essential RTT telemetry
• Technical logs, IP address and browser information that providers may process for security and operation

Purposes and legal bases

Data is used to provide accounts and auctions, save and recover state, secure the service, prevent abuse, answer support requests and meet applicable obligations. Optional analytics and advertising rely on consent where required.

Providers and recipients

• Supabase for authentication, PostgreSQL and Realtime
• Vercel for production hosting, delivery and technical logs
• Google for OAuth when you choose Continue with Google
• OVH/Zimbra as the active SMTP service for account confirmation and password recovery
• Cloudflare Turnstile prepared for anti-abuse protection and used only when its keys and flag are enabled
• ElevenLabs prepared but inactive while cloud TTS is disabled
• Google AdSense: publisher account and site verification configured; site under review and real ads disabled
• Google CMP configured to collect and manage consent before any future advertising activation

Microphone and audio

Microphone permission is explicit. FantaVoice does not record or retain audio by default and does not use audio or transcripts for analytics or advertising. The browser or speech-recognition service available on the device may process audio temporarily to convert it into text or a bid amount; this processing can depend on the browser and operating system in use.

For Italian, recognition runs on a Vosk model downloaded once and executed entirely inside your browser: in that case the audio never leaves your device and is not sent to any server, ours or third-party. When the browser does not allow this mode, audio may be processed by the system dictation service under its provider's terms.

Retention

Account and auction data is kept while the account is active or while needed to provide the service. Account deletion requests have a 30-day recovery window and final erasure is completed through an administrative process. Guest sessions expire automatically. Providers retain technical logs under their own policies and security requirements.

Your rights

Email support@fantavoice.it to request access, correction, deletion, restriction, portability or objection, or to withdraw consent. You may also complain to the competent supervisory authority.

Transfers and updates

Some providers may process data outside the European Economic Area using safeguards under their agreements and applicable law. This notice will be updated when relevant services or processing activities change.