PRIVACY POLICY

Last updated October 23, 2026

This Privacy Policy explains what Colts Neck Interactive LLC, doing business as DEVY WAR ("we," "us," or "our"), collects and stores when you use www.devywar.com and the DEVY WAR subscription service (the "Services"), why, who else receives it, how long we keep it, and what you can do about it. It describes what the Services actually do today. Questions: support@devywar.com.

SUMMARY OF KEY POINTS

• Your account: your email address, sign-in details, subscription status, and the settings and notes you create.
• Your leagues: when you connect a MyFantasyLeague (MFL), Sleeper or FFPC league, we store that league's settings and scoring, and the team names and rosters of every team in it, which all members of that league who use DEVY WAR can see.
• Sleeper trade counts: to show which players are being traded, we read completed trades from Sleeper dynasty leagues that our users' league-mates belong to, including leagues with no DEVY WAR user. We store league ids and names, the Sleeper user id we reached each league through, and which players were traded. We do not store those managers' names. We only show these trades as counts.
• Payments are handled by Stripe. We never see or store your card number.
• Analytics and error monitoring: we use Google Analytics (cookies only if you accept) and Sentry (error reports), and our host keeps request logs.
• We do not sell your personal information and do not use it for advertising.
• You can delete your account yourself at /account. Some shared league data and records held by our service providers remain after deletion.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE USE YOUR INFORMATION?
3. WHO RECEIVES YOUR INFORMATION?
4. COOKIES, BROWSER STORAGE AND SIMILAR TECHNOLOGIES
5. YOUTUBE VIDEOS
6. HOW LONG DO WE KEEP YOUR INFORMATION, AND WHAT HAPPENS WHEN YOU DELETE YOUR ACCOUNT?
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
8. WHERE IS YOUR INFORMATION STORED?
9. CHILDREN
10. YOUR CHOICES AND RIGHTS
11. UNITED STATES PRIVACY RIGHTS
12. DO-NOT-TRACK
13. CHANGES TO THIS POLICY
14. CONTACT US

1. WHAT INFORMATION DO WE COLLECT?

Information you give us

• Account details. Your email address and password (stored by our authentication provider only as a one-way hash). A display name, which is the first part of your email address unless you choose one. If you sign up with an invite or promo code, the code; if you tell us how you heard about us, that answer.
• Google or Discord sign-in. If you sign in with Google or Discord, we receive from that provider your email address, name, profile picture link, and your account identifier with that provider.
• League connections. The league you connect: its platform and league id, the MFL server or FFPC team link you provide, the season, and which team is yours. For Sleeper, the Sleeper username you type is sent from your browser straight to Sleeper; we store only the Sleeper user id that Sleeper returns.
• What you create. Playbook team notes, your own draft-capital views for college prospects, draft-board entries and manually entered picks, your choices of projection set and settings, and requests to add a player (we store the player, league and team names you request with your email address).
• Messages. Feedback you send through the in-app widget and emails you send to support. These are delivered by email; we do not keep them in our database.
• Payments. When you subscribe, Stripe collects your payment details on its own checkout page. We receive and store your Stripe customer and subscription ids, your plan, its status and the end of the current billing period. A Stripe customer record with your email is created when you click Subscribe, even if you do not finish paying.

Information we get from fantasy platforms

• Your connected leagues. From MyFantasyLeague, Sleeper and FFPC we copy the league's settings and scoring rules, and the team names and rosters of every team in the league (on Sleeper a team name may be a manager's display name), plus draft picks, draft results and trades. Other managers' names and emails are not stored, but a team name chosen by a manager may itself be a real name. We refresh this data regularly.
• Sleeper trade counts. Starting from the Sleeper accounts of our users, we look up the public dynasty leagues their league-mates belong to on Sleeper, and read the completed trades in those leagues. For those leagues we store the league id, name, size and season, the Sleeper user id through which we found the league, and for each trade the trade id, the date, and the ids, names and positions of the players traded. We do not store managers' names or emails for these leagues, and we show this data only as totals (for example, how often a player was traded in the last 30 days).

