Data Draft AI · DDAI

Privacy Policy

Effective date: September 7, 2026

This Privacy Policy explains how Data Draft AI ("DDAI", "we", "us") collects, uses, and protects your information when you use our website (datadraft.app) and the DDAI Draft Board browser extension. We keep this policy short and plain — your data is used to personalize your fantasy hockey experience and for nothing else.

1. What we collect

Email address — obtained when you sign in with Patreon, used to identify your account.
Membership tier — whether your Patreon membership is active (patron) or free, used to unlock premium features.
League settings — the fantasy hockey league configuration you paste or import (scoring categories, roster positions, team count). This is what personalizes your draft board.
Draft activity — picks you record, leagues you save, and your active league selection.
Extension preferences — optional manager name and team name, used to attribute picks to you in a draft.
Session token — a signed token stored in your browser to keep you signed in.

2. What we do NOT collect

Payment details — handled entirely by Patreon; we never see or store them.
Your Yahoo password or credentials — the extension reads the draft room you already have open in your browser. We never receive your Yahoo login.

3. How we use your information

To identify you and keep you signed in.
To personalize rankings and recommendations to your league's exact scoring (a patron feature).
To enforce free vs. paid access.
To operate the AI chat and analysis features — prompts may be processed by third-party AI model providers.
To secure the service and prevent abuse.

4. Legal bases for processing (GDPR)

Performance of a contract — providing the personalization you requested.
Legitimate interest — securing the service, preventing fraud and abuse.
Consent — signing in via Patreon is your consent to account creation.

5. How we share information

We share data only with the service providers needed to run DDAI, and only to the extent necessary:

Patreon — to verify your identity and membership.
Cloudflare — hosting, content delivery, and security.
AI model providers — to process prompts for chat and analysis features.

We do not sell your personal data. We do not use third-party advertising or analytics trackers.

6. Data retention

We retain your account and league data for as long as your account is active, and delete it when you remove your leagues, sign out, or request deletion.

7. Security

Data is transmitted over HTTPS and access is protected by signed authentication tokens and server-side access controls. Our database and servers are operated by us.

8. Your rights

GDPR (EEA / UK / Switzerland)

You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing.

CCPA / CPRA (California)

You have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell personal data, and you will not be discriminated against for exercising these rights.

To exercise any right, email [email protected]. You can also delete your leagues or sign out at any time from the extension's Settings.

9. Children's privacy

DDAI is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

10. Cookies & local storage

We use browser storage (localStorage / Chrome storage) for your session token and preferences. We do not use third-party advertising or analytics cookies.

11. International transfers

Your data is stored on servers we operate, currently located in the United States. If you access DDAI from outside the US, you consent to the transfer and processing of your data in the US.

12. Changes to this policy

We may update this policy from time to time. Material changes will be noted by updating the effective date above and, where appropriate, with a notice in the app.

13. Contact

Questions, requests, or concerns about this policy or your data: [email protected].