The minimum needed. Nothing hidden.

Who operates this service

Draft Day Order is operated by Vivid Vista Media LLC through Vivid Vista Tech. This policy covers information handled through draftdayorder.com.

Information we collect

If you schedule a shared reveal, we also store its start time with the locked result. Your unfinished reveal settings are saved with your lineup on this device. A scheduled receipt includes the start time and link, not unrevealed picks.

When you finalize an order, we receive the required fantasy platform and league ID, optional league name, team or manager names, draft year, and a receipt email when supplied. A commissioner email is required for commissioner-started reveals and optional for instant or scheduled draws. We also receive ordinary connection information, such as an IP address, that hosting and security providers need to deliver and protect the service. The application uses this information briefly to prevent abuse and does not add raw IP addresses to its database.

Screenshot import

Optical character recognition runs in your browser. The screenshot file is not uploaded or stored. Your browser may cache the OCR software and English language model; neither contains your screenshot or names. Names you keep are sent and stored only if you finalize the draft.

Information on your device

For a commissioner-started reveal, you receive a separate private commissioner link that can restore the start control on another device. Creating a commissioner-started room requires an email address. We send both the private commissioner link and the league viewing link to that address. Delivery is not guaranteed, so save the private link as a backup. Do not forward the receipt; share only the viewing link. Anyone holding the private link, or using a browser profile where its control is saved, can start the reveal but cannot change or redraw the order. The browser saves the control for up to 90 days; clearing site data removes that local copy. Keep your private link or receipt to restore it. We cannot recover the control from a league ID or viewing link alone. The application database keeps only a protected digest and records the start time once you begin.

Your browser stores an unfinished lineup for up to seven days and what it needs to reopen your latest result or check an interrupted attempt for up to 90 days. Email is not included. Anyone using this browser profile may be able to reopen the saved result. Use “Forget link” for the latest result, or clear this site’s browser data to remove all local recovery information. Pasted league links are read on your device; only the extracted platform and league ID are kept with your setup.

How we use information

We use submitted information only to create, display, recover, and enforce one draft result per league and season; send a requested receipt or reminder; send product updates only when separately requested and confirmed; prevent abuse; secure the service; and respond to support or legal requests. We do not build advertising or behavioral marketing profiles.

Optional reminders and product updates

Where email reminders are available, members may enter their own email address for one reminder 15 minutes before a scheduled reveal. We also receive the browser’s timezone to format the email. You must confirm your choices through the email link before the reminder is scheduled. Reminders are optional and delivery is not guaranteed. If the reveal is too close, use the viewing link or add it to your calendar instead.

A separate, unchecked choice lets you request occasional emails about new Draft Day Order tools and features. Leaving it unchecked does not affect reminders. We never enroll existing receipt addresses automatically, and commissioners cannot subscribe members. We record the choice, confirmation time, and consent wording version. Product-update messages include a way to unsubscribe; cancelling a reminder does not unsubscribe from updates, and unsubscribing from updates does not cancel a reminder.

Reminder records are separate from draft records. Email details and the viewing link stay encrypted in our application database while the reminder waits to be sent. A scheduled helper wakes the application without receiving email addresses or league details. You can cancel while the reminder is waiting; once sending begins, we cannot promise to stop or recall it. We clear the encrypted payload after the provider accepts the message, after cancellation, or when processing closes a reminder that is too late to send. Our email provider receives the recipient, timezone-formatted time, and viewing link to deliver the message. No commissioner control or unrevealed picks are included. The confirmation link expires within 24 hours, or before the reminder is due if earlier; reminder-management access expires seven days after the reveal. Expired records are cleaned up during subsequent reminder sign-ups, so physical deletion may happen later.

For confirmed product-update subscriptions, we retain an encrypted email address separately, without team names or league details, until you unsubscribe or for up to two years after confirmation. Unsubscribing clears the stored address immediately; the two-year cleanup runs on subsequent sign-ups. We keep a protected suppression identifier and minimal consent record to honor your choice. Email providers may retain their own delivery records under their policies.

Adding the reveal to a calendar does not send an email address to us. The calendar file includes the private viewing link, and your calendar provider may store it. Do not put it on a public calendar. Calendar alerts depend on your calendar settings.

Service providers

OpenAI Sites provides the site deployment and hosting service. Cloudflare provides application hosting, database, network, bot-management, and security services. As infrastructure providers, OpenAI and Cloudflare may process request details, IP addresses, device or browser information, security signals, and operational or diagnostic logs. Cloudflare may set essential security cookies. We do not control every infrastructure log those providers create.

Resend receives the email address and message contents when sending receipts, confirmations, reminders, or separately requested product updates and may retain delivery logs under its policy. Draft Day Order does not add email addresses to draft records or application error logs. Optional reminder and subscription records are described above. These providers process information for their services under their own policies.

OpenAI Privacy Policy · Cloudflare Privacy Policy · Resend Privacy Policy

Analytics, sale, and tracking

Draft Day Order keeps aggregate daily counts for visible setup and result views, draw starts and outcomes, invalid setup attempts, screenshot import attempts and outcomes, completed share or copy actions, image exports, print requests, and create-another actions. These are activity counts, not unique visitor counts or proof that a shared message was delivered. If you answer the optional one-tap product question, only the day and selected option are added to a daily total. These counters do not include names, league details, screenshots, email addresses, result tokens, IP addresses, or a persistent visitor identifier, and they cannot be joined to a draft record. Connection information is used separately for temporary abuse prevention. Aggregate daily counters are deleted after 25 months.

Draft Day Order does not add advertising or audience-measurement analytics, sell personal information, share it for cross-context behavioral advertising, or use third parties to track your activity across unrelated websites. Our service providers may still create the operational, diagnostic, and security records described above. Draft Day Order does not receive or use those provider records to create advertising profiles. Because Draft Day Order does not perform advertising or cross-site tracking, browser Do Not Track and Global Privacy Control signals do not change the application’s behavior.

Unlisted result links

Before a scheduled reveal, the link shows the league details and countdown. Picks become available one at a time at their scheduled times; the complete result is available after the last pick opens.

Each result uses an unlisted link. Anyone with the complete link can view it. Result pages are marked no-index and no-store, and crawlers are told not to archive them. Crawlers can ignore instructions, so do not enter sensitive information or share the link outside your league.

Retention

Result access and its names expire after 90 days. A minimal league-and-season lock remains until the following March to enforce one result per league. This lock is not an account or user profile. Temporary abuse-prevention data expires automatically. Aggregate daily counters are deleted after 25 months. We do not store receipt email addresses in the draft record.

Security

We limit collection, use encrypted connections, restrict result discovery, and delete records on the schedules above. No online service can promise absolute security, so keep the complete result link within your league.

Children’s privacy

Draft Day Order is a general-audience service for people age 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child submitted personal information, contact us so we can review and delete it where appropriate.

Your choices and requests

You can use team names or nicknames instead of personal names, use an instant or scheduled draw without email, remove local recovery data, and avoid sharing the result link outside your league. To ask about, correct, or delete a stored result, use the Vivid Vista Tech contact form and include only the reference ID in your first message. Do not paste the complete result link into the form. We will explain any verification step needed because the service has no accounts.

Changes to this policy

We will post material changes here and update the effective date. Continued use after a change is governed by the policy then posted, but we will not use previously collected information in a materially different way without an appropriate notice or legal basis.

Contact

For privacy questions or requests, contact Vivid Vista Media LLC through the Vivid Vista Tech contact form. Please do not send a team list or email address unless it is needed to resolve the request.