CFM Zone

Privacy Policy

Last updated: October 10, 2026

Overview

This policy explains what personal information CFM Zone collects when you use cfmzone.com (the “Service”), how it is used and the choices you have. We collect only what the Service needs to work. We do not sell your data, we do not show ads, and we do not use analytics or tracking cookies.

Information we collect

Your Discord account. When you sign in with Discord we receive your Discord ID, username, avatar and email address, plus the sign-in tokens Discord issues.

Your profile. What you fill in when you join: first and last name, age, country, state or region, and favorite NFL team.

League activity. The leagues you belong to, your role and team, trade proposals and votes, favorite players, join requests, and content commissioners add (announcements, champions).

EA connection (commissioners). If you connect an EA account to a league, we store the EA persona name and ID, the platform, and the access tokens EA issues, encrypted. We never receive your EA password. Through that connection we import your franchise's data: teams, players, contracts, schedules and stats.

Technical data. A sign-in cookie that keeps you logged in, and when you were last active. Our hosting provider also keeps standard server logs (IP address, browser, pages requested and times) to run and protect the site.

How we use it

  • To sign you in and keep your session active;
  • To show your leagues, team, profile and league data to you and the members of your leagues;
  • To sync league data from EA when a commissioner asks for it;
  • To keep the Service secure, fix problems and answer your messages.

Who we share it with

Members of a league see that league's data and the profiles of its members. Beyond that, your information is only handled by the services that run CFM Zone for us:

  • Vercel - hosting;
  • Neon - database;
  • Discord - sign-in;
  • EA - league data, only for leagues whose commissioner connected an EA account.

We may also share information when the law requires it or to protect the Service and its users.

Where your data is stored

CFM Zone is used by people around the world, and its servers and database are located in the United States. If you use the Service from another country, your information is transferred to and processed in the United States, with the safeguards described in this policy.

Cookies

We only use the cookies needed for sign-in and security. There are no advertising, analytics or third-party tracking cookies.

How long we keep it

  • A sign-in session ends after 30 days without use, or right away when you sign out everywhere from your profile;
  • Your account and league data are kept while your account is active, or until you ask us to delete them;
  • A deleted league can be recovered for 7 days.

Your rights

Wherever you live, you can ask to access, correct, export or delete your personal information, or withdraw a consent you gave. Data protection laws where you live - such as the GDPR in the European Union, the LGPD in Brazil or the CCPA in California - may give you additional rights, and we honor them. Email contact@cfmzone.com and we will answer.

Security

Connections to the site are encrypted (HTTPS), and EA access tokens are encrypted before they are stored. No system is perfectly secure, but we work to protect your information.

Changes

We may update this policy; the date at the top shows the latest version.

Contact

Privacy questions or requests: contact@cfmzone.com