Privacy Policy

Data We Collect

When you create an account or use the service, we collect:

• Email address — used for authentication and service communications
• Subscription status — whether your account is on the Free or Pro tier
• Stripe customer ID — a reference string (e.g., cus_xxx) that links your account to our payment processor; we never store your payment card details
• Age confirmation — a record that you confirmed you are 13 or older at signup (required for COPPA compliance)
• User-generated content you choose to create — custom big boards, prospect rankings, awards predictions, and other personalization features you build within the product
• Display name — optional; only stored if you choose to add one (maximum 30 characters)

Data We Do Not Collect

We explicitly do not collect or store the following:

• Payment card numbers, CVV codes, or bank account details — Stripe handles all payment processing and these are never transmitted to or stored by our systems
• Your real name (a display name is entirely optional)
• Phone number
• Physical or mailing address
• Photos, biometric data, or government identification of any kind
• IP addresses retained beyond the scope of a single request
• Device fingerprints or behavioral tracking data

How Data Is Stored

Your account data is stored in a Supabase cloud database (hosted on AWS infrastructure in the United States). Row-level security is enforced on every database table, meaning your data is accessible only to you. No other user can query your account information.

All payment processing is handled by Stripe, Inc. We store only the Stripe customer reference ID necessary to manage your subscription. Stripe's privacy policy governs how your payment data is stored and processed.

All data is transmitted over HTTPS. We do not use unencrypted connections at any point in the data flow.

How Long We Keep It

Your data is retained for as long as your account exists. When you delete your account, all data associated with it — including your profile, subscription record, and any boards or rankings you created — is permanently deleted from our systems. This deletion is irreversible.

If you have an active Pro subscription at the time of account deletion, your subscription is cancelled automatically and no further charges are made.

Your Rights

You may request deletion of your account and all associated data at any time through your account settings. Deletion removes your authentication record, profile, subscription data, and all user-generated content. Deletion is permanent — we do not retain backups of deleted accounts.

The ability to export your boards and rankings as a file is planned for a future update. When available, this will allow you to download all user-generated content associated with your account in a portable format (JSON or CSV).

If you are located in the European Economic Area, California, or another jurisdiction with applicable data protection laws, you may also have rights of access, rectification, and portability. To exercise any of these rights, contact us via the channel listed below.

Children's Privacy

This service requires users to be 13 years of age or older. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us immediately and we will delete the account.

Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page reflects when the current version took effect. Continued use of the service after a policy change constitutes acceptance of the updated terms.

Contact

Questions or requests regarding this Privacy Policy can be directed to us on X (Twitter): @NFL_DF ↗