YOUR DATA
Privacy Policy
This policy explains what personal data Draft Day collects, why, who we share it with and the rights you have. We collect only what we need to run the game, we do not sell your data, and we do not use advertising or tracking cookies.
1. Who is responsible for your data
Draft Day is run by Mark Pruden in the United Kingdom, who is the controller of your personal data. Contact: hello@draftdays.co.uk.
2. What we collect
| Data | What it includes |
|---|---|
| Account details | Your email address, display name and password. Your password is stored securely (hashed) by our account provider and we never see it. |
| Game activity | The drafts, leagues and rooms you join, your picks, scores, results and Draft Coin history. |
| Usage record | The days you use Draft Day, so we can count active players. We do not record your IP address or browsing history for this. |
| Problem reports | The category, message and page you send when you use "Report a problem". |
| Saved on your device | Your browser stores your display name, profile and last active time so the site loads quickly. We do not use advertising or tracking cookies. |
| Visitor statistics | We use Cloudflare Web Analytics to count page visits, which pages are popular and roughly where visitors come from. It uses no cookies and does not identify you or follow you across other sites. |
| Technical data | Our hosting and account providers keep standard server logs, such as IP address, browser type and time of request, to keep the service secure and working. |
3. Why we use it
| Purpose | Legal basis |
|---|---|
| Creating your account and running the games you join | Contract: we need it to provide the service you signed up for |
| Showing your display name, picks and scores to other players in your games and on leaderboards | Contract |
| Keeping the site secure, preventing cheating and fixing problems | Legitimate interests |
| Counting active players to understand how the site is used | Legitimate interests |
| Replying to problem reports and emails | Legitimate interests |
| Meeting legal obligations | Legal obligation |
We do not use your data for marketing, profiling or automated decisions about you.
4. Who we share it with
- Supabase: our account and database provider, which stores your account and game data.
- Vercel: our website host.
- Cloudflare: manages our domain, forwards email sent to our @draftdays.co.uk addresses and provides our cookie-free visitor statistics.
- Resend: sends our account emails (sign-up, password reset) and Last Man Standing reminders, so it receives your email address.
- Google Fonts: supplies the site's font, so Google receives your IP address when the page loads.
- Other players: see your display name, picks, scores and results in shared games and leaderboards. They never see your email address.
Our football data provider receives no personal data about you. We never sell your data. We may share data if the law requires it.
5. Data outside the UK
Some of our providers may process data outside the UK. Where they do, the transfer is protected by safeguards approved under UK data protection law, such as the UK International Data Transfer Agreement or Addendum.
6. How long we keep it
- Account and game data: for as long as your account is open.
- When you delete your account in Settings, your email and login are removed and your name is replaced with "Deleted player" straight away. If you ask by email, we do this within 30 days. Anonymised game results may stay so other players' past games still add up.
- Problem reports: up to 12 months after they are resolved.
- Server logs: kept by our providers for their standard periods.
7. Your rights
Under UK data protection law you can ask us to:
- give you a copy of your data;
- correct data that is wrong;
- delete your data;
- restrict or object to how we use it;
- send your data to you or another service in a common format.
You can delete your account yourself at any time under My account → Settings → Delete account. For anything else, email hello@draftdays.co.uk from your account email address. We will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Age
Draft Day is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has created an account, contact us and we will delete it.
9. Keeping your data safe
Data is sent over encrypted connections, access to the database is restricted to each signed-in player's own data, and passwords are never stored in plain text.
10. Changes to this policy
We will update this page if how we use data changes, and change the date at the top. For important changes we will tell you on the site.