Privacy Policy
Last updated: [20/08/2026]
This Privacy Policy explains how Dynasty Ledger ("we," "us," or "our") collects, uses, and shares information when you use Dynasty Ledger (the "Service").
1. Information We Collect
1.1 Information You Provide
- Email address — used to create your account and sign in via magic link
- Sleeper username / user ID / league ID — used to import your fantasy league data
1.1.1 Information from Google Sign-In
If you choose to sign in with Google, we receive basic profile information from your Google account via OAuth: your name, email address, and profile picture. We use this only to create and authenticate your account — we do not receive or request access to your Gmail, Google Drive, or any other Google service, and we never receive your Google password. You can revoke this access at any time from your Google Account's security settings.
1.2 Information We Collect Automatically
- Usage data — pages visited, features used, timestamps
- Device/browser information — IP address, browser type, operating system
- Error and performance data — collected via Sentry, our error-monitoring provider, to help us diagnose and fix issues
1.3 Information from Third Parties
- Sleeper API — we read publicly available league data associated with the Sleeper username or league ID you provide: roster composition, draft history, league settings, and keeper rules. We do not access your Sleeper account password or make changes to your Sleeper account.
- nflverse — publicly available NFL player statistics, used to compute player valuations. This data is not linked to you personally.
- Paddle — when you subscribe to a paid plan, Paddle (our payment provider and merchant of record) shares limited transaction information with us, such as subscription status and renewal dates, so we can grant you access to Pro features. Paddle handles your payment card details directly; we never receive or store full card numbers.
2. How We Use Your Information
We use the information above to:
- Provide, operate, and maintain the Service (importing your league, computing rankings and keeper recommendations)
- Create and manage your account
- Process subscriptions and grant access to paid features
- Send you service-related emails (magic link sign-in, billing notifications, important updates)
- Monitor and improve the reliability and performance of the Service
- Respond to support requests
We do not sell your personal information, and we do not use your data to serve third-party advertising.
3. How We Share Information
We share information only with the service providers that help us run the Service, and only as needed for that purpose:
| Provider | Purpose | Data shared |
|---|---|---|
| Paddle | Payment processing, billing, tax compliance | Email, subscription/purchase details |
| Resend (or equivalent) | Sending magic link sign-in emails | Email address |
| Google (OAuth) | Optional sign-in method | Name, email, profile picture — only if you choose to sign in with Google |
| Sentry | Error monitoring | Technical/device data, IP address |
| Vercel | Application hosting | All data processed by the Service, as our hosting infrastructure |
| Neon (PostgreSQL) | Database hosting | All data stored by the Service |
We do not share your data with Sleeper, the NFL, or any other party beyond what's needed to read your public league data via the Sleeper API. We may also disclose information if required by law, or to protect our rights, users, or the public.
4. Data Retention
We retain your account and league data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 7 days, except where we are required to retain billing records for legal or tax purposes (typically retained by Paddle and/or us per applicable tax law, e.g., up to 10 years for invoicing records under Portuguese law).
5. Your Rights
Depending on where you live, you may have rights to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Export your data in a portable format
- Object to or restrict certain processing
EU/UK users (GDPR): You have the rights above under the General Data Protection Regulation. You can also lodge a complaint with your local data protection authority.
California users (CCPA/CPRA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information — we do not sell personal information.
To exercise any of these rights, contact us at support@nfldynastyledger.com.
6. Cookies
We use essential cookies to keep you signed in and to remember your preferences.
7. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children.
8. International Data Transfers
We and our service providers (Paddle, Sentry, Vercel, Resend) may process and store data outside of your country of residence, including in the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers of data from the EU/UK.
9. Security
We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS) and access controls on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect.
11. Contact
Questions about this Privacy Policy or your data can be sent to support@nfldynastyledger.com.