Privacy Policy
Last updated: July 10, 2026
1. What we collect
- Email address: for magic-link sign-in, and in MashDraft so you can save a guest team. No passwords are ever stored.
- Gameplay data: your groups, teams, drafts, lineups, scores, and history. Team and player identity in the product is generated or fact-based; we store no real-world profile about you beyond your email.
- Content you write: team and group names, chat messages, award names and notes. Visible to your group (or publicly, only on share pages you or your commissioner create).
- Push subscriptions: if you enable notifications, the browser endpoint needed to deliver them. Never your contacts or location.
- Anonymous guest accounts: MashDraft creates an anonymous account (a random id) until you choose to add your email.
2. Cookies and local storage
We use cookies and browser storage for what the product needs to work: your sign-in session, your preferences (dismissed banners, install prompts, notification choices), and a random anonymous analytics id. We do not use advertising cookies and we do not sell data.
3. Analytics
We measure product usage (pages viewed, drafts completed, features used) to improve the game. Events carry a random anonymous id and never your email or account id. We honor your browser's Do Not Track setting, and you can opt out here at any time:
4. Notifications
Web-push notifications are opt-in, per category, and can be disabled any time in Notification Settings. Unsubscribing removes the stored endpoint.
5. Who can see what
Your gameplay is visible to your group. Public share pages (draft boards, recaps, season cards) show generated team names and gameplay facts only, never emails or account ids. Moderators (Give Yourself Three LLCapp admins) can review reported content and act on it; moderation actions are logged.
6. Where your data lives
Data is stored with our infrastructure providers (Supabase for the database and authentication, Vercel for hosting). We do not sell or rent personal data. Sports statistics come from licensed or lawful data feeds and are facts about public sporting events, not about you.
7. Retention and deletion (your rights)
We keep your data while your account is active. You can request deletion of your account and associated personal data at any time by emailing mr@mronlinemarketing.com with the subject "Delete my account" from the email address on the account. We will confirm and complete the deletion within 30 days. Group gameplay history may be retained in de-identified form (your entries become "A manager"). Residents of the EU/EEA, UK, and California have rights of access, correction, deletion, and portability; use the same contact to exercise them.
8. Children
Weekly Mashup is not directed to children under 13 and we do not knowingly collect their data. If you believe a child under 13 has an account, contact mr@mronlinemarketing.com and we will delete it.
9. Changes and contact
We will post changes to this policy here and update the date above. Controller: Give Yourself Three LLC, State of Florida. Contact: mr@mronlinemarketing.com. See also the Terms of Service.