PlayDraft Privacy Policy

1. Overview

PlayDraft is operated by OverscrollTactics LLC ("OverscrollTactics," "we," "us"), which is responsible for the personal information described here. This policy explains what information PlayDraft collects, how we use it, and the choices you have. PlayDraft is a social drafting game — we collect what the game needs to work and not much else. We do not sell your personal information, and PlayDraft has no advertising or ad tracking.

2. Information You Give Us

Account: your email address and a password, or your Sign in with Apple identifier (Apple lets you choose whether to share your real or a private relay email). We use this to create and secure your account.

Profile: your public username and your chosen avatar (PlayDraft avatars are built-in characters — we do not ask for a profile photo).

Content you create: chat messages in draft rooms, leagues, and direct messages (including GIFs you pick and photos you attach), custom draft topics, league names, and league logos you upload. Photos and logos you upload are stored in our media storage and served via web links.

3. Information Created as You Play

Gameplay records: your drafts, picks, votes, results, leagues, coin and ticket balances, XP, streaks, and achievements. These make the game function and are visible to the people you play with where the game shows them.

Referrals: if you share or redeem a referral code, we record the connection so both accounts receive the reward.

4. Reports, Safety, and Moderation

When you report content or an account, we create a report that includes your report reason, any comment you add, and a snapshot of the reported content with limited surrounding context. Reviewers see report evidence; your identity as a reporter is not shown to the person you reported.

We may use automated systems and service providers to help detect, classify, and prioritize reported content for review. If we engage a content-safety service provider, limited portions of reported text may be processed by that provider; automated outputs inform, but do not determine, enforcement decisions. No such provider is currently active.

Enforcement records (warnings, content removal, restrictions, suspensions) are kept in an internal audit log. Report evidence is retained for up to two years after a report is closed, then purged, unless we are legally required to keep it longer.

5. Purchases

Real-money purchases are processed by Apple through your App Store account. We never receive or store your card number or payment credentials. If purchases are enabled, we receive purchase records (what was bought and when) to deliver your items and may use a purchase-infrastructure provider to validate receipts.

6. Notifications and Device Data

If you turn on notifications, we store a push token for your device so we can deliver them, along with your notification preferences. You can turn notification types off in Settings or disable them entirely in iOS Settings.

If you enable the Face ID app lock, authentication happens entirely on your device through iOS. No biometric data is ever sent to us.

PlayDraft does not collect your location, contacts, browsing history, or advertising identifiers.

7. Analytics

PlayDraft currently uses no third-party analytics service. If we add product analytics in the future, we will update this policy before or at that change.

8. Service Providers

We use a small number of providers to run PlayDraft: Supabase hosts our database, authentication, storage, and realtime infrastructure (processed in the United States); Apple provides sign-in, purchases, and push-notification delivery; Expo relays push notifications to Apple; and GIPHY powers GIF search — your GIF search terms are sent to GIPHY to return results.

These providers process data only to provide their service to us. We do not sell or rent your personal information to anyone.

9. Data Retention and Deletion

We keep your account data while your account exists. You can permanently delete your account at any time in Settings — deletion removes your account and personal data and removes your identity from shared group content (messages and drafts in group history lose their attribution). Deletion is irreversible.

Report evidence and enforcement records follow the retention period in Section 4 and may survive account deletion where needed for safety, security, or legal obligations.

10. Your Choices

You can edit your username and avatar, control notifications, block other users, report content, and delete your account — all in the app. For access or correction requests, or questions about your data, contact rdeboer@overscrolltactics.com. Depending on where you live, you may have additional rights under local privacy law; we will honor valid requests.

11. Children

PlayDraft is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that an account belongs to a child under 13, we will suspend the account and delete associated personal information as required by law.

12. Security

Data is encrypted in transit, access to production data is restricted, and database access is enforced with row-level security so users can only read what the game intends them to see. No system is perfectly secure, but we design for least access.

13. Changes to This Policy

We may update this policy as PlayDraft evolves. If we make material changes, we will update the "Last updated" date and surface the change in the app.

14. Contact

Questions about privacy: rdeboer@overscrolltactics.com.