Privacy Policy

Last updated: April 8, 2026

This Privacy Policy explains how Draftastic Fantasy ("Draftastic", "we", "us") collects, uses, and shares personal data when you use the Service.

1) Data We Collect

Account data: email, authentication provider identifiers, account timestamps.
Profile data: display name, timezone, notification preferences, profile metadata.
League data: league membership, team names, catchphrases, roster and transaction activity.
Technical data: device/browser info, logs, and basic usage diagnostics for reliability and security.
Policy consent data: timestamps for Terms/Privacy acceptance.

2) How We Use Data

To create and secure accounts, authenticate users, and prevent abuse.
To run league features and display user-generated league/profile content.
To provide optional account-related communications and notifications.
To maintain, debug, and improve product performance and reliability.
To comply with legal obligations and enforce our Terms.

3) Legal Bases (where applicable)

Depending on your location, we process data based on performance of a contract (providing the Service), legitimate interests (security and improvement), consent (optional communications), and legal obligations.

4) Sharing and Disclosure

We do not sell personal data. We may share data with service providers that help operate the Service, including:

Authentication and database infrastructure (e.g., Supabase).
Hosting, monitoring, and operational tooling providers.
Email/notification providers if or when messaging features are enabled.

We may also disclose data when required by law or to protect rights, safety, and platform integrity.

5) Cookies and Similar Technologies

We use essential cookies/session mechanisms required for authentication and secure operation. If we add analytics or marketing cookies later, this policy and consent flows will be updated accordingly.

6) Data Retention

We retain personal data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce Terms. Retention periods may vary by data type and legal requirements.

7) Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your data, and to object to certain processing. To request these actions, contact draftasticwrestling@gmail.com.

8) Children's Privacy

The Service is not intended for children under 13. If we learn that we collected personal data from a child under 13 without appropriate consent, we will take steps to delete it.

9) International Transfers

Your information may be processed in countries other than your own. We take reasonable steps to ensure appropriate safeguards are in place.

10) Security

We implement reasonable technical and organizational safeguards to protect personal data. No method of transmission or storage is 100% secure.

11) Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted in the Service with an updated effective date.

12) Contact

For privacy questions or data requests, contact: draftasticwrestling@gmail.com