Privacy Policy

1. WHAT INFORMATION DO WE COLLECT?

This Privacy Policy for DRAFTNIGHT LLC ("DRAFTNIGHT," "we," "us," or "our") explains how we collect, use, disclose, and protect personal information when you visit DRAFTNIGHT.tv, create an account, manage or participate in a fantasy football draft, upload content, view or share draft results, purchase a Season Pass, or otherwise use our related services (collectively, the "Services").

If you do not agree with this Policy, please do not use the Services. For questions or privacy requests, use the methods in Section 13.

Information you provide

The personal information we collect depends on how you use the Services and may include:

• Account information: name, email address, username or display name, profile information, and authentication identifiers.
• League and draft information: league names and settings, team names, display names, team branding, draft order, keepers, picks, results, commissioner actions, reactions, and room activity.
• Uploaded content: league and team logos, images, audio, video, and associated file information.
• Communications: information you include when you contact support, send feedback, or make a privacy request.
• Purchase information: the Season Pass or other product purchased, amount, payment status, transaction dates, and identifiers associated with a Stripe customer, Checkout Session, PaymentIntent, invoice, or related transaction.

Stripe collects and processes payment-card details and billing information through its hosted payment services. DRAFTNIGHT does not store complete payment-card numbers or card security codes. Stripe's handling of information is described in its Privacy Policy.

We do not intentionally collect sensitive personal information, such as government identifiers, precise geolocation, biometric templates, health information, or account passwords for other services. Please do not include sensitive personal information in uploads, team names, support messages, or other content.

Information collected automatically

When you use the Services, we and the providers that support the Services may automatically receive:

• Internet Protocol (IP) address and approximate location derived from it;
• browser, device, operating-system, language, and referring-page information;
• pages and features used, timestamps, live-room and socket connection events, and interaction or transaction status;
• essential cookie, local-storage, and session information used for authentication, preferences, security, and room access; and
• performance measurements, diagnostic logs, crash reports, and error data.

We do not use third-party advertising pixels or cross-context behavioral advertising tools. Hosted services such as Clerk and Stripe may use their own technologies when you interact with their authentication or checkout interfaces.

Information from other sources

We may receive account and authentication information from Clerk and any identity provider you choose at sign-in. We receive transaction status and limited billing metadata from Stripe. We may also receive security, delivery, or diagnostic information from our hosting, storage, and monitoring providers.

You are responsible for ensuring that personal information you provide is accurate and that you have permission to provide information or content relating to another person.

2. HOW DO WE PROCESS YOUR INFORMATION?

We use personal information to:

• create, authenticate, secure, and administer accounts;
• create and manage leagues, teams, draft rooms, controllers, draft boards, live picks, reactions, uploaded media, and completed results;
• synchronize live-room activity among commissioners, managers, displays, and other participants;
• process one-time Season Pass purchases, confirm payment status, maintain entitlements, issue receipts, and prevent duplicate charges;
• provide customer support and respond to questions, feedback, and privacy requests;
• maintain, troubleshoot, monitor, analyze, and improve the reliability, performance, accessibility, and security of the Services;
• detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms;
• create aggregated or de-identified statistics that do not reasonably identify a person;
• send transactional, security, policy, and other service-related communications; and
• comply with law, respond to lawful requests, enforce agreements, and protect DRAFTNIGHT, our users, and others.

We do not use personal information to make automated decisions that produce legal or similarly significant effects.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

Where applicable law requires a legal basis, we process personal information based on one or more of the following:

• Contract: processing is necessary to provide the Services you request and perform our agreement with you.
• Legitimate interests: processing is necessary to secure, operate, support, troubleshoot, and improve the Services; prevent fraud or abuse; and protect our rights and users, where those interests are not overridden by your rights.
• Legal obligations: processing is necessary to meet tax, accounting, regulatory, legal-process, or other legal requirements.
• Consent: we may rely on consent for a specific use disclosed when consent is requested. You may withdraw consent at any time, subject to applicable law, without affecting processing that occurred before withdrawal.
• Vital interests and public tasks: in uncommon circumstances, processing may be necessary to protect a person's vital interests or carry out a task recognized by law.

