The short version
You can use the draft board without an account at all. As a guest, your draft is stored on your own device and nothing is sent to us.
An account is needed only to draft with other people or to have your drafts follow you between devices. If you make one, we store your email address, the username you pick, and the drafts you're in.
There are no ads, no analytics, and no tracking of any kind — with or without an account.
You can delete your account and everything attached to it from inside the app at any time. See deleting your account.
1. Who we are
Elite 8 Draft Board ("the app") is a fantasy football draft board published by Cyngetik Labs. It is available on the web at elite8.cyngetiklabs.com and as an Android application (com.elite8.draftboard). This policy covers both.
For any privacy question, or to request deletion of your data, contact nfl@cyngetiklabs.com. We aim to respond within 30 days.
2. Using the app without an account
Guest mode is a real, complete mode — not a trial. As a guest you can run a full draft, use every draft type, sync the public NFL player list, and export your results. Nothing about your draft is sent to us or to anyone else. It lives in your browser's local storage on that one device.
What guest mode cannot do, by nature rather than by restriction: your draft cannot appear on another device, and you cannot join a shared draft room. Both of those require an identity that persists beyond a single browser, which is exactly what an account provides.
3. What is stored on your device
Whether or not you sign in, the app keeps the following in local storage on your device:
| What | Why |
|---|---|
| Your current draft board | Team names, drafted players, prices, budgets, the pick log with the time of each pick, and your draft settings — so your draft survives closing the app. |
| A random device marker | A random string generated on first use, so a guest's teams stay theirs on that device. It is not an advertising ID and is not derived from any hardware identifier. Once you sign in, your account is used instead. |
| The code of the last draft you opened | So reopening the app returns you to the draft you were in rather than a blank board. |
| A cached NFL player list | Public football data, refreshed about once a day so the app works offline. This contains no information about you. |
The app does not use cookies or any advertising or tracking storage. You can erase all of the above by clearing the app's storage — in a browser, clear site data; on Android, Settings → Apps → Elite 8 Draft Board → Storage → Clear data.
Android backups. The Android app allows Android's standard automatic backup, so the data above may be included in the backup Android makes to your own Google Drive account. We cannot see that backup. You can turn it off in your device's system backup settings.
4. What your account stores
If you choose to create an account, we store the following. This is the complete list.
| What | Where it comes from | Why |
|---|---|---|
| Email address | Typed by you, or provided by Google if you use Google sign-in. | Identifies your account, and lets you reset a forgotten password. |
| Username | Chosen by you. | How your league sees you in drafts and chat. It is unique across the app. |
| Display name | Chosen by you, or your Google account name as a starting point. | The friendly name shown next to your team and messages. |
| An account ID | Generated by Firebase Authentication. | How the app knows which teams and drafts are yours, on any device. |
| The list of drafts you're in | Created as you join or host drafts. | This is what makes your drafts appear when you sign in somewhere else. |
We never see your password. Email and password sign-in is handled entirely by Google's Firebase Authentication, which stores passwords in hashed form. The app never receives, stores, or logs a raw password, and neither do we. If you use Google sign-in there is no password in the picture at all.
We do not use your email address for marketing. We do not send newsletters, and there is no mailing list. The only email the app can generate is one you ask for: an address verification message when you sign up, or a password reset when you request one.
5. What you share in a draft room
Shared draft rooms require an account and are entirely optional. When you create or join one, the following is stored in a Google Firebase Realtime Database so the other people in your league can see it:
- The full draft board — team names, every pick, prices, budgets, and the pick log including the time of each pick.
- Your username and display name, shown to everyone else in the room.
- Your chat messages, with your name and the time they were sent.
- Your account ID, so the room knows which team is yours.
- Room settings — the room code, whether the league is listed publicly, and whether it has been locked.
Your email address is not shared with other players in a draft room.
Please read this part carefully: a room code is a shared secret, not a private channel.
While a league is unlocked, anyone signed in to the app who knows or correctly guesses its room code can open it and see the board and chat. If you list your league publicly, its code is shown to everyone browsing the public league list, by design.
Locking your league closes it. Once the host locks a league, no new players can join, it is removed from the public list, and only the people already in the room can read or change it. We recommend locking as soon as your league is full.
Treat team names and chat as visible to your whole league. Do not put anything sensitive — addresses, phone numbers, payment details, passwords — in either.
Chat messages are not moderated or reviewed by us, and we do not read your draft rooms.
