Privacy Policy
The short version
- No accounts. No email addresses. No ads, analytics, or trackers.
- We see the draft you connect (which is public data on your fantasy platform), your chat messages, and standard server logs. That's it.
- Everything tied to your session is deleted automatically after SESSION_TTL_HOURS hours of inactivity.
- The Chrome extension reads nothing from any web page. It only shows our app next to your draft room.
The Chrome extension
The extension does one job: it docks the Draft Copilot web app in a panel beside your draft room. Specifically:
- It reads no page content, on any site. It does not scrape your draft page, your league, your messages, or anything else in your browser. The draft data the assistant shows comes from the hosted service (described below), not from the page you're on.
- It stores your settings locally using Chrome's
chrome.storage, on your own machine. Those settings never leave your browser except as part of ordinary requests to the web app (for example, which strategy preset you picked). - It embeds our web app in an iframe on draft pages. That iframe is an ordinary visit to YOUR_DOMAIN, no different from opening it in a tab.
- It contains no analytics, no trackers, and no third-party code.
The hosted service
Website analytics. Our marketing pages (the landing page, this policy, the install guide) use Vercel Web Analytics to count visits. It is cookieless: it records aggregate page views and rough device/region categories, sets no cookies, does not identify you, and does not follow you across other sites. It does not run inside the copilot app itself or the extension.
When you connect a draft, here is everything the service receives:
| What | Why |
|---|---|
| The draft URL or draft ID you paste in or connect | To find your draft on the fantasy platform |
| The picks of that draft, fetched from the platform's public API | To mirror the board and compute recommendations. This is the same public data anyone with the draft link can see. |
| Your chat messages to the assistant | To answer them |
Sessions are anonymous. When you start using the app we issue a random session token so your strategy settings and chat history follow you during the draft. It is not linked to an account, an email, or your identity — we don't have accounts and we don't collect email addresses.
Sessions expire. A session and everything attached to it — including its chat history — is deleted after SESSION_TTL_HOURS hours of inactivity. We do not keep chat archives.
Server logs. Like nearly every web service, our servers keep short-lived request logs: IP address, request path, and response status. We use them only to spot abuse and keep the service up, and they are deleted after LOG_RETENTION_DAYS days.
Yahoo Fantasy (beta)
Connecting a Yahoo draft uses Yahoo's standard OAuth flow:
- You sign in on Yahoo's own site. We never see your Yahoo password.
- Yahoo gives us a token scoped to Fantasy Sports read access. We use it only to read your draft.
- You can revoke that access at any time in your Yahoo account settings, and it dies with your session like everything else.
Chat and language models
When the operator of a Draft Copilot deployment enables it, chat messages are processed by a third-party large-language-model API to generate answers. What gets sent is exactly two things:
- Facts about the draft (picks made, players available, your roster, your strategy settings), and
- the message you typed.
The assistant never asks for personal information, and none is required to use it. Don't paste anything into the chat you wouldn't want processed by such an API. If LLM processing is not enabled on a deployment, chat messages stay within the service.
What we don't do
- No selling or sharing of data with anyone, for any purpose.
- No advertising, ad networks, or cross-site tracking.
- No analytics beyond the cookieless page-view counts described above — and none at all inside the copilot app or the extension.
- No profiles built about you. There is nothing to build one from.
Changes to this policy
If this policy changes, the new version will be posted here with a new effective date. Since we have no way to contact you (by design), checking this page is the way to see updates.
Contact
Questions about any of this: CONTACT_EMAIL.