Draft for review. Not legal advice; have counsel review before launch.

Privacy Policy

Effective date: August 30, 2026

This Privacy Policy explains how Fantasy Auction AI (the "Service"), operated by Chris Obermeier ("we", "us", or "our"), collects, uses, stores, and protects your information. By using the Service, you agree to this policy.

1. Information we collect

Account information. Your email address and authentication details. Sign-in and authentication are handled by Supabase.
Your draft data. The draft events, league settings, and draft archives you create in the Service.
Technical and log data. Basic information such as your device and browser type, IP address, and timestamps, collected automatically to keep the Service running and secure.
Anonymous usage counts. To understand how many people try the Service without an account, we count anonymous actions such as running a mock draft. This uses a random token stored in your browser to estimate distinct visitors. It is not tied to your identity and contains no names, team names, or draft contents.

2. How we use your information

We use your information to:

Provide, operate, and maintain the Service.
Save and restore your drafts and settings.
Keep the Service secure and diagnose problems.
Improve the Service and our valuation models.

3. Where your information is stored

Your account and draft data are stored in a Supabase Postgres database hosted in the cloud. The Service is hosted on Vercel. Data may be processed and stored on servers operated by these providers.

4. Cookies and sessions

We use authentication session cookies only. These cookies keep you signed in and are necessary for the Service to work. We do not use advertising or third-party tracking cookies.

5. Data sharing

We do not sell your personal data. We share data only with the processors that help us run the Service:

Supabase, for authentication and database storage.
Vercel, for application hosting.

These processors handle data on our behalf and are bound to protect it. We may also disclose data if required by law.

6. Data retention and deletion

We keep your information for as long as your account is active. You can delete your account and all of your drafts at any time from your account page. Deleting your account permanently removes your data from the Service.

7. Your rights

You can access your data through your account and export or review your drafts. You can delete your account and all associated data at any time. Depending on where you live, you may have additional rights under applicable law. To make a request, contact us at obizues@duck.com.

8. Children

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us at obizues@duck.com and we will delete it.

9. Security

We take reasonable measures to protect your information, including relying on the security controls of Supabase and Vercel. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Anonymized cross-league insights

optional, off by default

This section describes an optional feature that is off by default. It is not active unless you turn it on.

If, and only if, you explicitly opt in, we may use fully anonymized and aggregated draft outcomes to improve our valuation models. When this feature is on:

The data is fully anonymized. It contains no names, no team names, and no user identifiers.
Draft outcomes are tagged only by format (for example, PPR or superflex), never by anything that could identify you or your league.
The data is aggregated across many drafts and is used only to improve our models.

This feature is off unless you turn it on. You can opt out at any time, and opting out stops any future collection. We will not enroll you in this feature without your explicit, separate consent.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, provide additional notice.

12. Contact

Questions about this Privacy Policy can be sent to obizues@duck.com.