At FanDraft LLC d/b/a FanDraft.com (“FanDraft”, “we”, “us”), we are committed to protecting your privacy rights and maintaining transparency about how information is collected and used while visiting FanDraft.com, FanDraft.app, or using our associated mobile applications (collectively referred to as the “Service”).
We strive to collect only the information reasonably necessary to operate, improve, secure, and market our Service.
What information do we collect?
Personal Information
FanDraft offers a variety of free content and tools that do not require user registration. However, in order to enhance your experience on our Service, purchase a FanDraft license, or access certain areas of the Service, FanDraft may require you to register for an account.
When you register for a FanDraft account, we may ask you to provide your name and email address in order to contact you and assist with account recovery if you forget your password.
If you choose to register or connect using your Google Gmail account, you grant us access only to your Google account’s associated name and email address. We do not store any additional personal information from your Google account.
Types of Personal Data We Collect
FanDraft collects Personal Data about you when:
- You provide it directly to us
- Third parties such as integration partners or service providers provide it to us
- It is automatically collected in connection with your use of the Service
We may collect the following categories of Personal Data:
Contact Information. Information used to identify or contact you, such as your first and last name and email address.
Transaction Information. Information related to transactions conducted through the Service, including purchases and interactions with features or links on the Service. This does not include full financial payment information.
User Account Information. Information used to authenticate and manage your account, including username, email address, encrypted password credentials, IP address, and session information.
Device Information. Information about devices accessing the Service, including device type, browser type, operating system, application identifiers, crash reports, and device settings.
Usage and Analytics Information. Information about how you interact with the Service, including pages viewed, features used, referring URLs, advertising interactions, conversion events, session duration, and approximate geographic region derived from IP address.
User Content. Information and materials you voluntarily post or submit through the Service, including comments, uploaded images, league customization content, and related materials.
League Information. Many features offered through FanDraft rely on fantasy sports league and roster customization.
To reduce manual setup, you may choose to import league configuration information from a supported third-party fantasy league management platform. Imports are initiated by you: you select the third-party platform and provide the applicable league identifier or other requested information, and we retrieve the available league information needed to help set up your FanDraft league.
Imported league information may include details such as the league name, number of teams, team information, and league, draft, roster, and scoring settings.
For third-party platforms that make league information publicly accessible without authentication, we retrieve only that publicly accessible information using the league identifier you provide; for those imports we do not ask for, receive, or store your login credentials, session cookies, or authentication tokens for the third-party platform.
Other third-party platforms require authorization before league information can be imported. Depending on the platform, this may involve signing in to the platform to establish a session, providing an access token or key generated by the platform for you, or completing the platform's own authorization (OAuth) process. In these cases, we receive and use the resulting authorization data — such as a token, key, or session cookie — solely to provide the integration features you request, such as importing your league settings or, where supported, exporting your draft results. We do not store your third-party account password on our servers.
We use imported league information to provide the import feature you requested and to operate the related features of the Service. Imported league information is retained as part of your FanDraft league and account data and is handled in accordance with this Privacy Policy, including the Data Retention and Deletion section below.
Third-party fantasy platforms are independent services with their own privacy policies and practices, which we do not control. This Privacy Policy governs FanDraft's handling of the information we actually receive.
Additional disclosures that apply specifically to imports from Yahoo Fantasy appear in the “Yahoo Fantasy Imports” section below.
Financial Account Information. Purchases made through the Service are one-time purchases of FanDraft licenses and optional add-on products. A license is purchased once for a season; there are no subscriptions, automatic renewals, or recurring charges, and you may choose to purchase again for a later season. We use Stripe as our payment processor, through Stripe Checkout, a payment page hosted by Stripe. When you make a purchase, you are redirected to Stripe to pay. Card numbers and payment credentials are entered on Stripe’s page and never reach, and are never stored on, FanDraft servers.
- Information we send to Stripe: your first and last name, your email address, the product or products being purchased and their price, and internal product identifiers.
- Information Stripe collects directly from you: payment card details, a billing address (which is required at checkout), and the information needed to calculate sales tax. Stripe’s JavaScript library is also loaded in your browser on our purchase page only, where it collects device and browser signals directly from your browser for fraud prevention.
- Information we store from Stripe: the Stripe customer ID, the payment reference ID, the payment status, the amount paid, the product purchased, and the billing state. We do not store card numbers or your full billing address.
Stripe handles the information it receives in accordance with its own privacy policy: https://stripe.com/privacy
Cookies and Tracking Technologies
We utilize cookies and similar technologies for a variety of purposes, including authentication, account preferences, analytics, advertising measurement, fraud prevention, and Service functionality.