6. Third-party services
The app talks to a small number of outside services. Each necessarily receives your device's IP address, because that is how the internet works.
| Service | What it receives | When |
|---|---|---|
| Sleeper (public NFL roster data) |
Nothing but the request itself, plus your IP address. The app only asks for the public player list; it never sends anything about you or your draft. | About once a day, and when you tap Sync Roster. Guests included. |
| Google Firebase Authentication | Your email address and password (hashed by Google, never seen by us), or your Google account identity if you sign in that way. | Only when you create an account or sign in. |
| Google Firebase Realtime Database | Everything listed in sections 4 and 5, plus your IP address. | Only while signed in. |
| Google Fonts | Your IP address and browser details, in order to serve the app's typeface. | Each time the draft board loads. |
| Icons8 | Your IP address, in order to serve the app's icon images. | When the app is installed to a home screen or its icon is displayed. |
These companies handle the data they receive under their own privacy policies: Sleeper, Firebase and Google, and Icons8.
7. What we never collect
To be specific, rather than vague. The app contains:
- No analytics of any kind — no Google Analytics, no Firebase Analytics, no product analytics SDK.
- No advertising — no ad networks, no ad identifiers, no ad tracking.
- No crash or performance reporting — no Crashlytics, no Sentry, no equivalent.
- No payments — no purchases, no subscriptions, no in-app purchases, no billing library. The app is free.
- No location, camera, microphone, contacts, photos, or files. The Android app requests exactly one permission: internet access.
- No phone number, postal address, date of birth, or real name. We ask for an email address and a username. That is all.
- No sale or sharing of personal information, in any sense, including as those terms are defined by California law. We do not sell your data, and we have no advertising partners to share it with.
8. CSV export
Exporting your draft writes a spreadsheet file containing your team names and picks to your own device's downloads. That file is never uploaded anywhere. What you do with it afterwards is up to you.
9. Keeping and deleting your data
On your device. Data stays until you clear the app's storage, as described in section 3. That is entirely under your control and does not involve us.
Your account. We keep your account information for as long as your account exists. Delete the account and it goes with it.
Draft rooms. A draft room's board and chat stay stored so a league can resume a draft later. The host of a draft can delete it outright from the My Drafts list, which removes the board, the chat history, the public listing, and every player's access. Players who are not the host can leave a draft, which removes them and their membership from it.
Deleting your account
In the app, open 👤 Account → Delete my account. This permanently and immediately removes your profile, releases your username for anyone else to claim, deletes your list of drafts, and removes you from every draft you had joined. It cannot be undone.
Drafts you host are not deleted automatically, because other people may still be using them — delete those first from My Drafts if you want them gone too.
If you would rather not do it yourself, or you have lost access to your account, email nfl@cyngetiklabs.com from the address on the account and we will delete it for you. We aim to complete deletion requests within 30 days.
10. Children's privacy
The app is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Shared draft rooms include a chat feature that is not moderated, filtered, or reviewed. Other players can type whatever they like. Parents and guardians should take that into account, and should note that the single-device guest mode works fully without an account or any contact with other users.
If you believe a child under 13 has provided us with personal information, contact nfl@cyngetiklabs.com and we will delete it.
11. Your rights
Everyone
You can see and change your username and display name in the app at any time, and delete your entire account yourself as described above. If you play as a guest, none of your data reaches us at all.
If you are in the UK, EU, or Switzerland (UK GDPR / GDPR)
You have the right to access your personal data, to have it corrected or erased, to restrict or object to how it is processed, and to receive it in a portable format. You also have the right to lodge a complaint with your local data protection authority.
Our lawful basis is performance of a contract for the account data in section 4 — we cannot provide an account-based service without it — and your consent for the draft room contents in section 5, given by choosing to open or join a shared room. You can withdraw that consent by leaving the room, and you can end the contract by deleting your account.
If you are in California (CCPA / CPRA)
You have the right to know what personal information we collect and why, to request its deletion, to request correction of inaccurate information, and not to be discriminated against for exercising any of these rights.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We never have. The categories we collect are identifiers (email address, username, account ID) and internet or other electronic network activity (the draft and chat content you create). We do not collect any category of sensitive personal information.
12. International transfers
Account and draft room data is stored on Google's servers, which are primarily located in the United States. Google maintains its own safeguards for international data transfers, described in the Firebase and Google privacy policies linked in section 6.
13. Security
All communication between the app and the services in section 6 is encrypted in transit using HTTPS. Passwords are hashed and stored by Google, never by us. Access to the database requires a signed-in account, and server-side rules restrict what any account is allowed to read or write — your profile and draft list are readable only by you.
We would rather be straight with you than reassuring: while a league is unlocked, its room code is the only thing protecting it. Anyone signed in who has the code can open the room. Locking the league restricts access to the players already in it. No system is perfectly secure, and you should not store sensitive personal information in a draft room.
14. Changes to this policy
If we change this policy we will update the effective date at the top of this page. If a change materially affects how your information is handled, we will make that clear in the app as well. Continuing to use the app after a change means you accept the updated policy.