Information collected automatically

• Usage analytics. Google Analytics records the pages you view (including the page address), the device and browser, how you arrived, and actions such as starting signup, viewing the paywall, connecting a league or sending feedback. When you are signed in, these events are linked to your DEVY WAR account id. We also store your Google Analytics client id on your profile so that purchases and redemptions recorded by our server are attributed to the same visitor. See section 4.
• Error reports. When something fails, Sentry receives a technical report about it. A report can include your IP address, your account id, your browser, the page, the request that failed with its headers, cookies and content, and recent activity before the error.
• Server and sign-in logs. Our host (Vercel) and our database and authentication provider (Supabase) keep logs of requests and sign-ins, including IP addresses and browser details.
• Abuse limits. For a short time we hold your IP address in memory to limit repeated requests to some features (redeeming codes, player requests, feedback).

We do not collect precise location. Our providers may estimate a general location from your IP address.

Public sports information

The Services are built on information about professional and college football players, such as statistics, birth dates, draft details, rosters, injury reports and published mock drafts with their authors. This is information about public figures in their public roles, not information about you.

Sensitive information

We do not ask for or knowingly process sensitive personal information.

2. HOW DO WE USE YOUR INFORMATION?

• To run the Services: sign you in, compute values for your leagues, keep your leagues and rosters up to date, and show you and your league-mates the league views.
• To manage your subscription and access, including invite and promo codes.
• To email you about your account: confirmation, sign-in links, password resets, email changes, a welcome email, and, if you sign up but do not start a subscription, one reminder email. You can ask us to stop the reminder by replying to it or writing to support.
• To answer feedback and support requests and to add requested players.
• To understand how the Services are used and how people find us, and to fix errors.
• To show aggregate trade activity, such as the most traded players.
• To prevent abuse and fraud, enforce our Terms of Service, and meet legal obligations.

The account owner can view account and subscription details (for example email, signup date, how you heard about us, subscription status and last sign-in) to run and support the business. Developer tools we use, including AI coding assistants, may process limited account data when we investigate a problem.

3. WHO RECEIVES YOUR INFORMATION?

We do not sell your personal information, and we do not share it for advertising. Service providers that process data for us:

We exchange league data with MyFantasyLeague, Sleeper and FFPC to import and sync the leagues you connect. Your Sleeper username lookup goes from your browser directly to Sleeper.

Other members of your leagues who use DEVY WAR see the same league views you do, including every team's name and roster. They do not see your notes, settings or account details.

Public demo. The public demo at /rankings?demo=1 uses a fixed copy of a real league's rosters with the team names replaced.

We may also disclose information if the law requires it, to protect rights and safety, or as part of a sale or merger of the business.

4. COOKIES, BROWSER STORAGE AND SIMILAR TECHNOLOGIES

• Sign-in cookies (set by our authentication provider) keep you signed in. They are necessary for the Services to work.
• Google Analytics. The Google Analytics script loads on every page. Until you choose Accept on our cookie banner it sets no cookies, though it may still send Google cookieless measurement signals. If you accept, it sets Google Analytics cookies. Separately from the banner, our server reports some events to Google Analytics with your account id: subscribing, cancelling, redeeming a code, the reminder email, and deleting your account.
• Browser storage. We keep some information in your browser's local and session storage: your cookie choice, how you arrived at the site (campaign tags), your last league, projection set and display settings, and temporary copies of pages you viewed. Session storage clears when you close the tab or sign in as someone else.
• Embedded content. Player pages can load YouTube videos and website icons from Google, which receive your IP address and browser details when they load.

Your cookie choice is stored in your browser. To change it, clear this site's data in your browser and choose again, or write to support.

5. YOUTUBE VIDEOS

Player pages use YouTube API Services to find and show videos. When a video loads, YouTube and Google receive information from your browser under the Google Privacy Policy, and use of those videos is subject to the YouTube Terms of Service. We send YouTube only the player's name to search. We keep the results (video titles and links) and refresh them when the player's page is viewed again after a week.