Cookies may be either:
- “Session cookies,” which are temporary and deleted when you close your browser
- “Persistent cookies,” which remain on your device for a period of time after leaving the Service
We use cookies and related technologies to:
- Remember account preferences and settings
- Maintain login sessions
- Analyze traffic and usage patterns
- Improve functionality and performance
- Measure advertising effectiveness
- Attribute marketing and advertising conversions
- Prevent fraud and abuse
Our third-party advertising provider, Google, may also place or use cookies, pixels, or similar technologies on the Service.
These technologies may collect information such as:
- IP address
- Browser type
- Device identifiers
- Pages viewed
- Referring websites
- Advertising interactions
- Session activity
- Approximate geographic region
We may also use cross-domain tracking technologies to help maintain analytics and attribution continuity between FanDraft-operated domains and services, including FanDraft.com and FanDraft.app.
For more information about cookies and managing cookie preferences, please visit:
- https://www.allaboutcookies.org/
- https://ico.org.uk/for-the-public/online/cookies/
- https://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm
Advertising Technologies
We use a third-party advertising technology to measure advertising effectiveness and evaluate marketing campaigns. Our website, FanDraft.com, does not use any other third-party advertising pixels.
Our current advertising partner is:
- Google Ads (the Google Ads tag)
The Google Ads tag may collect information through cookies and related technologies, including:
- Device and browser characteristics
- Pages visited
- Referral URLs
- Advertising interactions
- Conversion activity
- Session information
- IP address and approximate geographic region
This information may be used for attribution, advertising measurement, and audience development purposes.
How we limit the Google Ads tag. We apply the following controls on FanDraft.com:
- Opt-out signals. If your browser sends a Global Privacy Control (GPC) signal, or you opt out on our Your Privacy Choices page, the Google Ads tag is not loaded in that browser.
- European Economic Area, United Kingdom, and Switzerland. For visitors in these regions, the Google Ads tag runs with advertising storage, advertising user data, and ad personalization set to “denied” using Google Consent Mode. In this state the tag does not set or read advertising cookies and is not used for ad personalization; Google may still receive limited, cookieless measurement signals.
- Other regions. The Google Ads tag operates by default, and you may opt out at any time as described above.
For additional information regarding Google’s privacy practices, please visit:
- Google: https://policies.google.com/privacy
- How Google uses information from sites that use its services: https://policies.google.com/technologies/partner-sites
You may also manage certain advertising preferences through your browser settings or through applicable third-party opt-out tools.
Website Analytics
We use a privacy-focused website analytics service to understand overall traffic to FanDraft.com, such as which pages are visited and which websites refer visitors to us. This service does not use cookies, does not track you across other websites, and does not build advertising profiles. To count visits, it briefly processes your IP address and browser information and anonymizes it; we receive aggregate statistics only.
Other Third-Party Services on Our Website
FanDraft.com relies on a small number of third-party service providers to display and operate the website. These services are not used by us for advertising, but your browser connects to them directly, so they receive your IP address and basic browser and device information, and they may set their own cookies:
- Spam and abuse prevention. Our contact-style forms, such as the partner inquiry and copyright complaint forms, use a third-party CAPTCHA service. It may collect device, browser, and interaction information to distinguish people from automated traffic.
- Form delivery. Information you submit through those forms is transmitted to a third-party form-processing service, which delivers the submission to us by email.
You may contact us at support@fandraft.com to request the names of the service providers we currently use.
Embedded Media and Video Content
We may include embedded media content on the Service, such as instructional videos or third-party hosted media.
When interacting with embedded media, third-party providers may collect information regarding playback activity, device information, browser information, and interaction behavior.
We do not knowingly provide personally identifiable information such as your name or email address directly to video providers solely based on your viewing of embedded media content.
Where required by law, we will obtain user consent before enabling certain tracking technologies associated with embedded media or advertising.
How We Use Information
We use Personal Data as reasonably necessary to:
- Operate and improve our Service
- Retrieve and process league information you ask us to import from third-party fantasy platforms
- Provide customer support
- Authenticate users and maintain account security
- Process purchases
- Personalize user experiences
- Analyze usage and improve functionality
- Prevent fraud, abuse, and security threats
- Market our products and services
- Comply with legal obligations
- Complete business or corporate transactions
In certain circumstances, we may process Personal Data based on your consent where required by applicable law.
E-Mail Communications
We may occasionally use the information we collect to notify you about:
- Product updates
- New features
- Service announcements
- Promotions and special offers
- Important changes to the Service
You may opt out of marketing emails at any time using the unsubscribe link included in the email or by contacting us directly.
