Draft Punk

Privacy Policy

1. Information we collect

Draft Punk Web is operated by Clemm Apps ("Clemm Apps," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Draft Punk website and web application at draftpunk.net (the "Service").

The Draft Punk Android app is a separate product. View its terms in the Google Play listing.

Account information

When you use Sign in with Google, Google provides an account identifier, email address, name, and profile picture. We use this information to create and secure your Draft Punk account. Google does not provide us with your Google password. You may also provide a time zone or other profile preferences.

Draft and feature data

We store the information you create or save through the Service, including draft titles, league and scoring settings, team names, picks, trades, keepers, interested players, player notes, personal rankings, mock-draft settings, and generated draft recaps. If you use draft-provider sync, we may also process the external username, user ID, league and draft identifiers, and fantasy data returned by that provider.

AI inputs and outputs

When you use AI-powered features, we process the prompts and context needed to respond. Depending on the feature, this can include chat questions and recent chat history, a team-name topic, or draft settings and results used to generate a recap. The resulting response may also be processed and displayed through the Service.

Subscription and transaction information

Stripe processes Draft Punk Web subscription payments. We receive limited billing information such as Stripe customer and subscription identifiers, subscription status, and the current billing-period end date. We do not receive or store your full payment-card number.

Technical and usage information

When you use the Service, our servers and service providers may automatically process information such as your IP address, browser and device type, operating system, requested pages, referring page, access times, and diagnostic information. In production, we may use Sentry to receive error reports and sampled performance information. We configure browser monitoring not to request default personally identifiable information, but diagnostic events may still include technical details needed to identify and fix a problem.

Communications

If you email us or request support, we collect the information in your message and any contact details you provide.

2. How we use information

We use information to:

  • Provide, personalize, and maintain Draft Punk Web
  • Authenticate users and keep accounts and drafts synchronized
  • Calculate rankings, recommendations, odds, mock drafts, and recaps
  • Connect drafts with supported external fantasy providers at your request
  • Process subscriptions, confirm Pro access, and provide billing support
  • Respond to questions, support requests, and feedback
  • Monitor reliability, troubleshoot errors, prevent fraud and abuse, and secure the Service
  • Comply with legal obligations and enforce our Terms of Service

3. Cookies and browser storage

Draft Punk Web uses a host-only session cookie named DPSESSID to keep you signed in, protect account actions, and maintain your session. Authenticated sessions have a rolling lifetime of up to 30 days by default. The cookie is marked HttpOnly and SameSite=Lax, and is marked Secure when served over HTTPS.

The Service also uses local storage to remember preferences such as appearance, sidebar style, selected chat model, Draft Order Picker state, and performance settings. Session storage may temporarily hold a Stripe checkout-session identifier so the Service can confirm a completed checkout.

These technologies support authentication, preferences, and product functionality. Draft Punk Web does not currently use personal information for targeted advertising. You can clear cookies and browser storage through your browser, but doing so may sign you out or reset saved preferences and locally stored tool data. Google, Stripe, and other services you choose to use may apply their own cookies or similar technologies under their policies.

4. How we disclose information

We do not sell your personal information or share it for cross-context behavioral advertising. We may disclose information in these circumstances:

  • Service providers. Hosting, database, security, error-monitoring, and other vendors may process information to operate the Service on our behalf.
  • Google. We use Google Identity Services for sign-in. Your use of Google is also governed by the Google Privacy Policy.
  • Stripe. Subscription checkout and billing management are provided by Stripe under the Stripe Privacy Policy.
  • AI providers. AI prompts and relevant context may be sent to OpenAI, Groq, or Perplexity, depending on the model or feature you select. Those providers process the data under their own service and privacy terms. Perplexity documents separate privacy and retention practices for its Sonar API.
  • Fantasy-data providers. If you request external draft sync, information needed to find and synchronize your draft is sent to the selected provider. The currently supported public sync uses Sleeper, whose practices are described in the Sleeper Privacy Notice.
  • Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, respond to legal process, protect rights and safety, investigate abuse, or enforce our agreements.
  • Business transfers. Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of the Service, subject to applicable law.

We may also disclose aggregated or deidentified information that cannot reasonably identify you.

5. AI features, transfers, and public content

AI features. Do not include sensitive personal information in chat prompts, player notes, team names, or other content submitted to an AI feature. Draft Punk does not intentionally save your AI chat as account history, but your prompt, recent in-browser conversation context, and generated response are sent to the selected AI provider. Provider retention practices vary. For example, OpenAI describes API data controls in its API documentation, and Perplexity describes its Sonar API practices in its privacy and security documentation.

Draft transfers. If you create a transfer code, a copy of the exported draft is uploaded to a Clemm Apps transfer service. Anyone with the short transfer code may be able to import that copy, so share it only with the intended recipient.

Shareable recaps. A generated draft recap may be available through a shareable link. Anyone who obtains that link may be able to view the recap. Avoid personal information in draft and team names, and contact us if a recap needs to be removed.

6. Data retention

We retain account and draft information while your account is active or as needed to provide the Service. You can delete individual drafts or all drafts from the draft-management tools. Account, billing, security, support, and diagnostic records may be kept longer when reasonably necessary for fraud prevention, dispute resolution, accounting, legal compliance, or enforcing our agreements.

When information is deleted, copies may remain for a limited period in backups or logs. Third-party providers keep information according to their own retention practices.

7. Your choices and privacy rights

  • Manage or delete saved drafts through Draft Copilot and Mock Drafts.
  • Disconnect a supported external draft provider from the draft workspace.
  • Manage or cancel a Web Pro subscription from your Account through Stripe's billing portal.
  • Clear local preferences and tool data through your browser settings.
  • Review or remove Draft Punk's Google connection through your Google Account. Removing the Google connection does not by itself delete information already stored by Draft Punk.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information, and to appeal a denied privacy request. You may also have the right not to receive discriminatory treatment for exercising a privacy right.

To make a privacy request, contact Clemm Apps at clemm.apps [at] gmail.com from the email address associated with your Draft Punk account. We may ask for information needed to verify your identity and request. We may retain information where an exception under applicable law permits or requires it.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No Internet transmission or storage system is completely secure, so we cannot guarantee absolute security. Protect access to your Google account and notify us if you believe your Draft Punk account has been used without authorization.

9. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information in violation of this policy, contact us so we can investigate and delete it where required.

10. International users

Draft Punk is operated from the United States. If you access the Service from another country, your information may be transferred to and processed in the United States and other locations where our providers operate, which may have different data-protection laws from your country.

11. Changes to this policy

We may update this Privacy Policy as the Service or law changes. We will post the revised policy here. If a change is material, we may provide additional notice through the Service or by email where appropriate.

12. Contact us

Questions or privacy requests can be sent to:

Clemm Apps
clemm.apps [at] gmail.com
San Francisco, California, United States