Privacy Policy

Last updated: August 2, 2026

This policy explains how The Commish (“Commish,” “we,” “us,” or “our”) collects, uses, shares, retains, and protects information when you use commish.lol, our iOS app, and related services (collectively, the “Services”).

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you understand the collection, use, and disclosure of information described here.

Personal information we collect or process

“Personal information” means information that identifies or can reasonably be linked to a person. It does not include information that has been anonymized or de-identified so that it cannot reasonably be linked to a person.

Depending on how you use the Services, we may collect or process:

Account and contact information, such as your name, email address, login credentials, and internal user identifier.
Fantasy-football and activity information, such as linked league and roster data, watched players, preferences, and the advice or features you view or use.
Linked-service information when you choose to connect a service such as Yahoo Fantasy Sports or Discord, including identifiers and authorization tokens needed to maintain that connection.
Payment and subscription information. Payments are processed by Stripe or the Apple App Store, depending on where you purchase. We receive transaction, product, subscription, and limited billing details but do not store complete payment-card numbers.
Mobile and notification information, such as an app installation identifier, device label, push-notification token, notification preferences, and delivery status.
Communications and content, including support requests, feedback, and messages submitted to interactive or AI-powered features.
Device and usage information, such as IP address, browser or device type, operating system, pages and features used, timestamps, cookies, and diagnostic or security logs. Our website currently uses Google Analytics to understand usage.

Sources of personal information

We may collect personal information:

Directly from you when you create an account, use the Services, connect an integration, make a purchase, or communicate with us.
Automatically from your browser or device through the Services, cookies, and similar technologies.
From service providers that process information on our behalf.
From partners or third parties when you direct them to connect with Commish, such as Yahoo, Discord, Apple, or a payment provider.

How we use personal information

We may use personal information to:

Provide, personalize, secure, maintain, and improve the Services and their fantasy-football features.
Authenticate accounts, preserve sessions, maintain watchlists and linked services, and deliver requested notifications.
Process purchases, manage subscriptions, communicate about accounts or transactions, and provide customer support.
Generate football advice and interactive responses. Content submitted to AI-powered features may be processed by our AI service providers to produce the requested response.
Measure performance and usage, troubleshoot problems, prevent fraud or abuse, and protect users and the Services.
Comply with law, respond to valid legal process, enforce our agreements, and establish or defend legal claims.

How we disclose personal information

We do not sell personal information. We do not use personal information for cross-app tracking or share it with third parties for their own targeted advertising.

We may disclose information:

To service providers that help us operate the Services, including hosting and infrastructure providers, Google Analytics, Stripe and Apple for payment processing, authentication or integration providers such as Yahoo and Discord, Apple for push notifications, email and support providers, and AI service providers.
When you direct or consent to a disclosure, such as connecting a third-party account.
When required by law or reasonably necessary to protect Commish, our users, or others; enforce our agreements; or investigate fraud, abuse, or security incidents.
In connection with a merger, financing, acquisition, bankruptcy, reorganization, or sale of all or part of our business or assets.

We limit service providers to information reasonably needed for their services and require them to protect it consistently with this policy and applicable law.

Cookies and analytics

We use cookies and similar technologies for authentication, security, preferences, and analytics. Browser controls may let you block or delete cookies, but blocking essential cookies can prevent login and other features from working.

Commish does not currently respond to browser “Do Not Track” signals. Because we do not currently sell or share personal information for cross-context behavioral advertising, we do not offer a separate sale or targeted-advertising opt-out. If those practices change, we will update this policy and provide legally required choices.

Third-party services and links

The Services may link to or integrate with third-party services. Those third parties process information under their own privacy policies, and we are not responsible for their independent practices. Review their policies before providing information to them.

The Commish merchandise store at merch.commish.lol is powered by Shopify and has a separate store privacy policy that applies to store visits, purchases, fulfillment, and Shopify’s processing.

Security and retention

We use administrative, technical, and organizational safeguards designed to protect personal information. No system or transmission method is completely secure, so we cannot guarantee absolute security. Do not send sensitive or confidential information through unsecured channels.

We retain account information while your account is active and as reasonably necessary to provide the Services. Retention also depends on whether information is needed for security, fraud prevention, legal compliance, dispute resolution, payment and tax records, or enforcement of our agreements. Backup copies and operational logs may remain for a limited period before routine deletion.

Account deletion and privacy choices

You can initiate deletion of your account and associated deletable data from Account Settings. You may also email support@commish.lol. Disconnecting a linked service revokes Commish’s ongoing access to that integration, subject to the provider’s own policies.

Depending on where you live, you may have the right to:

Request access to or knowledge of personal information we maintain about you.
Request correction of inaccurate personal information.
Request deletion of personal information, subject to legal exceptions.
Receive a portable copy of certain personal information.
Withdraw consent where processing is based on consent.
Appeal a decision or complain to your local data-protection authority.

We will not discriminate against you for exercising a privacy right. We may need to verify your identity before completing a request. Where permitted by law, you may designate an authorized agent; we may require proof of that authorization and direct identity verification. We will respond within the time required by applicable law.

Children’s privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us so we can investigate and delete it as appropriate.

International processing

Commish and its service providers may process information in the United States and other countries where they operate. When required, international transfers are made using legally recognized safeguards.

Changes to this policy

We may update this policy to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised policy here, update the “Last updated” date, and provide additional notice when required by law.

Contact and complaints

Questions, privacy requests, or complaints can be sent to support@commish.lol. Depending on where you live, you may also have the right to appeal our response or lodge a complaint with your local data-protection authority.