Back to game

    Privacy Policy

    Last updated: September 2026

    0. Who Is Responsible for Your Data

    Dream Draft XI (dreamdraftxi.com) is operated by Jasper Van Hyfte, who acts as the data controller for the personal data described in this policy. You can reach the controller at luggage.2tilde@icloud.com.

    1. What We Collect

    When you sign in with Google or Apple, we receive your name, email address, and profile picture. We use this only to create and manage your account.

    We also store your in-game data: team names, coin balance, achievements, streaks, and collection progress, plus basic technical data such as device type and IP address for security and analytics.

    2. Legal Basis for Processing (GDPR)

    We process your data under the following legal bases:

    • Consent — when you sign in with a social provider, you consent to sharing your profile data with us.
    • Contract — processing necessary to provide you the game service (e.g., storing your progress).
    • Legitimate interest — improving the game experience and preventing abuse.

    3. Local Storage & Cookies

    We use your browser's local storage to save game preferences (language, sound settings) and session data.

    3a. Advertising (Google AdSense)

    Dream Draft XI displays ads served by Google AdSense. Google and its partners may use cookies and similar technologies to serve ads based on your prior visits to this or other websites. You can opt out of personalized advertising by visiting Google Ads Settings, or opt out of a third-party vendor's use of cookies for personalized advertising by visiting aboutads.info.

    Google's use of advertising cookies enables it and its partners to serve ads to users based on their visits to this site and/or other sites on the Internet. For more information, see Google's Advertising policies.

    4. Virtual Currency

    Coins earned in Dream Draft XI are virtual items with no real-world monetary value. Coin balances and purchase history are stored securely in our database.

    5. Data Sharing

    We do not sell or rent your personal data. We share data only with the categories of recipients needed to operate the game:

    • Service providers — cloud hosting, database, and analytics providers that process data on our behalf.
    • Merchant of Record (Paddle) — when you buy a coin pack or bundle, our reseller Paddle.com processes the sale, payments, tax compliance, and invoicing. Paddle handles your payment details directly; we only receive confirmation of your purchase, not your card data.
    • Advertising partner (Google AdSense) — as described in section 3a, Google may use cookies to serve ads.
    • Professional advisers and authorities — where required by law (legal, accounting, or regulatory requests).

    Where data is transferred outside the UK/EEA, it is protected by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

    6. Data Security

    Your data is stored securely with encryption in transit and at rest. Access is protected by row-level security policies.

    7. Data Retention

    We retain your data for as long as your account exists. When you delete your account, all personal data is permanently and immediately erased from our systems, including your profile, coins, achievements, collections, streaks, and purchase history. This action is irreversible.

    8. Your Rights (GDPR / CCPA)

    You have the right to:

    • Access — request a copy of the personal data we hold about you.
    • Rectification — request correction of inaccurate data.
    • Erasure ("Right to be Forgotten") — delete your account and all data instantly via the in-app delete button (trash icon in the top bar when logged in).
    • Data portability — request your data in a machine-readable format.
    • Withdraw consent — at any time by deleting your account.
    • Lodge a complaint — with your local data protection authority if you believe your rights have been violated.

    9. How to Delete Your Account

    You can delete your account at any time directly from the game:

    1. Log in to your account.
    2. On the main menu, tap the trash icon (🗑️) next to the logout button.
    3. Confirm the deletion in the dialog that appears.

    All data is deleted immediately and permanently. There is no recovery period.

    10. Children's Privacy

    Dream Draft XI is designed to be family-friendly. We do not knowingly collect data from children under 13 without parental consent. If you believe a child has provided us with personal data, please contact us.

    11. Changes to This Policy

    We may update this policy from time to time. Material changes will be communicated via an in-app notice. Continued use of the game after changes constitutes acceptance.

    12. Contact

    For any privacy-related questions, data requests, or to exercise your rights, please contact us at luggage.2tilde@icloud.com.