Privacy

Version 2026-08-22. Short, because what we hold is short.

Plain-English draft. Written by the people who built the product and not reviewed by a lawyer. It describes what the system actually does today.

What we store

Your email — to sign you in and to reach you.
A username you choose.
Leagues you connect — the platform id, and the public settings, rosters and draft we read from it.
Your plan — strategy, market settings, saved drafts. Mostly in your browser, not on our servers.
Feedback you send us.
That you accepted the terms, and which version.

If you request a beta invite we store the address you gave and anything you typed in that form. Nothing else.

What we do not do

We do not sell your data. We do not run advertising trackers. We do not ask for platform passwords, payment details, or anything about you beyond the above.

Where it lives

In a Supabase-hosted Postgres database. Access is restricted per account at the database level, not just in the interface — one account cannot read another’s leagues.

We keep short-lived counters of request volume, keyed by account or IP address, to stop the service being scraped. They are deleted after two days.

Deleting it

Ask and we will delete your account and everything attached to it. While we are in beta that is a person doing it rather than a button, and it will not take long.