Privacy Policy

What we collect, why, and what we never do with it. Last updated October 1, 2026.

The short version

  • We collect your email address (to sign you in and to email you about the Service) and, if you subscribe, billing status from Stripe.
  • Stripe handles your card. We never see or store your full card number.
  • We never sell your data or share it with advertisers.
  • We don't connect to your DraftKings or FanDuel accounts. The files you upload to build lineups are processed in your browser and are not sent to us.

What we collect

  • Email address. When you join the beta list or sign in. Sign-in uses a one-time email link through Supabase Auth; we don't store passwords.
  • Account and billing status. If you subscribe, Stripe tells us your customer id, which plan you're on, whether it's active, trialing, canceled or past due, and when the current period ends. That's what unlocks paid features.
  • Beta sign-up context. Which form you used, the page that referred you and any marketing campaign tags in the link you clicked.
  • Server logs. Our hosting provider (Netlify) and database provider (Supabase) keep standard request logs — IP address, browser type, pages requested, timestamps — for security and debugging, for a limited time.
  • Builder exports (owner only). When the site owner has owner mode on, the lineups they export are recorded for grading. Nothing about your exports is recorded.

We do not collect your name, address, date of birth, government ID or DFS account credentials. Age and state eligibility are your responsibility (see the Terms).

How we use it

  • To sign you in and keep your account working.
  • To know which plan you're on and unlock the right features.
  • To email you about the Service: your sign-in link, beta access, billing receipts (sent by Stripe), important changes to the Service or these policies, and — if you joined the beta list — occasional product updates. Every marketing email has an unsubscribe link.
  • To keep the Service secure and fix problems.

Who we share it with

Only the providers we need to run the Service, and only what they need:

  • Stripe (payments): your email and what you're buying. Stripe's own privacy policy governs the card details you enter on their checkout page.
  • Supabase (database and authentication): your email, account and billing status.
  • Netlify (hosting and serverless functions): standard web request data.
  • Email delivery providers used by Supabase and Stripe to send sign-in links and receipts.

We may also disclose information if the law requires it, or to protect the rights, safety or property of GameTime Win or its users.

What we never do

  • We never sell, rent or trade your personal information.
  • We never share it with advertisers or data brokers.
  • We never ask for or store your DraftKings or FanDuel login.
  • We never upload, edit or submit contest entries on your behalf.

Browser storage

The lineup builder saves your settings, locks, projection edits and theme choice in your browser's local storage so they're there next time. That data stays on your device; it isn't sent to us. Clearing your browser data removes it. We don't use advertising or tracking cookies.

Analytics

We don't run third-party analytics or tracking scripts today. If we add privacy-respecting, aggregate analytics in the future (page views, not people), we'll update this page first. Our hosting provider's server logs are the only usage data we have.

Retention and deletion

We keep your account data while your account exists. If you ask us to delete your account we remove your profile and email from our database within 30 days; Stripe retains billing records for as long as tax and accounting law requires. Beta-list emails are deleted on request or when the list is retired.

Your rights

You can ask us at any time to see, correct, export or delete the personal information we hold about you, or to stop emailing you. Email us at the address below and we'll respond within 30 days. If you're in a jurisdiction with specific privacy rights (for example the EU/UK GDPR or a US state privacy law), those rights apply and this is how you exercise them.

Children

The Service is for adults (18+, and older where contests require it). We don't knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we'll delete it.

Changes to this policy

If we change this policy in a meaningful way we'll email account holders or post a notice on the Service before the change takes effect.

Contact

GameTime Win · Millbury, Massachusetts, USA · contact