Privacy Policy

1. Information you give us

• Account information. When you create an account with an email address and password, we store your email address and an encrypted representation of your password. We never store your password in readable form.
• Google account information. If you choose “Sign in with Google”, Google sends us your name, email address, language preference, and profile picture — the standard email and profile scopes. We use this only to create and identify your account. We do not request access to your Gmail, Drive, Contacts, Calendar, or any other Google service. See section 4 for our commitments on Google user data.
• League content. Anything you enter to run a draft: league and team names, team colors and emoji, player rosters, bids, budgets, keepers, nomination queues, and emoji reactions. If you import a spreadsheet, we store the league data it contains.
• Push notification subscriptions. If you opt in to be notified when it is your turn to nominate, your browser gives us a subscription endpoint and encryption keys. These identify a browser installation, not you personally, and we use them only to send draft notifications.

2. Information collected automatically

• Usage analytics. We use Google Analytics, Google Tag Manager, and Clicky Analytics to understand how the site is used — pages viewed, approximate location derived from IP address, browser and device type, and referring site. These services set cookies or similar identifiers.
• Security and delivery. Cloudflare, which hosts and fronts the site, processes IP addresses and request metadata to route traffic and protect against abuse.
• Error reports. When something breaks, Sentry receives a diagnostic report that may include your browser, the page you were on, and the technical details of the error.
• Essential cookies. We set a session cookie to keep you signed in. This cookie is required for the site to function and is not used for tracking.

3. Guest bidding links

Commissioners can share a guest link that lets someone bid as a team without creating an account. Anyone holding that link can act as that team for the duration of the draft, so treat guest links as private. We associate bids placed through a guest link with the team, not with a person, and we do not collect an email address or name for guest bidders.

4. How we use Google user data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use your Google profile and email address only to create your account, sign you in, and show you which account you are signed in as.
• We do not transfer Google user data to third parties except as needed to provide the service (see section 5), for security purposes, or to comply with applicable law.
• We do not use Google user data for advertising, and we do not sell it.
• We do not allow humans to read your Google user data unless you give explicit consent, it is necessary for security or to comply with law, or the data has been aggregated and de-identified.

5. Who we share information with

We do not sell your personal information. We share it only with service providers that make the product work, each of which processes data on our behalf:

• Supabase — database, authentication, and realtime updates.
• Cloudflare — application hosting, content delivery, and abuse protection.
• Google — sign-in (Google OAuth), and analytics via Google Analytics and Google Tag Manager.
• Clicky — website analytics.
• Sentry — error monitoring.
• Push notification services — the push service operated by your browser vendor (for example Google, Apple, or Mozilla) delivers notifications you opt in to.

We may also disclose information if required by law, or to protect the rights, safety, and property of our users or ourselves.

6. What other people in your league can see

Drafting is a shared activity. Other members of a league you join can see your team name, your roster, your budget, your bids, and the display name on your account. Commissioners of a league can additionally see the email address associated with your membership and can manage your team. Do not put anything in a team name or league name that you would not want your league to see.

7. Retention and deletion

We keep your account and league data for as long as your account exists. You can permanently delete your account at any time from your account page. Deleting your account removes your profile and detaches you from your leagues.

Historical draft results may remain visible to the leagues you drafted in, since that record belongs to the league as a whole. If you want that data removed as well, contact us at kendall@oceanviewmarketing.com and we will work with the commissioner to handle it. Backups and error logs are purged on a rolling basis.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the European Economic Area and the United Kingdom have these rights under the GDPR; California residents have comparable rights under the CCPA, including the right not to be discriminated against for exercising them.

To exercise any of these rights, email kendall@oceanviewmarketing.com. Most of them you can also exercise directly from your account page.

You can opt out of analytics tracking using your browser’s “Do Not Track” setting, an ad blocker, or the Google Analytics opt-out add-on. You can turn off push notifications in your browser settings at any time.

9. Data transfers

We are based in California, United States and our service providers may process data in the United States and other countries. If you access Drunk Wizard from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

10. Security

Data is transmitted over encrypted connections and stored with row-level access controls, so that league data is readable only by members of that league. Draft actions are validated on the server. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable measures to protect your information.

11. Minimum age

Drunk Wizard is intended only for people aged 21 or older, and we do not knowingly collect personal information from anyone below that age. If you believe someone under 21 has given us personal information, contact us at kendall@oceanviewmarketing.com and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you in the app. Continuing to use Drunk Wizard after a change means you accept the revised policy.

13. Contact

Questions about this policy or your data? Email kendall@oceanviewmarketing.com. Drunk Wizard is operated by Ocean View Marketing in California, United States.