Privacy Policy

CageDraft is the data controller responsible for the personal data you provide when using this platform. For questions about this policy or your data, contact us at privacy@cagedraft.app.

Account data: email address, username, and profile picture (provided directly or via Google OAuth through Clerk).

Game data: fantasy rosters, scores, rankings, power-up inventory, fighter card collection, and league memberships.

Technical data: IP address, browser type, and error logs collected automatically by Sentry when you use the platform.

To provide the CageDraft service: create and manage your account, process roster submissions, calculate scores, and display leaderboards.

To improve reliability: error reports via Sentry help us diagnose and fix technical issues.

To communicate with you: send transactional emails about events, results, and account changes (when email is implemented).

Contract performance (Art. 7, V): processing necessary to provide the game service you signed up for.

Legitimate interest (Art. 7, IX): error monitoring via Sentry to maintain service stability and security.

Consent (Art. 7, I): analytics tracking and marketing communications, where you explicitly opt in.

Clerk (clerk.com): authentication and account management. Stores your email and credentials. Privacy policy: clerk.com/legal/privacy.

Convex (convex.dev): real-time database storing your game data. Privacy policy: convex.dev/privacy.

Sentry (sentry.io): error tracking. May receive IP address, browser info, and stack traces. Privacy policy: sentry.io/privacy/.

These providers act as data processors and are contractually bound to protect your data.

Clerk, Convex, and Sentry are US-based services. Data transferred to these providers is subject to standard contractual clauses and their respective privacy frameworks. By using CageDraft, you acknowledge this transfer.

You have the right to: confirm whether we hold your data; access your data; correct inaccurate data; delete your data; receive a portable copy of your data; revoke consent at any time; and lodge a complaint with Brazil's ANPD.

To exercise these rights, use the account deletion option in your Account Settings, or contact us at privacy@cagedraft.app.

We retain your data while your account is active. Upon account deletion, all personal data is removed from our systems within 30 days, except where retention is required by law.

We use essential cookies to maintain your session and locale preference. With your consent, we also use Sentry session replay and performance cookies. You can manage your cookie preferences at any time via the cookie banner.

We may update this policy periodically. Significant changes will be communicated via the platform. The date at the top of this page reflects the most recent revision.