Privacy Policy

1. Introduction

Acorn City Ltd., a Colorado limited liability company, doing business as Dynasty Dash ("Dynasty Dash," "we," "us," or "our") operates the Dynasty Dash website and service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Account Information

When you sign in with Google, we receive and store:

• Your name
• Email address
• Profile picture

We receive this information from Google during authentication. We store your email and name for account identification, and we store your profile picture to display it within the Service.

2.2 Platform Connection Data

When you connect fantasy platforms, we collect:

• Your username or user ID on Sleeper and/or My Fantasy League
• Platform account identifiers used to link your accounts

2.3 Fantasy League Data

When you sync leagues, we collect and store:

• League settings and configurations
• Scoring rules and formats
• Roster information (players on your team)
• Draft picks (current and future year ownership)
• Taxi squad eligibility rules

2.4 User-Created Content

We store content you create within the Service:

• Depth chart assignments
• Custom players (draft prospects you create)
• Draft board rankings and notes
• Devy board entries
• League metadata and notes
• Age bracket preferences
• Other user preferences and settings

User-created notes and content are private to your account unless you explicitly share them through product features. Authorized personnel may access data to provide support, enforce terms, or address security issues.

2.5 Usage Data and Analytics

We automatically collect information about how you interact with the Service:

• Pages visited and navigation patterns
• Features used (roster sync, draft board updates, etc.)
• Event timestamps
• Browser type and device information
• Referring URLs

This data is collected through PostHog, our analytics provider, and is used to understand usage patterns and improve the Service.

2.6 Technical Data

Cloudflare and our infrastructure may automatically collect and store technical data such as IP address, user agent, request logs, and security events (e.g., WAF events). Application data is stored in our Cloudflare D1 database.

3. How We Use Your Information

We use the information we collect to:

• Provide the Service: Authenticate you, sync your fantasy data, display your leagues and rosters, and save your preferences
• Improve the Service: Analyze usage patterns to identify bugs, improve features, and enhance user experience
• Communicate with you: Respond to support requests and send important service updates
• Ensure security: Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations: Meet applicable legal requirements

4. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

4.1 Service Providers

We share data with third-party providers that help us operate the Service:

• Cloudflare: Hosting, CDN, security, and database (D1)
• Google: Authentication
• PostHog: Analytics

These providers process information on our behalf as service providers.

4.2 Fantasy Platform APIs

When you connect Sleeper or My Fantasy League, we make API requests to those platforms using your username or identifiers. We retrieve data from these platforms but do not share your Dynasty Dash data with them.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

If Dynasty Dash is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Cookies and Tracking Technologies

5.1 Cookies

We use cookies for:

• Authentication: Session cookies to keep you logged in
• Security: CSRF protection and secure session management

5.2 Local Storage

We use browser local storage for:

• Analytics: PostHog stores analytics data locally before sending to their servers
• Preferences: Storing UI preferences for faster loading

5.3 Analytics

We use PostHog to collect usage analytics. PostHog tracks events such as page views, feature usage, and interactions. This helps us understand how the Service is used and identify areas for improvement. PostHog may use a pseudonymous identifier to recognize your browser or session.

5.4 Analytics Choices

You can opt out of PostHog analytics at any time using the analytics toggle on your Settings page. Alternatively, you can email us at info@dynastydash.com, and we will disable analytics collection for your account.

6. Data Retention

We retain your data as follows:

• Account data: Retained until you request account deletion
• League data: Retained until you delete the league or request account deletion
• Session tokens: Expire after a limited time; we may retain related security logs and authentication records for fraud prevention and account security
• Analytics data: Retained according to PostHog's data retention policies
• Security logs: May be retained for up to 12 months for security and fraud prevention

7. Your Rights and Choices

7.1 Access and Deletion

You have the right to:

• Request access to the personal information we hold about you
• Delete your account and all associated data from your Settings page
• Delete individual leagues through the Service interface

You can delete your account at any time from your Settings page. You may also contact us at info@dynastydash.com to request account deletion or access to your data. We will respond within 30 days.

7.2 Platform Connections

You can disconnect fantasy platforms at any time by removing the platform link in your account settings. This will stop future data syncs but will not automatically delete previously synced data.

7.3 Cookies

You can control cookies through your browser settings. Note that disabling cookies may prevent you from using certain features of the Service, including staying logged in.

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption: All data is transmitted over HTTPS
• Secure authentication: We use industry-standard OAuth 2.0 for authentication
• Session security: Session tokens are securely generated and stored
• Infrastructure: Data is stored on Cloudflare's secure infrastructure
• Access controls: We limit access to personal data to authorized personnel only

While we take reasonable steps to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our service providers, including Cloudflare and PostHog, operate globally. By using the Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

We rely on our providers' contractual and technical safeguards for cross-border processing where required by law.

10. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@dynastydash.com, and we will take steps to delete such information.

11. U.S. State Privacy Rights

If you are a resident of California, Colorado, or another U.S. state with applicable privacy laws, you may have the following rights:

• Right to know/access: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to delete: You can request deletion of your personal information
• Right to correct: You can request correction of inaccurate personal information
• Right to opt out of sale/sharing: You can opt out of the sale or sharing of your personal information for targeted advertising
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

We do not sell or share personal information as those terms are defined under applicable state privacy laws.

To exercise your privacy rights, contact us at info@dynastydash.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

Your continued use of the Service after we post changes constitutes your acceptance of those changes.

13. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

info@dynastydash.com