Privacy Policy

Effective 2026-09-26 · DynastyGM · Terms of Service · Refund Policy

DynastyGM works without an account. Most of what it knows about you is public Sleeper league data you point it at, and most of what it remembers is stored in your own browser. This policy says exactly what we collect, why, who sees it and how to get rid of it.

Draft. The highlighted placeholders (entity, state, email, site, processor: [Hosting provider]) must be filled in lib/legal.ts and the text reviewed by a lawyer before this is published.

1. What we collect

The Sleeper username, user id and league ids you enter. These identify public Sleeper profiles and leagues; they are not credentials and we never ask for your Sleeper password.
League data fetched from Sleeper for those leagues: rosters, matchups, scores, transactions, draft picks and the display names of every owner in them. All of it is public through Sleeper's API.
The contents of AI requests you start: the league, roster and value data needed for that analysis, plus your team name. See section 4.
Technical logs created by our hosting provider when your browser talks to our servers: IP address, browser type, pages and API routes requested, timestamps and error reports. Logs are kept for about 30 days for security and debugging.
Nothing else. There is no advertising tracking, no data brokers and no social-media pixels. If we add product analytics later, this policy will name the provider and what it records.

2. What stays in your browser

Several things the app remembers never leave your device. They live in your browser's local storage and are deleted when you clear site data:

Your Sleeper username and the last league you opened.
Results of AI runs and the list of recent runs in the bell menu.
Commissioner payout settings (buy-in, split, who has paid) and notes.
Whether you have seen the guided tour, collapsed the report card, and similar preferences.

3. How we use information

To show you your leagues and run the tools you ask for.
To cache Sleeper and Dynasty Dealer responses on our servers for a short time so pages load quickly and we stay within those providers' limits.
To rate-limit and protect the AI features from abuse.
To fix bugs and understand which features are used, using aggregate counts and error logs.
To answer your support requests.
When paid plans launch: to manage your subscription and send receipts and service notices.

4. AI features and Anthropic

When you run an AI feature (lineup advice, waiver plan, trade analysis, trade ideas, weekly recap, draft advice), we send the data that feature needs to Anthropic's API to generate the result: the relevant rosters and player names, trade values, league scoring settings, records, and owners' public display names and trading tendencies derived from the league's history. We do not send your email address or any payment details.

Anthropic processes that data as our service provider under its commercial API terms and does not use it to train its models. We keep the generated result so you can reopen it; today that copy lives in your browser, and when accounts launch it will be stored with your account so it follows you between devices.

5. Who we share data with

We share data only with the providers needed to run the service, each for its stated purpose:

Sleeper — fantasy league data you ask us to read (public API) (https://sleeper.com)
Dynasty Dealer — player and pick trade values (https://www.dynastydealer.com)
Anthropic — AI analysis (Claude models) when you run an AI feature (https://www.anthropic.com)
[Hosting provider] — servers, request logs and content delivery
Stripe — payments, once paid plans launch (we never see your card number) (https://stripe.com)

6. When we would disclose data otherwise

We do not sell personal information. We would disclose data only to comply with a legal obligation, to protect the rights and safety of users or the public, or as part of a merger or sale of the business, in which case this policy continues to apply until it is replaced.

7. How long we keep data

Server-side caches of Sleeper and Dynasty Dealer data expire within hours to a day.
Request logs: about 30 days.
Browser storage: until you clear it or the app removes it.
Account and subscription records (once accounts exist): for as long as your account is open, then as long as tax and accounting law require for the payment records.

8. Your choices and rights

Clear your browser's site data to remove everything the app stores on your device.
Email [support email] to ask what data we hold about you, to correct it, or to have it deleted. We answer within 30 days. Once accounts exist there will be a delete-account button that does this immediately.
If you are in the EU, UK, California or another place with data-protection rights, those rights (access, correction, deletion, portability, objection, and the right to complain to your regulator) apply and you can exercise them by email.
The service is not for people under 18. If you believe someone younger has used it, contact us and we will delete what we hold.

9. Security

Data travels over HTTPS. Server access is limited to the people who operate the service. No system is perfectly secure; if we learn of a breach that affects you, we will tell you and any regulator the law requires.

10. Where data is processed

Our servers and providers are in the United States. If you use the service from elsewhere, your data is transferred to and processed there.

11. Changes and contact

We will post changes to this policy here and, for material changes, tell you in the service or by email. Questions and requests: [support email].