Privacy Policy
Effective date: 18 August 2026
This policy explains how DraftDynasty handles information when you use the website and multiplayer game.
Information we handle
- Browser player identifier: a randomly generated identifier saved in local storage so the game can recognise your lobby and team.
- Account information: if you create an account, Firebase Authentication handles your email address, password credential, email-verification status and permanent account identifier. DraftDynasty does not receive or store your password.
- Public profile information: your unique Club Name and eligible Hall of Fame statistics, including completed dynasties, match record, premierships, awards and draft selections.
- Lobby and gameplay information: lobby codes, team names and ownership, draft selections, roster decisions and simulated results.
- Technical information: ordinary web-server records may include your IP address, request time, requested page, browser details and error information.
- Optional analytics information: if you allow analytics, Google Analytics 4 receives information about pages viewed, broad device and location information, and interactions with selected links or features.
An account is optional for playing, but only completed dynasties attached to a verified account count toward public lifetime statistics. Email addresses are not displayed publicly.
How information is used
Information is used to operate and recover lobbies, authenticate accounts, associate players with teams, calculate lifetime records and Hall of Fame rankings, moderate public names, maintain security, diagnose errors and improve the game. Optional analytics helps identify which pages and features are useful.
Storage and retention
- The browser player identifier and analytics choice remain in local storage until you clear the site's browser data.
- Active lobby and game state is stored so a game can recover after a server restart.
- Unstarted lobbies expire after approximately 30 minutes without activity. Inactive active games are normally removed after approximately 24 hours.
- Completed account results and derived statistics are retained as part of the player's lifetime record until deleted or retention practices change.
- Technical server logs may be retained according to the hosting and server configuration.
Cookies and analytics
DraftDynasty uses local storage for the browser player identifier and a secure, HTTP-only session cookie to keep a verified account signed in for up to seven days. Firebase may use storage or cookies necessary to provide authentication.
Google Analytics 4 is loaded only after you choose “Allow analytics”. Advertising personalisation and Google signals are disabled in DraftDynasty's configuration. You can change your choice below; choosing “Necessary only” prevents analytics from loading on later visits. Previously collected information may remain subject to Google's retention practices.
Sharing and overseas processing
DraftDynasty does not sell personal information. Account authentication is provided by Google Firebase and optional site measurement is provided by Google Analytics. Information may also be processed by infrastructure providers used to host, back up and secure the service. Their systems may operate in Australia or other countries.
Security
Reasonable technical measures are used to protect the service, but no internet service can guarantee complete security. Only share private lobby codes with people you want to invite.
Your choices and requests
You can remove the browser identifier and local analytics choice by clearing DraftDynasty's site data. You can request access, correction or deletion of your DraftDynasty profile and lifetime results through the DraftDynasty project repository. Never publish passwords, authentication tokens or other sensitive information in a public issue.
Changes to this policy
This policy may change as DraftDynasty develops. The effective date will be updated when material changes are made.
Australian privacy information
Whether the Australian Privacy Act 1988 applies depends on the operator's circumstances. Nothing in this policy limits any rights that apply under Australian law.