Privacy Policy

Information we collect

We collect information you provide when creating or updating an account, including your name, email address, authentication credentials, notification preferences, and team name. Passwords are stored as one-way hashes, not readable passwords.

When you use Google sign-in, we receive your Google account identifier, verified email address, and basic profile name. We do not request access to Gmail, Drive, contacts, calendars, or your Google password.

We also store league activity needed to operate the service, such as memberships, commissioner roles, invitations, drafts, rosters, weekly lineups, transactions, scoring corrections, notification subscriptions, and audit records. Standard technical data—including session identifiers, request timing, IP-derived security signals, device/browser information, and error logs—may be processed to secure and operate the application.

How we use information

We use information to authenticate users; operate leagues, seasons, drafts, lineups, transactions, standings, and notifications; deliver invitations and account emails; prevent fraud and unauthorized access; diagnose errors; enforce league permissions; and maintain the service.

We do not sell personal information or use league data for third-party advertising.

Service providers and data sources

Cloudflare hosts the application, databases, security controls, and network delivery. Resend delivers transactional emails such as invitations, verification messages, and password recovery links. Google processes Google sign-in when you choose that option. Golf-data providers supply tournament, golfer, ranking, field, and result information. These providers process information under their own terms and privacy policies.

Cookies and local application storage

My Golf Draft uses secure session cookies necessary to keep you signed in and enforce account access. Installed-app and notification functionality may use browser storage, a service worker, and a device-specific push subscription. We do not use advertising cookies.

Sharing and visibility

Your name, team, roster, lineups, transactions, standings, and league activity may be visible to other members of leagues and seasons you join. Commissioners receive administrative access only within leagues they commission. We may disclose information when required by law, to protect the service or its users, or during a legitimate business transfer subject to appropriate protections.

Retention and security

Account and league records are retained while needed to provide current and historical league functionality, meet legal obligations, resolve disputes, and protect the service. Expired security tokens and operational logs may be removed on a separate schedule. We use encrypted transport, environment-isolated databases, hashed credentials and tokens, revocable sessions, and server-side authorization controls. No online service can guarantee absolute security.

Your choices

You may update your profile, password, team name, and notification preferences in the application. You may disconnect Google sign-in from your Google account settings. To request access, correction, account deletion, or assistance, contact support@mygolfdraft.com. Some league history or audit information may be retained where reasonably necessary for integrity, security, or legal obligations.

Children and changes

The service is not directed to children under 13, and we do not knowingly collect their personal information. We may update this policy as the service changes. Material updates will be identified by a revised effective date and, when appropriate, an in-product notice.