PUCKDRAFTS · POLICIES

Privacy Policy

DRAFT — NOT APPROVED FOR PUBLIC LAUNCH. This document is a development template and is not legal advice. Verify operator details, actual data practices, applicable consumer laws and content rights with qualified counsel before accepting public accounts.
Drafted November 8, 2026 · Not yet effective

Operator and contact

The verified legal operator and a monitored privacy email must be identified before public launch. This document is not a finalized privacy notice.

Information collected

Registration uses an email address, username, display name and authentication credentials processed by Supabase. Fantasy activity includes league memberships, draft selections, settings, team names and invitation codes. The browser may store practice drafts and preferences locally.

Purposes

Information is used to authenticate members, manage leagues, enforce draft rules, provide security, diagnose technical problems and respond to support requests. Applicable legal bases depend on the user's jurisdiction.

Service providers

Cloudflare provides hosting and security services and may process traffic and request metadata. Supabase provides authentication and database storage. Authorized sports-data providers may deliver schedules, statistics and player metadata.

Visibility to league members

Usernames, fantasy team names and draft decisions may be visible to participants in the same fantasy league. Users should not include sensitive personal information in these fields.

Retention and international transfers

The final retention periods, backups, hosting regions, processor terms and international-transfer safeguards need verification and publication before opening registration.

User rights

Applicable laws may allow access, correction, export, deletion or objection. A working support address and account-deletion process must be provided and tested before launch.

Security, age and updates

The application is designed for adults 18 and older and uses HTTPS and secure session cookies when correctly deployed. No system guarantees absolute security. The notice must be revised when analytics, payments, new profile data, or advertising are introduced.