Privacy Policy

Last updated: July 27, 2026

At Draft Monkeys FFL, we take your privacy seriously. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our fantasy football platform. By using Draft Monkeys FFL, you agree to the practices described in this policy.

1. Information We Collect

We collect information you provide directly to us when you create an account, join a league, or contact us. This includes: Account Information: Name, email address, display name, password, and state of residence. Usage Information: League participation, scoring preferences, draft selections, roster moves, trade history, and platform activity. Device Information: Browser type, operating system, IP address, device identifiers, and general location data derived from your IP address. Payment Information: When you purchase a paid package, payment details are collected and processed by Stripe. We do not store your full credit card number on our servers. Communication Data: Messages sent through our contact form, support emails, and forum posts within the platform.

2. How We Use Your Information

We use the information we collect to: - Provide, maintain, and improve the Draft Monkeys FFL platform - Process transactions and fulfill orders - Manage league operations including scoring, standings, drafts, and trades - Send you important updates about your account, leagues, and platform changes - Respond to your support requests and inquiries - Enforce our Terms of Service and Fair Play Policy - Detect and prevent fraud, abuse, and security threats - Analyze platform usage to improve features and user experience - Deliver podcast content and community features - Comply with legal obligations

3. Data Sharing

We do not sell your personal information to third parties. We may share your information in the following limited circumstances: League Members: Your display name, team name, roster, and league activity are visible to other members of your leagues. Service Providers: We share information with third-party service providers who help us operate the platform, including Stripe (payments), Vercel (hosting), and Supabase (database). These providers are contractually obligated to protect your data. Legal Requirements: We may disclose your information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others. Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Cookies and Tracking

We use cookies and similar technologies to: - Keep you logged in to your account - Remember your preferences and settings - Analyze platform usage and performance - Deliver relevant content Essential cookies are required for the platform to function and cannot be disabled. Analytics cookies help us understand how users interact with the platform. You can manage cookie preferences through your browser settings. Disabling cookies may limit certain functionality of the Service.

5. Data Retention

We retain your personal information for as long as your Draft Monkeys account is active or as needed to provide the Service. When in-app deletion succeeds, we remove your Draft Monkeys profile, memberships, notification settings, connections, community posts/messages, and other personal app data. Shared league scores, rosters, transactions, and team history may remain after names, branding, and account identifiers are removed. A minimal non-contact deletion receipt is retained to prevent an old session from silently recreating the account. Anonymized and aggregated data may be retained indefinitely. Draft Monkeys and ScrimmageLab use one shared Supabase sign-in identity. Draft Monkeys account deletion therefore preserves that shared email/password identity so it does not lock you out of a separate ScrimmageLab account. It does not directly cancel a separately purchased ScrimmageLab subscription; eligibility for a complimentary benefit linked to active Draft Monkeys membership may end. Signing in to Draft Monkeys again requires explicit re-enrollment and creates a new, empty Draft Monkeys account. A request to delete the shared identity everywhere must be coordinated with support so any ScrimmageLab access and billing consequences can be handled first.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information: Access: You can request a copy of the personal information we hold about you. Correction: You can update or correct your account information at any time through your account settings. Deletion: You can delete your Draft Monkeys account and associated personal app information from Settings in the mobile app. This does not delete a ScrimmageLab account or directly cancel a separately purchased ScrimmageLab subscription that uses the shared sign-in. A Draft Monkeys-linked complimentary benefit may end. Contact admin@thedraftmonkeys.com if you need a coordinated request covering the shared identity and both services. Portability: You can request an export of your data in a machine-readable format. Opt-Out: You can opt out of non-essential communications by adjusting your notification preferences or using the unsubscribe link in our emails. To exercise any of these rights, contact us at admin@thedraftmonkeys.com. We will respond to your request within 30 days.

7. Children's Privacy

Draft Monkeys FFL is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as soon as possible. If you believe we have inadvertently collected information from a child under 13, please contact us at admin@thedraftmonkeys.com. Users must be at least 18 years old to purchase paid platform features.

8. Security Measures

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include: - Encryption of data in transit (TLS/SSL) and at rest - Secure authentication through Supabase Auth with row-level security policies - Regular security audits and vulnerability assessments - Limited employee access to personal data on a need-to-know basis - Secure payment processing through Stripe (PCI DSS compliant) However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page and notify registered users via email for material changes. Your continued use of the Service after changes take effect constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically for the latest information on our privacy practices.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: admin@thedraftmonkeys.com You may also reach us through the contact form on our website at /contact.