We use a third-party e-mail service provider to send marketing emails. By opting into marketing emails, you acknowledge that information you provide may be transferred to that provider for processing in accordance with its privacy practices.
Mobile Applications
League information you provide may be used to tailor mobile application notifications and related Service functionality.
Mobile notifications can be disabled at any time through your device or application settings.
Data Sharing and Disclosure
We do not sell your personal information for monetary compensation.
However, we may share limited information with service providers, analytics providers, advertising partners, integration partners, and infrastructure providers as necessary to operate, improve, market, secure, and measure the effectiveness of our Service.
These disclosures may include identifiers and usage information collected through cookies, analytics tools, advertising pixels, or related technologies.
We only share information as reasonably necessary for legitimate business and operational purposes.
Some U.S. state privacy laws treat the use of advertising cookies and pixels as a "sale" or "sharing" of personal information for targeted advertising. U.S. residents can review and exercise their opt-out rights — including our recognition of the Global Privacy Control signal — on our Your Privacy Choices page.
If you have questions regarding our data practices, please contact us through our support page: https://www.fandraft.com/support
How We Protect Your Information
We implement a variety of administrative, technical, and physical safeguards designed to protect your information.
Your information is stored behind secured networks and is accessible only to a limited number of authorized personnel with special access rights.
We strongly recommend using modern, updated browsers when accessing the Service, including:
- Google Chrome: https://www.google.com/chrome/
- Mozilla Firefox: https://www.mozilla.org/en-US/firefox/new/
We encrypt Website communications using industry-standard HTTPS/TLS encryption technologies.
Passwords are securely hashed using industry-standard cryptographic methods.
Despite our efforts, no method of transmission over the Internet or method of electronic storage is completely secure. Accordingly, we cannot guarantee absolute security of information transmitted to us.
You use the Service at your own risk.
Public Content and User Submissions
Information voluntarily posted in public areas of the Service may become publicly accessible to others.
Please exercise caution when publicly disclosing personal information through comments, forums, or similar public-facing features.
Data Retention and Deletion
You may request deletion of your account and associated Personal Data at any time.
Upon verified deletion requests, we will remove or anonymize applicable personal information stored within our systems, subject to legal, accounting, fraud prevention, or operational retention requirements.
Certain transaction or historical records may be retained where legally required or operationally necessary, but such records will no longer be associated with your public-facing account profile.
To request deletion of your information, please contact: support@fandraft.com
Your Privacy Rights
Privacy laws in a number of U.S. states and other jurisdictions give individuals rights over their Personal Data. We extend the rights below to all users of the Service, regardless of where you live, subject to the exceptions permitted by applicable law.
- Right to know and access. You may ask us to confirm whether we process your Personal Data, to tell you the categories and specific pieces of Personal Data we have collected about you, where we collected it from, why we use it, and the categories of third parties to whom we disclose it.
- Right to a copy. You may ask for a copy of your Personal Data in a portable, readily usable format.
- Right to correct. You may ask us to correct inaccurate Personal Data. You can also update much of your account information directly in the app.
- Right to delete. You may ask us to delete your Personal Data, as described in the Data Retention and Deletion section above.
- Right to opt out of sale, sharing, and targeted advertising. You may opt out at any time on our Your Privacy Choices page.
- Right to non-discrimination. We will not deny you services, charge you a different price, or provide a different level of quality because you exercised any of these rights.
How to make a request. Email us at support@fandraft.com and tell us which right you wish to exercise. To protect your information, we may need to verify your identity before acting on a request, typically by confirming that you control the email address associated with your FanDraft account. You may use an authorized agent to submit a request on your behalf; we may ask for proof that the agent is authorized to act for you.
When we respond. We respond to verified requests within the time required by applicable law, which is generally 45 days. If we need more time, we will tell you why and how long we expect to take. We do not charge a fee for requests unless they are excessive or repetitive.
Appeals. If we decline to act on your request, we will explain why. You may appeal that decision by replying to our response or by emailing support@fandraft.com with the subject line “Privacy Appeal.” If you are not satisfied with the outcome of your appeal, you may contact the attorney general or the privacy regulator for the state or country where you live.
Browser privacy signals. We honor the Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of Personal Data, as described on our Your Privacy Choices page. We do not respond to older “Do Not Track” browser signals, because no common industry standard for them has been adopted.
International Users
FanDraft LLC is based in the United States, and the Service is operated from and intended primarily for users in the United States. We do not direct our marketing to people in other countries, but the Service can be used from outside the United States.
