Legal
Privacy Policy
Effective August 21, 2026.
Who we are
Draft Depot, contact privacy@playdraftdepot.com. This policy covers the website, PWA, and any App Store / Play builds of the same product.
What we collect
Account email or social login id, display name, age confirmation (18+ checkbox and timestamp — not a birth date), fantasy lineups, Bobble Bucks balance, wagers, purchases (product id, amount, last4, brand, status — not the full card number), device alerts preference, crash logs, and coarse analytics (pages and feature taps) if you leave analytics on. We do not sell your personal information as “sale” or “share” are defined by the CPRA.
Why
To run your account, score contests, fulfill in-app purchases, send the alerts you opted into, fix crashes, keep the product from falling over, and enforce the plan you paid for. Legal bases (EEA/UK): contract, legitimate interests in security and product health, and consent for optional analytics.
Processors
Hosting on Vercel, database on Neon (or a local preview database), auth via Better Auth (Google / X / email), mail via Resend when configured, payments via Stripe / Apple / Google. Live scores from The Odds API and TheSportsDB when keys are set — those feeds receive our server IP, not your name or email. Optional insight reads use xAI when an API key is configured. We do not send your lineups to ESPN or Sleeper.
Cookies and similar
We use a first-party session cookie to keep you signed in. We do not run third-party advertising cookies. You can block cookies in the browser; the app will not stay signed in.
Crash reporting
We use crash reporting (including Firebase Crashlytics when the native apps are shipped) to record stack traces, app version, and a coarse path. Turn off analytics in Settings if you want fewer diagnostics; crash reports needed to keep the app stable may still be stored.
Retention
We keep account data while your account is open. Deleted accounts are purged from live systems within 30 days, except records we must keep for tax, fraud, or App Store / card-network audit (receipts, typically up to 7 years).
Your rights
You can access or delete your Draft Depot data in Settings. You can also email privacy@playdraftdepot.com. EEA/UK users may object to analytics and request a copy of their data. California residents: we do not sell or share personal info as those terms are defined by the CPRA. We honor a Global Privacy Control signal as an opt-out of sale/share, which is already our default.
Kids
Draft Depot is for adults 18+. It is not directed at children under 13. If we learn we have data from a child under 13, we delete it. COPPA does not apply to this product because we do not knowingly collect from children.
International
Servers may be in the United States. If you use the app from elsewhere, you understand your data is processed in the U.S.
Contact
Draft Depot. privacy@playdraftdepot.com