Privacy Policy

We collect the following information when you use Dynasty Buddy:

• Account email address — used for login, alert digests you opt into, and account-related communications.
• Sleeper username and user ID — provided by you and resolved via the public Sleeper API to import your dynasty leagues.
• Your Sleeper league and roster data — fetched from the public Sleeper API (league settings, rosters, trade history, matchups). This data is public on Sleeper.
• Optional encrypted Sleeper credentials (username + password) — only if you choose to provide them on the Account page to enable private trade offer visibility. Stored encrypted at rest using Fernet symmetric encryption. Used only to authenticate with Sleeper on your behalf. Never logged or transmitted in plaintext.
• Optional bring-your-own Anthropic API key — only if you provide one to unlock unlimited AI usage. Stored encrypted at rest. Used only to make AI API calls on your behalf.
• Per-user app data — player notes, custom rankings, favorites, UI preferences (accent color, alert filters), and alert opt-in settings you configure.
• Push subscription endpoint — if you enable push notifications, your browser generates a push subscription endpoint that we store to send you alerts.
• Usage data — pages visited and features used, for debugging and improving the app. No third-party analytics trackers are used.

We use the information we collect to:

• Provide and operate the Dynasty Buddy service.
• Sync your Sleeper leagues and display your roster, picks, and trade data.
• Send alert digests (email and/or push notifications) that you opt into.
• Power AI features (the AI Dynasty Expert) when you invoke them.
• Process subscription payments through Stripe when you upgrade to Pro.
• Respond to support requests sent to our contact email.
• Debug issues and improve the service.

We do not sell your data to third parties or use it for advertising.

We share data with the following third-party processors to operate the service:

• Stripe — payment processing for Pro subscriptions (when billing is active). No card data touches our servers; Stripe handles all payment data under their own privacy policy. Stripe may collect billing details and transaction metadata.
• Anthropic — AI Dynasty Expert responses. When you use the AI feature, your messages and relevant roster/league context are sent to Anthropic's API. Anthropic processes this data under their own privacy and usage policies.
• SMTP / Email provider — for sending alert digests and verification emails. Email content includes your alert data and your email address.
• Sleeper — the public Sleeper API provides league, roster, player, and trade data. We fetch this on your behalf.
• Other data sources — FantasyCalc, KeepTradeCut, ESPN, FantasyPros, nflverse, CollegeFootballData. We fetch publicly available data from these services to power valuations, projections, and rankings. We do not share your personal data with these sources.
• Render — cloud hosting provider. Your data is stored on Render's infrastructure. See Render's privacy policy for their data handling practices.

We use the following cookies:

• Session cookie — a signed, server-side session cookie that keeps you logged in. Required for the app to function.
• Preference cookies — small cookies that remember UI preferences such as your last-used alert filters across devices.

We do not use third-party advertising cookies or tracking pixels. There is no Google Analytics, Facebook Pixel, or similar third-party tracker on this service.

We retain your account data for as long as your account is active. Sleeper league data is refreshed daily and is derived from the public Sleeper API — it is not independently retained beyond what the API provides.

To request deletion of your account and personal data, email us at lukee412@gmail.com with the subject "Delete my account". We will delete your account and personal data within 30 days. Note that anonymized or aggregated data may be retained.

Your optional encrypted Sleeper credentials and BYO API key can be removed at any time from the Account page without deleting your account.

We take reasonable steps to protect your data, including:

• Passwords are hashed using Werkzeug's secure password hashing (bcrypt-based).
• Optional Sleeper credentials and BYO API keys are encrypted at rest using Fernet symmetric encryption.
• All traffic is served over HTTPS (TLS).

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and are not responsible for unauthorized access beyond our reasonable control.

Dynasty Buddy is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

Questions about this Privacy Policy or how your data is handled? Contact us at: lukee412@gmail.com