Privacy Policy

Account and profile data. When you register, we collect your email address, display name, and any other information you provide during account creation or in your profile settings.

Billing and subscription metadata. When you make a purchase, we collect information about your subscription plan, purchase history, and billing status. Payment card numbers and sensitive payment details are handled directly by Stripe and are not stored on CFL systems.

Product usage and activity. We collect information about how you use the platform, including league participation, team rosters, research activity, AI tool usage, quiz attempts, and competitive results.

Educator, classroom, and student data. Educators who use the classroom program provide information about their classrooms and students. Student accounts are created and managed through the educator’s account. Student data is linked to the associated classroom and educator.

AI prompts and responses. When you use AI-powered tools, we may retain your prompts and the AI-generated responses to improve service quality, support educator oversight features, and maintain audit logs where applicable.

Technical and device data. We automatically collect technical information such as IP addresses, browser type, device identifiers, operating system, referring URLs, and interaction logs. This information is used for security, diagnostics, and service improvement.

We use the information we collect to:

• Provide, maintain, and improve the CFL platform and its features.
• Process payments, manage subscriptions, and fulfill purchases through Stripe.
• Authenticate users and maintain secure sessions.
• Operate classroom features, student accounts, and educator tools.
• Deliver AI-powered research and educational outputs.
• Send transactional communications (e.g., purchase confirmation, account notices).
• Detect and prevent fraud, abuse, and security incidents.
• Comply with applicable legal obligations.

We share information with trusted third-party service providers that help us operate the platform. These providers are authorized to process your data only as necessary to perform services on our behalf.

Key service providers include:

• Stripe — payment processing, subscription management, and the customer billing portal. Stripe processes payment card data directly and under its own privacy controls.
• AI model providers — large language model providers that process prompts and generate responses for CFL’s AI tools.
• Market data providers — services that supply real-time and historical market data used for gameplay and research features.
• Infrastructure providers — cloud hosting, database, and authentication services used to operate the platform.

We do not sell your personal information to third parties.

CFL uses session-based authentication to keep you signed in. Authentication state is managed through secure, server-set cookies and tokens. We do not use third-party advertising cookies or cross-site tracking technologies.

We may use functional cookies or local storage to remember your preferences (such as display settings or active workspace state) across sessions.

Student data collected through the classroom program is associated with the educator account that manages the student. Educators can view student activity within their own classroom context, including AI interaction logs where teacher oversight features are enabled.

We do not use student data for advertising or analytics purposes unrelated to educational service delivery. Student data is not shared with other users or educators outside the student’s associated classroom.

Students may only access the platform through educator-managed accounts within an approved classroom or Homeschool plan. We do not knowingly collect data from students outside of this structure.

We retain account and activity data for as long as your account is active or as needed to provide services. When you close your account, we will delete or anonymize your personal data within a reasonable time, except where retention is required for legal, tax, or audit purposes.

Billing and transaction records may be retained for longer periods to comply with financial recordkeeping requirements.

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, use, disclosure, or destruction. We use industry-standard practices for data storage, transmission encryption (HTTPS), and access control.

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining appropriate protections.

If you are a California resident or a resident of another U.S. state with applicable privacy rights, you may have rights to access, correct, or delete your personal information, and to opt out of certain data processing practices. To exercise these rights, please contact us.

As noted above, we do not sell personal information. We do not engage in cross-context behavioral advertising using your data.

You may access, update, or delete your account information through your account settings. You may cancel your subscription at any time through the billing portal.

To request deletion of your account or data, or to ask questions about your information, please contact us. We will respond within a reasonable time frame consistent with applicable law.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this page and, where appropriate, by email. Continued use of the Service after changes take effect indicates your acceptance of the updated policy.

If you have questions, requests, or concerns about this Privacy Policy or how we handle your information, please reach out through our contact page.