Privacy Policy

War Room (“War Room”, “we”) is a draft assistant at https://warroom.draftcommand.us. It is operated by [LEGAL_ENTITY — replace after LLC formation], [MAILING_ADDRESS — replace after LLC formation]. Questions: support@support.draftcommand.us.

If you create an account we store:

• Username, email address, and a hashed password.
• A session cookie so you stay signed in. It is first-party, httpOnly, and not used for advertising.
• Optional platform connections you paste or authorize: Sleeper username, ESPN espn_s2 and SWID cookies, Yahoo OAuth tokens. Those are credentials for your leagues. We encrypt them at rest when a server key is configured.
• Which leagues you linked, your draft slot, and which players you marked drafted or taken.

We do not collect payment cards, government IDs, precise location, or advertising identifiers. We do not run analytics pixels or sell lists.

To run your account, show a board scored in your league’s rules, sync picks from a platform you connected, reset a forgotten password, and keep the site from being abused. We do not use this data to train a public model or to advertise.

Processors that run the service, not buyers. We do not sell personal information and we do not share it for cross-context advertising.

• Resend — Transactional email (password reset and address verification).
• The application host (Coolify on a VPS) — Runs the site and the Postgres database.

Sleeper, ESPN, and Yahoo see whatever their own APIs already see when you ask us to talk to them. We are not those companies and we are not affiliated with them.

Until you delete the account, or we delete an unused beta account. Password-reset and verification tokens expire in minutes and are stored only as hashes. Session cookies expire. A password reset also clears stored platform credentials on purpose.

You can disconnect a platform, change your email, or delete the account from Profile. Deleting removes your login, email, and credentials. League rows other people still use are not deleted; shared picks stay on the board with your user id taken off.

Email support@support.draftcommand.us if you cannot reach the account. We will not honor a deletion request we cannot match to the account.

War Room is for people 18 or older. We do not knowingly collect information from children under 13. If we learn we have, we delete it.

Passwords are scrypt-hashed. Platform credentials are encrypted at rest when the host has a key. No method is perfect. If we believe a breach exposed your unencrypted personal information we will notify you at the email on the account as the law requires.

Most comprehensive state privacy statutes (California CCPA and the others) apply only after a business hits size or revenue thresholds War Room does not meet. We still do not sell your information. Texas residents can email support@support.draftcommand.us with access or deletion requests; we will treat them the same as a Profile deletion.

If this policy changes in a way that matters, we will update the effective date on this page. Continued use after that date is acceptance of the new policy.