If you use the Service from another country, your information will be transferred to, stored, and processed in the United States and in other countries where our service providers operate. The privacy laws in those places may differ from, and may be less protective than, the laws where you live.
The rights described in the “Your Privacy Rights” section above are available to you wherever you live. If you are located in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority, although we encourage you to contact us first at support@fandraft.com so we can try to resolve your concern.
Third-Party Services Used in the FanDraft App
The FanDraft web app at FanDraft.app relies on the third-party services described below. For each one, we explain what it is used for, what information it receives, and whether that information is sent by us or collected directly from your browser by the third party.
Customer Support
Our in-app support page is provided through a third-party customer support platform, which also hosts our help documentation site (help.fandraft.com). The platform’s support widget loads in your browser only on the support page, not across the whole app.
- Information we send: when you are logged in and on the support page, we send your name and email address so that the support conversation is tied to you.
- Information you provide: the question you type is sent to the support platform.
- Information collected directly from your browser: as a browser widget, it also receives standard technical data, including your IP address, browser and device information, and the page it was opened from.
Support questions may be processed by an automated AI feature. Your question is answered first by an automated AI system that responds using our help documentation, and you can continue to our support team from there.
Error Monitoring
We use a third-party error-monitoring service to detect and diagnose application errors. It runs on our servers only: no error-monitoring script is loaded in your browser, and it sets no cookies.
When an error occurs while the app is handling a request, an error report is sent by us to the error-monitoring service. A report can contain your IP address, the logged-in user’s account identifiers (such as user ID and email address), request details (the URL, headers, cookies, and submitted data), and the recent database queries leading up to the error, including the values in them. In practice, this means an error report may incidentally contain account or league information related to what you were doing when the error happened.
This information is used only for debugging and reliability, not for marketing or profiling.
Apple Music (Team Songs)
As an optional feature, league members can pick a song for their team, and the song plays in the draft room when that team makes a pick. This feature uses Apple Music, provided by Apple.
- Information collected directly by Apple: Apple’s MusicKit JavaScript library is loaded from Apple’s servers in your browser on the song-selection pages and in the draft room, which means Apple receives your IP address and browser and device information. Song searches are sent from your browser directly to Apple’s Apple Music API.
- Signing in to Apple Music: to play songs, you sign in to your own Apple Music account through Apple’s own authorization window. We never see or store your Apple ID or password. The resulting authorization is held in your browser by Apple’s library; we do not store it on our servers, and you can disconnect it in the app.
- Once authorized: the app asks Apple for your account’s storefront (country or region) to check that the account can play music, and Apple receives the playback activity that happens in the draft room.
- Information we store: only the chosen song’s details (Apple song ID, title, artist, artwork link, and Apple Music link), saved against the team. We do not access or store your Apple Music library, playlists, or listening history.
Apple handles the information it receives in accordance with its own privacy policy: https://www.apple.com/legal/privacy/
YouTube and Vimeo (Player Videos)
As an optional feature, a league commissioner can attach a video link to a player, and the video plays in the draft room when that player is drafted. For YouTube videos, this feature uses YouTube API Services. YouTube is provided by Google, and information it receives is handled in accordance with the Google Privacy Policy: https://policies.google.com/privacy
- Information we send: our server calls the YouTube Data API to confirm that a video exists and to get its length. Only the video ID is sent; no user information is sent.
- Information collected directly by YouTube: the YouTube IFrame Player API script is loaded in your browser from youtube.com to check that a video is allowed to play when embedded, and videos are shown through embedded YouTube players. The draft room uses YouTube’s privacy-enhanced domain (youtube-nocookie.com); the page where commissioners manage their videos uses standard youtube.com embeds. When an embedded player or the API script loads, YouTube/Google receives the viewer’s IP address and browser and device information, and may set cookies or use similar technologies on the viewer’s device, including linking the activity to a Google account the viewer is signed in to.
- Information we store: only the video link or ID and its duration. We do not ask you to sign in to YouTube or Google, and we do not access any user’s YouTube account data.
Use of this feature is also subject to the YouTube Terms of Service: https://www.youtube.com/t/terms
Vimeo. A commissioner may attach a Vimeo video link to a player instead of a YouTube link. Vimeo videos are shown through embedded Vimeo players. When an embedded Vimeo player loads, Vimeo receives the viewer’s IP address and browser and device information directly from the viewer’s browser, and may set cookies or use similar technologies. We do not ask you to sign in to Vimeo, and we do not access any user’s Vimeo account data. Vimeo handles the information it receives in accordance with its own privacy policy: https://vimeo.com/privacy
Yahoo Fantasy Imports
Fantasy data provided by Yahoo Fantasy
FanDraft offers an optional, one-time import that copies your existing league and team settings from Yahoo Fantasy so you do not have to enter them by hand when setting up a FanDraft league. This section describes that import specifically, and applies in addition to the general disclosures above.
