Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and protect information when you use Slipstream Draft. We designed Slipstream Draft to collect minimal personal information. Our intent is to collect only the information needed to effectively establish your account, safeguard that account, and provide the best experience possible.

Information We Collect

Information you provide

Email address (required): used for account creation, login, password reset, and account-related communication.
Display name (optional): used for in-app identity (e.g., standings, chat).
Account credentials: if you create a password for Slipstream Draft, our authentication provider stores it securely (we do not store plaintext passwords).

Information collected automatically

When you use the App, our service providers and infrastructure may process certain technical data for security, fraud prevention, and reliability, such as:

IP address, timestamps, and authentication/security events (e.g., sign-in, sign-up, password reset, email verification).
Basic device/app information necessary to deliver the service (e.g., error logs, performance diagnostics).

Content you create in the App

If enabled in your league, the App may store in-app content you submit (for example: league/team names, chat messages). This content is associated with your account.

How We Use Information

We use the information above to:

Create and manage your account and authenticate access
Provide core app features (leagues, drafting, standings, chat, settings)
Send transactional emails you request or that are necessary for account operation (verification, password reset)
Maintain security, prevent abuse, and troubleshoot issues (including auditing authentication events)
Comply with legal obligations and enforce our terms

How We Share Information

We do not sell your personal information.

We share information only as needed with service providers that help operate the App:

Supabase (authentication, database, hosting): used to create and manage accounts and store app data. Supabase may process authentication event logs as part of operating the service.
Resend (email delivery via SMTP): used to deliver transactional emails such as verification and password reset. Email systems commonly maintain delivery logs for troubleshooting.
Apple (Sign in with Apple): used to authenticate you if you choose that sign-in method.

We may also disclose information if required by law, to protect rights/safety, or to investigate fraud/security incidents.

Data Retention

We retain account data for as long as your account is active or as needed to provide the App. We may retain limited records for security, fraud prevention, dispute resolution, or legal compliance.

Account Deletion

You can delete your account in the App (Profile → Delete My Account). Deleting your account is permanent.

If you are the commissioner of leagues you control, deleting your account will deactivate those leagues immediately. We may retain limited information where required for legal/security purposes.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information. No system can be guaranteed 100% secure.

International Transfers

Our service providers may process data on servers located outside your state or country. Where applicable, transfers are protected using appropriate safeguards.

Children’s Privacy

Slipstream Draft is not directed to children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to remove it.

Your Rights and Choices

Depending on your location, you may have rights to access, correct, or delete your personal information. The primary way to exercise deletion is through the in-app Delete My Account feature. You may also contact us using the information below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the Effective Date when changes are made.

Effective Date: 26 January 2026

Developer: RidgeTower LLC (“RidgeTower,” “we,” “us”)