Privacy

Effective October 13, 2026

Draft Room helps you draft and run a fantasy football team. This page says what it keeps about you, why, who else handles it, and how to delete it. It's written for draftroom.online and the Draft Room iPhone app, run by Apeman Tech. Questions go to greg@apeman.tech.

Without an account

The draft board, practice drafts and plans work without signing in. Everything you enter stays in your browser's storage on your device; none of it is sent to us.

What we keep when you have an account

• Your account: your email address, and your name if your sign-in provider (Google or Apple) shares it. If you use Apple's “Hide my email”, we only ever see the relay address.
• Your leagues and drafts: league settings, your board, your picks, and the plans and recaps Draft Room makes for them, so they're the same on every device.
• Your ESPN login, only if you connect ESPN: the two login cookies ESPN gives your browser (never your ESPN password). They're stored encrypted and used only to read your leagues and to make the changes you confirm. We delete them when you disconnect, or after the season ends (February 1 of the following year), whichever comes first. A draft room join code you hand over is deleted when the draft ends, or after 12 hours.
• Your settings: the email alerts you've chosen, and a record of which alerts we've sent so you never get one twice.
• Device tokens (iPhone app): if you allow notifications, the token Apple gives us to send them to your phone.
• Purchases: what you bought, for which league, when, and for how much. Card details go straight to Stripe; we never see them.
• Server logs: our server records errors (the page or route and what went wrong) so we can fix them. Sign-in links, email addresses and request headers are left out of these records.

What we don't do

• We don't sell or rent your data, or share it with anyone for their own use.
• There are no ads, and no analytics, tracking pixels or third-party trackers on the site or in the app.
• The site sets cookies only to keep you signed in and to make sign-in safe.

Who else handles it

These services process data for us, only to run Draft Room:

• DigitalOcean hosts the server and database.
• Resend delivers our emails (sign-in links and the alerts you've chosen), so it gets your email address.
• Stripe takes payments. You give your card details to Stripe, not to us.
• Anthropic writes the AI features (game plans, lineups, trade write-ups). It gets your league's settings, rosters and players, never your name, email or ESPN login, and it doesn't train on them.
• Google and Apple handle sign-in if you choose them, under their own privacy policies.
• ESPN: when you connect ESPN, Draft Room talks to ESPN with your login to read your league and make the changes you confirm. Draft Room isn't affiliated with ESPN.

Deleting your account

Delete your account any time from the account menu on the website, or from Settings in the iPhone app. It takes effect at once and removes your account, your sign-ins, your leagues and drafts and everything made for them, your ESPN login, your settings and your device tokens.

We keep two things without anything that links them to you: the record of each purchase (the amount, date and Stripe reference, which tax law and refunds need), and counts of the AI work we paid for. Stripe keeps its own payment records under its privacy policy. Copies in our database backups are gone within 14 days, when those backups are deleted.

You can also email greg@apeman.tech to ask what we hold about you, to correct it, or to delete it.

Children

Draft Room isn't meant for children under 13, and we don't knowingly keep data about them. If you think a child has an account, email us and we'll delete it.

Changes

If this policy changes, we'll update this page and its effective date. If the change matters to how your data is used, we'll email you first.