6. HOW LONG DO WE KEEP YOUR INFORMATION, AND WHAT HAPPENS WHEN YOU DELETE YOUR ACCOUNT?

We keep your account information while you have an account. If you never subscribe, your account stays until you delete it.

You can delete your account at /account. Deleting it cancels any subscription and removes your sign-in, profile, your connections to leagues, your own roster records, notes, draft-capital views and manual picks. Some information remains after deletion:

• Shared league data: the settings, scoring, team names and rosters of leagues you connected stay with the league, including your team, and if no other DEVY WAR user is in the league they are kept until we remove them. The league record can keep the Sleeper user id or FFPC team link you connected with.
• Player requests you sent keep your email address.
• Our providers' records: Stripe keeps its customer and payment records as payment and tax rules require; Resend, Google Analytics, Sentry, Vercel and Supabase keep logs, reports and backups for their own retention periods; support and feedback emails remain in our support inbox.

Sleeper trade data from leagues without a DEVY WAR user (see section 1) is kept indefinitely; we display only trades from the last 30 days. If you want a league or your Sleeper user id removed, write to support.

To have remaining information removed, write to support and we will delete what we can.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

Data is sent over encrypted connections. Access to account data in our database is restricted so that each user can read only their own account information, and administrative access is limited to the owner. No system is perfectly secure, so we cannot guarantee that information will never be accessed without permission.

8. WHERE IS YOUR INFORMATION STORED?

Our database is in the United States, and our providers process data mainly in the United States. If you use the Services from outside the United States, your information is transferred to and processed in the United States.

9. CHILDREN

The Services are for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, write to support and we will delete it.

10. YOUR CHOICES AND RIGHTS

• Delete your account yourself at /account.
• Remove a league from your account on the Connect page. This removes your connection and your roster records for it; if you were the league's only DEVY WAR user, the league's data is deleted too.
• Manage your subscription through the billing portal at /account.
• Analytics cookies: decline on the banner, or clear this site's data to choose again.
• Emails: account emails (sign-in, confirmation, billing) are needed to run your account. Ask us to stop the reminder email at any time.
• Access, correction and deletion: write to support@devywar.com to get a copy of your information, correct it (for example, change your email), or delete what remains. We will verify the request comes from the account's email address.

11. UNITED STATES PRIVACY RIGHTS

Depending on your state, you may have the right to know what personal information we collect and how we use and disclose it, to get a copy of it, to correct it, to delete it, and to opt out of its sale, of targeted advertising and of profiling. We do not sell personal information, do not use it for targeted advertising, and do not use it for profiling that produces legal or similarly significant effects. We honor access, correction and deletion requests from any user, wherever you live. You will not be treated differently for using these rights.

In the last 12 months we have collected these categories of personal information: identifiers (email address, account and platform ids, IP address); customer records (name and email, subscription details); commercial information (subscription plan and status); internet activity (pages viewed and actions in the Services); and how you heard about us, if you tell us. Sources are you, your browser, the sign-in and fantasy platforms you connect, Stripe, and Sleeper (for trade counts). Purposes and recipients are described in sections 2 and 3.

To make a request, write to support@devywar.com. An authorized agent may act for you with your written permission. If we decline a request, you may appeal by replying to our answer; if we still decline, you may contact your state attorney general.

California "Shine the Light." We do not disclose personal information to third parties for their own direct marketing.

12. DO-NOT-TRACK

There is no common standard for browser Do-Not-Track signals, and the Services do not respond to them. Use the cookie banner to decline analytics cookies.

13. CHANGES TO THIS POLICY

We will update this policy when what we collect or how we use it changes, and change the date at the top. For significant changes we will tell users by email or in the Services.

14. CONTACT US

Colts Neck Interactive LLC
142 Cedar Dr
Colts Neck, NJ 07722
United States
support@devywar.com