Privacy Policy

When you visit our site without signing in:

• A functional preference cookie storing your declared draft window. Not used for tracking or advertising.
• Standard server logs (IP address, request path, user agent) retained by our hosting provider Vercel for operational and security purposes.

When you create an account:

• If you sign in with Google: your name, email address, and profile picture as provided by Google. We do not receive or store your Google password.
• If you sign in with email and password: your email address and a securely hashed password managed by our auth provider (Supabase Auth). We never store your password in plain text.

When you join the waitlist:

• Name, email address, Sleeper username (optional), number of dynasty leagues, area of focus, creator flag, and your free-text submission.

When you use the analytics product:

• Your Sleeper username, which we send to Sleeper's public API to look up your leagues, rosters, and draft state.
• League data including other league members' rosters, owner names, and team activity, for the sole purpose of analyzing the league for you. We do not retain league data server-side beyond the duration of your request.
• Your declared strategy choices and chat messages with the coach. Free-tier chats are stored in your browser's localStorage only. Pro-tier chats are also stored server-side for cross-device continuity. Each chat turn is sent to our AI provider as described below.
• Pinned briefings (Pro tier) are stored server-side so they persist across devices.

When you subscribe (Pro tier):

• Payment is processed by Stripe. We receive your Stripe customer ID, subscription status, and plan details. We never see or store your full card number.

• Waitlist data is used solely to invite you to the beta and to understand who is interested in the product.
• League and chat data is used to generate the analysis we show you.
• We do not sell your data. We do not share it with advertisers.

We rely on the following service providers:

• Anthropic (Claude API) processes your chat messages and league context to generate AI responses. Anthropic does not train its models on your inputs or outputs per their commercial terms. Anthropic may also perform live web searches when answering, which can transmit query content to third-party search providers.
• Sleeper is the source of your league data; reading your data via their public API is governed by your agreement with Sleeper.
• Supabase hosts our database and manages authentication (including Google OAuth and email/password sign-in).
• Stripe processes payments for Pro subscriptions. Subject to Stripe's Privacy Policy.
• Google provides OAuth sign-in. Subject to Google's Privacy Policy.
• Vercel hosts the application and serves static logs.
• Upstash stores rate-limit and spend counters (no PII).

Dynasty General is operated in the United States. If you access the Service from outside the U.S., your data will be transferred to and processed in the U.S. by us and our sub-processors. We rely on the EU-U.S. Data Privacy Framework, the UK Extension, and Standard Contractual Clauses where applicable for transfers from the EU and UK. Stripe, Google, Anthropic, Vercel, Supabase, and Upstash are all certified or contractually compliant with these frameworks.

• Waitlist entries: retained until 12 months after public launch, then deleted.
• League data: not retained server-side.
• Chat history (free tier): stored in your browser's localStorage until you clear it.
• Chat history and pinned briefings (Pro tier): stored server-side until you delete them via Account settings or use the "Wipe my data" feature.
• Server logs: retained per Vercel's defaults (typically 30 days).

To export or delete the data we hold about you, email isaiah@nextupleader.com. We respond within 30 days. Self-serve export and wipe from the Account page is on the roadmap and will be announced when available.

If you are in the EU/UK (GDPR) or California (CCPA/CPRA), you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to processing.
• Withdraw consent.
• California (CCPA/CPRA): opt out of the sale or sharing of personal information for cross-context behavioral advertising. We do not sell or share for this purpose. Limit the use of sensitive personal information. We do not discriminate against users who exercise their rights.

Email isaiah@nextupleader.com to exercise any of these rights. We will respond within 30 days.

You may also clear browser-stored data (chat history, declared windows) at any time without contacting us, by clearing site data in your browser.

We set one cookie: `dw_<leagueId>`, a 180-day functional preference cookie that stores your declared draft window for a specific league. The cookie is set only when you take the explicit action of declaring a window in the Windows Bar (your declaration is your consent). You can decline by not declaring a window; the rest of the app functions normally. We do not set advertising, analytics, or tracking cookies, and we do not use third-party trackers.

You can clear the cookie at any time by clearing site data in your browser, or it will expire automatically after 180 days.

Dynasty General is intended for users 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has provided data, email us and we will delete it.

We may update this policy. Material changes will be announced on the site or by email to waitlist members.

Questions: isaiah@nextupleader.com

Dynasty General is operated by an independent founder.