Privacy Policy

1. What we collect

When you use Draft Wrestlers, we collect:

• Account info: email address, display name, and optional profile photo
• League activity: teams, drafts, trades, waiver claims, scoring history, chat messages
• Payment info: payment status, amount, and Stripe session/intent IDs. We do NOT store card numbers — Stripe handles that. We retain records of payments for tax and accounting purposes.
• Technical data: IP address, browser type, and basic device info from server logs. Used for security and debugging.
• Push subscriptions: if you opt into browser push notifications, the subscription endpoint Google/Apple/Mozilla gives us.

2. What we don't collect

• Card numbers (Stripe handles payment processing)
• Passwords (we use email magic-links, not passwords)
• Cross-site tracking data
• Information from data brokers

3. How we use your data

We use the data we collect to:

• Run the service (sign you in, render your leagues, etc.)
• Send you transactional emails (sign-in links, league recaps if you opt in, refund confirmations)
• Investigate abuse, fraud, and bugs
• Improve the product (aggregate, anonymized analytics)

We don't sell your data. We don't share it with advertisers.

4. Third-party processors

We use a small number of third-party services to run Draft Wrestlers. They each have their own privacy practices.

• Stripe — payment processing.
• Resend — email delivery (magic links, recaps).
• Railway — hosting infrastructure.
• Cloudflare — DNS, CDN, and (if configured) object storage for photos.
• Plausible Analytics — privacy-friendly pageview analytics. Does not use cookies and does not collect personal data.

5. Your rights

You can, at any time:

• Update your display name, email, and notification preferences via Settings
• Delete your account via Settings → Delete my account. This hard-deletes your personal info; aggregate league data stays anonymized.
• Request a copy of your data by emailing support@draftwrestlers.com. We'll respond within 30 days.

6. Cookies

We use a single localStorage entry to keep you signed in (your JWT token). That's it — no analytics cookies, no advertising cookies, no tracking pixels. Plausible Analytics doesn't use cookies.

7. Data retention

We keep your data for as long as your account is active. When you delete your account, personal info is removed within 30 days. Payment records and aggregate league activity may be retained longer for accounting and platform integrity.

8. Children's privacy

Draft Wrestlers is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has signed up, contact us and we'll delete the account.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced via email or an in-app banner. The "Last updated" date at the top reflects the current version.

10. Contact

Privacy questions, data requests, or concerns: support@draftwrestlers.com.