Privacy Policy

1. Who We Are

Last updated Oct 2, 2026.

DraftMates runs private fantasy cricket leagues at draftmates.app. This policy explains what personal data we collect when you use DraftMates, why we collect it, who else processes it, and the choices you have. Questions: nikhil@draftmates.app.

2. What We Collect

• Your account. Your email address and display name. If you sign up with a password, our sign-in provider (Supabase) holds it; we do not store it ourselves. If you sign in with Google, we receive the name, email address and basic profile that Google shares with apps. We do not ask for your phone number, date of birth, address or payment details.
• Your leagues. The leagues and circles you join, your team name and role, your bids and purchases in auctions, your lineups and captain picks, and your picks in the Tap Game.
• Your conversations with Skipper. Your messages and Skipper’s replies, conversation titles and summaries, and short notes Skipper saves about your preferences, such as a favourite team or how much risk you like to take.
• How you play. A record of actions such as bids, lineups, captain picks, taps, opening Skipper, and whether you followed a suggestion. From it we build a short summary of your playing style, which shapes the advice and tone of Skipper and the auction copilot.
• Files you add. Screenshots or links you upload as proof for an injury replacement.
• Technical data. Your IP address and browser type when you use a sign-in link or an invite code, and to limit abuse; error reports; and usage analytics.

3. How We Use It

• To run your account and sign you in.
• To run leagues, circles, auctions and scoring.
• To send the league invitations you ask us to send.
• To answer your questions in Skipper and to make its advice fit how you play.
• To keep DraftMates secure, stop abuse and fix errors.
• To learn which features people use, so we can improve them.

We do not sell your personal data.

4. Who Sees It

• Other members of your leagues see your display name, team name, bids, squads, lineups and results. Commissioners can manage members, and league actions are logged so that they can be checked.
• Supabase stores accounts, league data and uploaded files, runs live updates, and sends sign-in and password emails.
• Vercel hosts DraftMates and measures page visits and performance.
• Google (Gemini) writes Skipper’s answers. It receives your message, the recent turns of the conversation, Skipper’s saved notes and summary, your league name and your playing-style summary. It also checks injury-proof screenshots and links.
• TypeSafe AI checks each message to Skipper, and each question to the auction copilot, before it is answered.
• PostHog (United States) records product analytics, linked to your account ID, not your email address.
• Sentry records errors, including recordings of a sample of sessions, with the text on screen masked.
• Upstash holds short-term data for caching and abuse limits, which can include your IP address, email address or account ID.
• Resend sends league invitations: the invitee’s email address, the league name, the inviter’s name and any message.
• Authorities, when the law requires us to share data.

5. Where It Is Processed

Our service providers may process your data outside India, including in the United States.

6. How Long We Keep It

We keep your data while your account is open. You can delete Skipper conversations and saved notes at any time. Our encrypted database backups are kept for up to 7 days.

When you ask us to delete your account, we delete it and the personal data linked to it within 30 days. Some records stay: your team’s results and squads, because they are part of the league’s history; your bids, with your identity removed; our league activity log, which can include your email address; and error and analytics records, which our providers keep for their own set periods.

7. Your Choices And Rights

• See and delete your Skipper conversations, and the notes Skipper keeps about you, in Skipper → Memory.
• Leave a league in Settings. Owners and commissioners hand the league over first.
• Ask us for a copy of your data, to correct it, or to delete your account: write to nikhil@draftmates.app. We reply within 30 days. You cannot yet delete your account yourself in the app.

If you are in India, the Digital Personal Data Protection Act, 2023 gives you these rights, and the right to nominate someone to act for you. For a grievance, write to nikhil@draftmates.app.

8. Cookies And Browser Storage

• Sign-in cookies, which keep you signed in.
• Preference cookies: the part of DraftMates you used last, and the season you picked.
• Session cookies for the auctioneer console and for scorer links.
• Storage used by PostHog and Sentry for analytics and error reports.
• Your browser also keeps your last-used email address and name, to make your next sign-in faster. They stay until you clear your browser’s data.

9. Security

DraftMates uses HTTPS everywhere. Database rules limit who can read each record, so your private data is visible only to you and to the systems that need it. Account passwords are handled by our sign-in provider. No system is perfectly secure: if you think your account has been misused, write to nikhil@draftmates.app.

10. Age

DraftMates is for people aged 18 and over. We ask everyone to confirm their age once, the first time they sign in.

11. Changes

We update this page when our practices change, and we change the date at the top.

1. Compete Hard, Compete Fair

DraftMates is built for serious league competition. Strategy and intensity are encouraged; exploitative behavior, abuse, and manipulation are not.

2. Respect League Members

• Debate picks, not people.
• Keep interactions professional and inclusive.
• No targeted harassment, threats, or personal attacks.

3. Transparent League Governance

Commissioners should communicate rule updates clearly and apply them consistently. Ownership transfers, roster assignments, and key league actions should remain auditable and understandable to all members.

4. Data Responsibility

Use shared analytics responsibly. Do not intentionally spread false player/news information within league channels to mislead participants.

5. Collaborative Dispute Resolution

For disputes about deadlines, lineups, auction operations, or scoring sync, escalate through your commissioner first. If unresolved, contact DraftMates support via Contact Coach.

6. Positive League Culture

Great leagues last multiple seasons. Build trust, communicate clearly, and keep competition enjoyable for everyone.