Privacy Policy
- Effective date:
- July 19, 2026
- Last updated:
- July 19, 2026
Draftball is operated by Matchfit Games LLC (“Matchfit Games,” “we,” “us,” or “our”). This Privacy Policy explains what information we collect when you use Draftball at draftball.app (the “Service”), how we use it, who we share it with, and what choices you have.
If you have questions about this policy, contact us at support@draftball.app.
1. Information We Collect
Account information
When you create an account, we collect:
- Email address
- Name (as provided by you or by your Google account)
- A unique account identifier issued by our authentication provider
- Google account identifier, if you choose to sign in with Google
We use Clerk as our authentication provider. If you sign in with Google, we receive only your email address, name, and Google account ID. We do not request or receive access to any other Google data — including Gmail, Google Drive, Google Calendar, Google Photos, or Google Contacts.
League and gameplay information
When you use the Service, we store the content you create and the activity you generate, including:
- Club names, crests, and other team customization
- League and division membership
- Draft picks, rosters, lineups, trades, and waiver claims
- Match results, standings, and scoring history
- Messages, notes, or other content you submit within a league
Payment information
If and when paid features are offered, payments are processed by a third-party payment processor. We do not collect or store full payment card numbers. We may retain limited billing records such as transaction amount, date, status, payment method type, and the last four digits of a card.
Technical information
We and our infrastructure providers automatically collect standard technical data when you use the Service, including IP address, browser type and version, device type, operating system, referring pages, and timestamps of requests. This data is generated as an ordinary part of operating a web application and is used for security, debugging, and reliability.
Information we do not collect
We do not sell personal information. We do not use advertising trackers. We do not collect precise geolocation, biometric data, or financial account credentials.
2. How We Use Information
We use the information described above to:
- Create and maintain your account and authenticate you
- Operate the Service — run drafts, calculate scoring, generate standings, and deliver gameplay features
- Communicate with you about your account, leagues, drafts, deadlines, and service changes
- Process payments and maintain billing records, where applicable
- Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service
- Debug problems, monitor performance, and improve the Service
- Comply with legal obligations
We do not use your personal information for automated decision-making that produces legal or similarly significant effects.
3. How We Share Information
We share personal information only in the circumstances described below.
Service providers (subprocessors)
We rely on the following third parties to operate the Service. Each processes data on our behalf and is bound by contractual obligations to protect it:
| Provider | Purpose | Data involved |
|---|---|---|
| Clerk | Authentication and user management | Email, name, account identifiers |
| Supabase | Database and backend infrastructure | Account data, league and gameplay data |
| Vercel | Application hosting and content delivery | Technical and request data |
| Sportmonks | Football statistics data provider | None — we receive data from Sportmonks; we do not send them user data |
| Payment processor | Payment processing (when paid features launch) | Billing information |
We may update this list as our infrastructure changes. Material changes will be reflected in this policy.
Other users
Certain information is visible to other members of leagues you join — including your display name, club name and crest, roster, lineups, transactions, and results. Do not put information in these fields that you do not want other league members to see.
Legal and safety
We may disclose information if we believe in good faith that disclosure is necessary to comply with applicable law, legal process, or a governmental request; to enforce our Terms of Service; or to protect the rights, property, or safety of Matchfit Games, our users, or the public.
Business transfers
If Matchfit Games is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.
4. Data Retention
We retain your information for as long as your account is active and for as long as reasonably necessary to provide the Service.
- Account information is retained while your account is active. If you delete your account, we delete or anonymize your account information within 30 days, except where we are required to retain it.
- League and gameplay data may be retained after account deletion in anonymized or pseudonymized form so that leagues you participated in remain intact for other members — for example, historical draft results and match records.
- Backups are retained on a rolling basis and are typically purged within 90 days. Deleted data may persist in backups until those backups expire.
- Billing records are retained for as long as required by applicable tax and accounting law, typically seven years.
5. Your Choices and Rights
You may access and update most of your account information directly within the Service. You may request deletion of your account at any time by contacting support@draftball.app.
California residents
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), gives you the following rights:
- Right to know what personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it
- Right to delete personal information we have collected from you, subject to legal exceptions
- Right to correct inaccurate personal information
- Right to opt out of sale or sharing of personal information — we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding twelve months
- Right to limit use of sensitive personal information — we do not collect sensitive personal information as defined by the CCPA/CPRA
- Right to non-discrimination for exercising any of these rights
To exercise these rights, email support@draftball.app. We will verify your request by confirming control of the email address associated with your account. You may use an authorized agent, in which case we may require proof of authorization.
Users outside the United States
Draftball is operated from the United States, and your information is stored and processed there. If you are located in a jurisdiction with data protection laws that differ from those of the United States — including the European Economic Area or the United Kingdom — you may have rights to access, correct, delete, restrict, or object to processing of your personal information, and to data portability. Contact support@draftball.app to exercise these rights. By using the Service, you understand that your information will be transferred to and processed in the United States.
6. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13.
If you are between 13 and the age of majority in your jurisdiction, you may use the Service only with the consent and supervision of a parent or legal guardian.
If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, contact support@draftball.app.
7. Security
We use commercially reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and reliance on established infrastructure providers with their own security programs.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.
8. Cookies and Similar Technologies
We use cookies and similar browser storage technologies that are strictly necessary for the Service to function — primarily to keep you signed in and to maintain your session.
We do not use analytics, advertising, or tracking cookies.
Most browsers let you refuse or delete cookies. Blocking essential cookies will prevent you from signing in and using the Service.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.