If you are in Canada or another jurisdiction that primarily relies on consent, we will obtain express or implied consent as required and may process information without consent where applicable law permits or requires it.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We disclose information only as reasonably necessary for the purposes described in this Policy.

Service providers

• Clerk: identity, authentication, account management, and related security services.
• Stripe: hosted checkout, payment processing, receipts, fraud prevention, and billing support.
• Neon: managed Postgres database hosting.
• Render: application hosting, network delivery, and operational logs.
• Cloudflare R2: staging, storage, security checks, and delivery of uploaded media.
• Sentry: error reporting, technical diagnostics, performance monitoring, and service reliability.

These providers may process information in the United States and other locations where they or their subprocessors operate. Their privacy notices and our agreements with them govern their own processing responsibilities.

Other users and the public

Draft participants may see information needed for the shared experience, including display names, team names and logos, league settings, picks, reactions, and draft results. A commissioner or authorized user may publish a completed draft recap through a public link. Anyone with that link may be able to view the published league name, team names, logos, picks, and results until sharing is disabled or the link is changed.

Do not use personal information in a team name, logo, upload, or other shared field unless you are comfortable with the applicable audience seeing it.

Legal, safety, and business disclosures

We may disclose information when we reasonably believe it is necessary to comply with law or valid legal process; enforce our Terms; collect amounts owed; prevent or investigate fraud, abuse, or security incidents; or protect the rights, property, or safety of DRAFTNIGHT, our users, or others.

We may also share or transfer information in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate confidentiality and legal safeguards.

We do not sell personal information for money, share it for cross-context behavioral advertising, or use it for targeted advertising as those terms are defined by applicable U.S. state privacy laws.

5. HOW DO WE HANDLE THIRD-PARTY SIGN-IN?

The Services use Clerk for authentication and may allow you to sign in with an identity provider displayed on the sign-in screen. If you use a third-party sign-in option, the provider may send Clerk and DRAFTNIGHT information such as your name, email address, profile image, provider account identifier, and other information you authorize.

We use that information to authenticate you, maintain your account, and provide the Services. We do not control how the identity provider uses your information. Review the provider's privacy notice and account settings before using third-party sign-in.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, preserve leagues and completed results, maintain purchases and entitlements, meet legal or accounting obligations, resolve disputes, prevent fraud, and enforce agreements.

Retention depends on the information:

• account, league, draft, and attached uploaded content may remain while the account or league is active and until deletion is requested or the information is no longer needed;
• completed draft results may remain available to the commissioner, and published results may remain available through their public link until sharing is disabled or the link is changed;
• pending, rejected, or unattached uploads may be removed through automated maintenance;
• transaction, entitlement, audit, security, and legal records may be retained longer where reasonably necessary or required by law; and
• backups may retain information for a limited period before being overwritten or deleted.

When information is no longer needed, we will delete or de-identify it, or securely isolate it until deletion is reasonably possible.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We use administrative, technical, and organizational safeguards designed to protect personal information. These include access controls, authenticated administrative functions, encrypted network transport, hashed room-session credentials, upload validation and restricted file types, rate limiting, private staging of uploads, monitored errors, and payment processing through Stripe.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Protect your credentials and room access links, use the Services from a secure device and network, and report suspected security issues to support@draftnight.tv.

8. DO WE COLLECT INFORMATION FROM MINORS?

The Services are intended for users who are at least 13 years old and are not directed to children under 13. We do not knowingly collect personal information from a child under 13. Users who are minors where they live may use the Services only with the permission and supervision of a parent or legal guardian, and purchases must be made by an adult or other authorized purchaser.

If we learn that we collected personal information from a child under 13, we will take reasonable steps to delete it. A parent or guardian who believes a child provided personal information may contact us using Section 13.

9. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on where you live and subject to applicable exceptions, you may have the right to:

• confirm whether we process your personal information;
• access or obtain a portable copy of personal information;
• correct inaccurate personal information;
• delete personal information;
• restrict or object to certain processing;
• withdraw consent where processing relies on consent;
• opt out of a sale, targeted advertising, or qualifying profiling;
• appeal a decision concerning a privacy request; and
• receive equal service and not be discriminated against for exercising a privacy right.

DRAFTNIGHT does not sell personal information, use it for targeted advertising, or use it for profiling in furtherance of decisions that produce legal or similarly significant effects.

You may update some account or league information through the Services. To exercise another right, use the methods in Section 13. We may need to verify your identity and authority over the relevant account, league, or information. Rights are not absolute, and we may retain or decline to act on information where permitted or required by law, including for security, fraud prevention, billing, legal compliance, dispute resolution, or enforcement.

If you are in Canada, the European Economic Area, Switzerland, the United Kingdom, or another jurisdiction that provides it, you may also have the right to complain to your local privacy or data-protection authority.

10. CONTROLS FOR COOKIES, STORAGE, AND DO-NOT-TRACK FEATURES

DRAFTNIGHT uses cookies and similar browser storage that are necessary for authentication, security, room-session access, preferences, and core functionality. Disabling these technologies may prevent sign-in, room access, purchases, or other features from working correctly.

Some browsers offer a "Do Not Track" setting. Because there is no uniform standard for that signal and DRAFTNIGHT does not use behavioral advertising trackers, we do not currently respond to Do Not Track signals. We do not sell or share personal information for targeted advertising, so there is no sale or targeted-advertising opt-out required for our current practices. If our practices change, we will update this Policy and honor legally required opt-out preference signals, including Global Privacy Control where applicable.

11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

Residents of states with comprehensive consumer privacy laws may have the rights described in Section 9 when the relevant law applies to DRAFTNIGHT or its processing.

Categories of personal information

The following table describes categories DRAFTNIGHT may collect and may have collected during the preceding 12 months. Whether we collect a category from you depends on the features you use.

We collect these categories from you, your device and browser, other participants acting at your direction or within your league, Clerk and enabled identity providers, Stripe, and the operational providers described in Section 4.

For business purposes, we may disclose the categories marked "Yes" to the providers described in Section 4 according to the services they perform. We may also disclose league, team, upload, and draft information to other draft participants or through a public results link as described in Section 4. We have not sold personal information or shared it for cross-context behavioral advertising in the preceding 12 months.

Exercising U.S. state rights

Submit a data subject access request or email support@draftnight.tv. Describe your request and the state where you live. An authorized agent may submit a request where applicable law permits, but we may require proof of authority and verification directly from you.

We will use information provided with a request only to verify and fulfill it, prevent fraud, and maintain legally required records. If we deny a request, you may appeal by replying to our decision or emailing support with "Privacy Appeal" in the subject line. We will respond as required by applicable law. If an appeal is denied, you may contact your state attorney general.

California residents may also request information under California's "Shine the Light" law about disclosures, if any, to third parties for their own direct-marketing purposes. DRAFTNIGHT does not disclose personal information to third parties for their own direct marketing.

12. DO WE MAKE UPDATES TO THIS POLICY?

We may update this Policy as the Services, providers, or legal requirements change. The updated version will be identified by a new "Last updated" date. If changes materially affect how we handle personal information, we may provide additional notice through the Services or by another appropriate method.

13. HOW CAN YOU CONTACT US ABOUT THIS POLICY?

For questions, comments, or privacy requests, contact DRAFTNIGHT LLC by:

• submitting our data subject access request form; or
• emailing support@draftnight.tv.

Please do not send passwords, complete payment-card details, host tokens, display tokens, or room-session credentials.

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR INFORMATION?

You can update certain account information through your account settings and certain league information through league management. To request access, correction, export, or deletion, use either contact method in Section 13.

We may ask for information reasonably necessary to verify your identity, authority, account, or league. We will respond in accordance with applicable law. Deleting information may prevent continued use of some features. We may retain information where permitted or required for billing, taxes, accounting, fraud prevention, security, legal compliance, dispute resolution, or enforcement, and information in backups may remain until those backups are overwritten or deleted.