Privacy Policy

Last updated: 15 June 2026

This policy explains what personal data DraftFoot ("we", "us") collects, why, and your rights. DraftFoot is run as a personal, non-commercial side project. For any privacy request or question, contact thehperm@gmail.com.

1. What we collect

Account data — your email address and authentication identifiers, handled by our auth provider Clerk. We do not store your password.
Payment data — purchases are processed by Stripe. We never see or store your card details; we keep a record of the purchase (pack, amount, date) linked to your account.
Gameplay data — the games you play, your drafted teams, awards and AI match verdicts, linked to your account so we can show your history.
Usage analytics — aggregate, privacy-friendly statistics via Plausible, which is cookieless and does not track or identify individuals.

2. Why we use it (legal bases)

To provide the game and your account, and to deliver premium features you purchase — performance of a contract.
To take payment and prevent fraud — contract / legal obligation.
To keep the service secure and understand aggregate usage — legitimate interests.

3. Who we share it with (processors)

We use trusted providers who process data on our behalf: Clerk (authentication), Stripe (payments), Railway (hosting/database), Anthropic (AI match analysis — your team and lineup are sent to generate the tactical verdict), and Plausible (anonymous analytics). We do not sell your personal data. Football statistics shown in the app are supplied to us by data providers (Sportmonks, Understat, Transfermarkt) and do not contain your personal data.

4. International transfers

Some providers are based outside the EEA (e.g. in the US). Where that is the case, transfers are covered by appropriate safeguards such as Standard Contractual Clauses.

5. Retention

We keep your account and game history until you delete your account or ask us to remove it. Payment records are kept as required by law (typically up to 10 years for tax/accounting).

6. Your rights

Under the GDPR you may request access to, correction of, deletion of, or a copy of your data, and may object to or restrict certain processing. To exercise any right, email thehperm@gmail.com. You also have the right to complain to your local data protection authority (in France, the CNIL).

7. Cookies

We use only essential cookies needed to keep you signed in (set by Clerk). Our analytics (Plausible) use no cookies. We do not use advertising or tracking cookies.

8. Children

DraftFoot is not directed at children under 16, and we do not knowingly collect their data.

9. Changes

We may update this policy; the "last updated" date will change. Significant changes will be highlighted in the app.

Questions? thehperm@gmail.com
Terms · Privacy · Refunds