Privacy Policy

Information stored in your browser

When you use Draft Analyzer without an account, imported draft data and Draft Pools are saved in your browser's local storage. CSV files are processed in your browser. Draft Analyzer does not retain the original CSV file.

Some preferences remain browser-specific whether or not you are signed in:

• Player ranking adjustments and excluded players
• Your selected draft sorting option
• Your most recently selected Draft Pool on the rankings page
• Active Draft Tracker state for the current browser session

Browser-stored data does not automatically transfer to another browser or device. Clearing your browser storage may permanently remove it.

Information stored with an account

Draft Analyzer uses Supabase to provide authentication and cloud storage. When you create an account, Supabase Auth stores your email address, account identifier, and authentication credentials. Passwords are handled by Supabase Auth and are not stored in Draft Analyzer's application tables.

The following Draft Analyzer data may be stored in Supabase when you are signed in:

• Draft Pool names and URL slugs
• Imported draft names, source filenames, import dates, team names, and pool assignments
• Draft picks, including players, positions, NFL teams, fantasy teams, and pick numbers
• FantasyPros draft identifiers and request times used for duplicate protection and rate limiting

Authentication cookies are used to keep you signed in. Supabase Row Level Security restricts account data so authenticated users can access only their own records through the app.

Contact form information

When you use the contact form, Draft Analyzer processes the name you provide, your email address, and your message so the message can be delivered and answered.

To prevent contact-form abuse, Draft Analyzer stores request times and a one-way, secret-keyed identifier derived from the request's IP address. The raw IP address is not stored in Draft Analyzer's contact-rate-limit table, and the identifier is used only to enforce message limits.

How information is used

Draft Analyzer uses stored information only to operate and protect the app. This includes:

• Authenticating accounts and keeping users signed in
• Saving and synchronizing drafts and Draft Pools across devices
• Calculating rankings, player analysis, and Best Available results
• Importing permitted FantasyPros drafts and preventing duplicate or excessive requests
• Sending account-related emails such as email-address confirmations
• Diagnosing errors, preventing abuse, and maintaining the security of the app

Personalized rankings and analysis results are calculated from your draft data and settings. They are not currently stored as separate database records.

Service providers

Draft Analyzer relies on a small number of outside services to operate:

• Supabase provides authentication and database storage. Supabase Privacy Policy
• Resend delivers account-related emails and contact-form messages. This requires processing email addresses and email contents. Resend Privacy Policy
• Cloudflare Email Routing forwards messages sent through the contact form to the project owner's email inbox. Cloudflare Privacy Policy
• Vercel hosts Draft Analyzer and may process technical request information such as IP addresses, browser details, and diagnostic logs while delivering the site. Vercel Privacy Notice
• FantasyPros is contacted only when a signed-in user chooses to import a FantasyPros draft. Draft identifiers and requests needed to retrieve that draft and player information are sent to FantasyPros. FantasyPros Privacy Policy

Retention and deletion

Guest drafts can be deleted individually or all at once from the home page. Other browser-specific data can be removed by clearing this site's browser storage.

Signed-in users can delete individual drafts, delete all imported drafts, or permanently delete their account from the account page. Deleting an account removes the Supabase Auth account and its associated Draft Pools, imported drafts, draft picks, and FantasyPros request history.

Deleting an account does not automatically clear browser-only information such as ranking overrides, excluded players, preferences, or Draft Tracker state. That information must be cleared from the browser separately.

Service providers may retain limited backups, security records, or diagnostic logs according to their own retention policies or legal obligations.

Contact-form messages may remain in the project owner's email inbox as needed to respond and maintain the correspondence. Contact-form rate-limit records are used only for abuse prevention. Records older than the active rate-limit window are ignored, and older records for a request source are removed if that source submits another request after the window expires.

Data security

Draft Analyzer uses reasonable technical safeguards, including encrypted HTTPS connections, Supabase authentication, database Row Level Security, and server-only credentials for protected services.

No method of internet transmission or electronic storage can be guaranteed to be completely secure. You are responsible for protecting your account password and for signing out on shared devices.

Children's privacy

Draft Analyzer is not directed to children under 13, and it does not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information through the app, please use the contact form so the information can be reviewed and deleted.

Changes to this policy

This Privacy Policy may be updated as Draft Analyzer changes. The updated date at the top of this page will be revised when material changes are made.

Contact

Draft Analyzer is a project by Landon Made. For privacy questions, data requests, or other concerns, use the contact form.

Never send your password, API keys, or other sensitive credentials through the contact form.