You start it, and it is read-only. Nothing is retrieved from Yahoo Fantasy unless you choose to run an import. FanDraft requests read-only fantasy access only; it cannot create, change, or delete anything in your Yahoo Fantasy account or leagues.
You sign in with Yahoo, not with us. Authorization takes place on Yahoo’s own sign-in screens, through Yahoo’s standard authorization process. Your Yahoo password is never sent to, seen by, or stored by FanDraft.
What we retrieve. When you run an import, FanDraft requests: the list of your Yahoo Fantasy NFL leagues for the applicable season (league name, league identifier, league URL, number of teams, and season); the settings of the league you select (league name, number of teams, roster positions and position limits, draft type, draft order type, pick clock length, scheduled draft time, and league logo); the list of teams in that league (team name, team identifier, and team logo); and any players your league has designated as keepers, together with the team holding them. Yahoo also returns an account identifier for you alongside the authorization; FanDraft does not store it. FanDraft does not request scoring rules, player rosters, matchups, standings, scores, or statistics from Yahoo Fantasy.
Yahoo returns every team in the league, not only yours. Yahoo Fantasy’s league endpoints return information about all teams in the league you select, so FanDraft receives the team names and team identifiers of the other managers in that league. FanDraft uses them to fill in the corresponding teams on your FanDraft draft board. We do not use them to build profiles of, or to contact, other managers.
What we keep. The imported values are written into your FanDraft league as ordinary FanDraft settings — league name, number of teams, rounds, draft type, draft order type, pick clock, roster size and positions, scheduled draft date, team names, team logos, and keeper selections — and from that point on they are FanDraft settings that you control and can edit. Alongside the league we also store the Yahoo league identifier and URL, the Yahoo team identifiers used to match teams during the import, and the date of the most recent import.
Authorization is discarded when the import finishes. The authorization FanDraft receives from Yahoo is held, encrypted, only for as long as the setup flow needs it — from the moment you authorize until you have chosen a league and the import completes. Completing the import deletes it, along with the account identifier Yahoo returned. FanDraft does not keep a Yahoo access or refresh token afterwards, maintains no ongoing connection to your Yahoo Fantasy account, and runs no scheduled, automatic, or background process that re-contacts Yahoo Fantasy. Importing again later requires signing in to Yahoo again. If you authorize but leave setup without completing an import, you can delete the authorization yourself by disconnecting Yahoo Fantasy from the league in your league settings.
What we use it for. Information retrieved from Yahoo Fantasy is used solely to set up and operate the FanDraft league you imported it into. We do not use it for advertising, ad targeting, profiling, enriching other datasets, training or improving any model or algorithm, or resale, and we do not sell, license, or redistribute it.
Deletion. Disconnecting Yahoo Fantasy from a league deletes the recorded Yahoo identifiers for that league, along with the authorization if an import was never completed. Settings that were imported have become part of your FanDraft league and remain with it until that league’s data is permanently deleted. To request deletion of your account and its associated data, including anything retrieved from Yahoo Fantasy, contact support@fandraft.com; see the Data Retention and Deletion section above.
Yahoo’s own terms. Yahoo Fantasy is operated by Yahoo Inc., which is independent of FanDraft LLC. Your use of Yahoo Fantasy, and of information obtained from it, is also governed by the Yahoo Terms of Use and the Yahoo Privacy Policy, which Yahoo may update at any time. Please review them to understand how Yahoo handles your information.
External Links and Third-Party Services
The Service may contain links to third-party websites, integrations, or co-branded services.
These third parties operate independently and maintain separate privacy practices and policies.
FanDraft is not responsible for the privacy practices, content, or policies of third-party websites or services.
You access third-party services at your own risk.
Children’s Privacy
Protecting the privacy of children is especially important to us.
We do not knowingly permit individuals under the age of 13 to purchase or use our products or services, and no portion of the Service is intentionally directed toward children under 13.
Your Consent
By using FanDraft.com, FanDraft.app, or related FanDraft services, you consent to the collection, use, and disclosure of information as described in this Privacy Policy.
We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or operational needs.
Continued use of the Service following updates to this Privacy Policy constitutes acceptance of those changes.
Terms of Use
Please also refer to our Terms of Use.
Questions?
If you have any questions regarding this Privacy Policy or our privacy practices, please contact us at: