Privacy notice

Information we handle

• Account details: email address, display name and password hash.
• Optional profile details: country, favourite team and biography.
• Game activity: squads, transfers, chips, league memberships, picks and scores.
• Essential session records and administrator audit events.
• Short-lived one-way digests for email verification and password recovery links.
• Encrypted authenticator secrets, a short-lived encrypted recovery-code reveal and one-way recovery-code digests when you enable two-step verification.
• First-party product events such as completing a squad, joining a league or opening a recap.
• Notification preferences, delivery status and read state.
• Beta feature grants and non-sensitive billing-event identifiers/digests; raw billing webhook payloads are not retained.

Authentication throttling uses short-lived pseudonymous fingerprints in the application database. Commissioner Discord webhook credentials are encrypted at rest and are never displayed after saving. Raw passwords are never stored.

Why we use it

We use this information to provide the game, authenticate users, calculate results, prevent abuse, investigate corrections and operate the closed beta. We do not use fantasy decisions for automated decisions with legal or similarly significant effects.

Signed-in managers can disable first-party product analytics from Settings. Legends Draft also honours browser Do Not Track and a local opt-out before the analytics beacon sends. Opting out deletes local events already linked to that account and requests deletion of associated PostHog profiles and events. Provider deletion is asynchronous and requests are retried if PostHog is unavailable.

Basic statistics and optional advanced analytics

We use PostHog Cloud in the EU to help improve Legends Draft. Basic statistics start without an opt-in and count page views and selected actions. Our server immediately adds each measurement to hourly counters. It does not retain individual basic events or create basic visitor profiles. Page names use templates; referral sources are broad categories, and devices are grouped as desktop, mobile or tablet. These breakdowns are kept separately, without account identifiers, visitor IP addresses, fingerprints or analytics identifiers in cookies or browser storage. Hourly counters are sent to PostHog after the hour ends. Local copies of delivered counters are retained for up to 90 days.

Advanced analytics start only when you choose “Allow advanced analytics”. These link selected visits and gameplay using pseudonymous browser and account identifiers so we can understand signup, squad creation and returning players. They include page templates, campaign labels and a coarse device category. We do not send names, email addresses, visitor IP addresses, invite codes, raw query strings or form contents. Advertising, automatic click capture and session recordings are off.

Choose “Basic only” to keep aggregate statistics without advanced tracking, or “Turn off all analytics” to stop both. You can change either choice using “Analytics preferences” in the footer. Browser Do Not Track, Global Privacy Control and an account analytics opt-out override these choices. Your choice is remembered for 180 days. Only advanced consent enables an optional random browser identifier for up to 180 days and session and attribution cookies that expire after 30 minutes without a tracked page visit. PostHog data is retained for up to one year. Previously collected basic counts cannot be connected to a later advanced identity or removed as an individual’s records.

Switching to basic only or turning analytics off clears the advanced cookies and queues deletion of associated advanced PostHog data. Deleting your account also queues removal of its advanced data. Provider deletion is asynchronous and retried when unavailable. See PostHog's privacy policy for information about the provider. The game works with either or both analytics options disabled.

Cookies and public information

Legends Draft uses an essential, HTTP-only session cookie and, during a two-step login, one short-lived HTTP-only challenge cookie. It does not use advertising cookies or third-party advertising analytics. A random first-party browser identifier is used for public-page and activation journeys only after advanced analytics consent. Display names, team names, scores and fantasy decisions may appear to league members or on a share page when a commissioner enables public sharing. Every legal Classic tournament squad is included automatically in public leaderboards. A manager's display name, squad name, scores, country/region and favourite-team community may be shown on indexable leaderboard pages. Making a Pick'Em prediction also adds the manager's display name and settled Pick'Em totals to that competition's public standings automatically. Email addresses, authentication details and session tokens are never displayed publicly.

Sharing and retention

We may use hosting, database and security providers to operate the service; those providers should receive only what is necessary to perform their role. We do not sell personal data. Account and fantasy history are retained while the account is active and as needed for league integrity, security and legal obligations. Sessions expire after 30 days. Operational backups may take additional time to cycle out.

Your choices

You may ask for access, correction or deletion of personal information, or object to certain processing where applicable. Some score and league records may need to remain under a “Deleted manager” label to preserve competition history. Account deletion removes profile details, sessions, communication records and analytics identifiers from the live database. Use the contact page for privacy requests. Legends Draft is not directed to children under 13.