Security

Access is separated by role, ownership, and tournament context.

Sports Fantasy combines authenticated sessions, server-side authorization, database policies, and controlled operational workflows to reduce accidental or unauthorized changes.

Last updated 22 July 2026

Account protection

OTP-based authentication and session expiry protect account access. OTPs and credentials must never be shared.

Authorization

Organizer ownership, player participation, scorer assignments, tournament visibility, and direct player-account lookups are enforced on the server rather than trusted to the visible interface.

Scoring integrity

A single active scoring device publishes events at a time, with an audit history, offline queue, corrections, and atomic takeover.

Report responsibly

When reporting a suspected issue, share reproducible steps and affected records without exposing personal data, OTPs, or service credentials.