Privacy
Policy

1. Introduction

Podium Draft ("we", "us", "our") operates the fantasy fitness web application available at podiumdraft.com and associated subdomains. This Privacy Policy explains what personal information we collect, how we use it, and your rights as a user.

By creating an account or using Podium Draft, you agree to the practices described here.

Operator: Podium Draft, South Africa.
Contact: admin@podiumdraft.com

2. Information We Collect

Information you provide directly

• Email address (required for account creation)
• Display name / username
• Password (stored as a secure hash — we never see your plain-text password)
• Team name and draft selections (your in-game data)
• Any messages or correspondence sent to admin@podiumdraft.com

Information collected automatically

• IP address and approximate geographic region
• Browser type and version
• Device type (desktop / mobile)
• Pages visited and time spent on pages
• Referral source (how you arrived at our site)

Information from third-party login providers

If you choose to sign in using Google or Apple (when that feature is available), we receive your name, email address, and profile picture from that provider. We do not receive your password. See Section 9 — Social Login for full details.

3. How We Use Your Information

• To create and manage your Podium Draft account
• To operate the draft engine, scoring system, and leaderboard
• To send transactional emails (account confirmation, password reset, season notifications) via Resend
• To respond to support enquiries
• To detect and prevent fraudulent or abusive activity
• To analyse aggregate usage patterns and improve the platform

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Processors

Podium Draft uses the following services to operate the platform. Each processes data only as instructed by us:

5. Data Retention

• Active accounts: data is retained for as long as the account exists
• Deleted accounts: all personal data is permanently removed within 30 days of a deletion request
• Waitlist email addresses: retained until the user unsubscribes or requests removal
• Server logs: retained for up to 90 days for security and debugging purposes

6. Your Rights

Depending on where you are located, you may have rights under the Protection of Personal Information Act (POPIA — South Africa), the General Data Protection Regulation (GDPR — European Union), or the California Consumer Privacy Act (CCPA — California, USA). These rights may include:

• The right to access the personal data we hold about you
• The right to correct inaccurate data
• The right to have your data deleted ("right to be forgotten")
• The right to object to or restrict certain processing
• The right to data portability (receive your data in a machine-readable format)
• The right to withdraw consent at any time

To exercise any of these rights, email admin@podiumdraft.com. We will respond within 30 days.

7. Cookies

Podium Draft uses cookies and similar technologies. You can manage cookie preferences via the banner displayed on your first visit. For full details see the Cookie Policy accessible via the footer.

8. Children's Privacy

Podium Draft is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact admin@podiumdraft.com and we will delete the account promptly.

Users between 13 and 17 require parental or guardian consent. See also our Minimum Age Policy within the Terms of Service.

9. Social Login

What we receive

When you use Sign in with Google or Sign in with Apple, we receive only: your name, email address, a unique provider identifier, and optionally your profile picture. Nothing else.

What we do not do

• We will never post to your Google or Apple account
• We will never access your contacts, calendar, documents, or any other data
• We will never share your social login credentials with third parties
• We will never use social login data for advertising

How it works

Social login is handled by Supabase Auth via OAuth 2.0. Your credentials are never transmitted directly to Podium Draft's servers. To disconnect social login or switch to email/password, contact admin@podiumdraft.com.

10. Security

We take reasonable technical and organisational measures to protect your data, including encrypted data transmission (HTTPS/TLS), hashed password storage, and row-level security in our database. No method of transmission over the internet is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at podiumdraft.com/privacy with a revised effective date. For material changes we will notify registered users by email.

12. Contact

For privacy-related enquiries: admin@podiumdraft.com