Privacy Policy

Last updated: September 22, 2026

Draft Assist ("we", "us") is a browser extension that overlays draft-decision data on Underdog Fantasy and DraftKings best ball drafts. This policy explains what we collect and how we use it.

Information we collect

• Account information — the email address and password you use to create an account. Passwords are stored only in hashed form by our authentication provider; we never see your plain-text password.
• Subscription status — whether your account is active, and an expiry date if applicable.
• A device session identifier — used to enforce one active sign-in at a time.

Data that stays on your device

To show your exposures and overlay, the extension reads your Underdog session token and your own draft data from your browser. On DraftKings it reads the state of the draft you have open — the player pool, the picks made, your queue, your own saved player rankings and your entries — using your existing signed-in session on that site. This information is stored only on your device (in the browser's local extension storage) and is not transmitted to us, with the two exceptions described next. Removing the extension or clearing its data deletes it.

The extension only runs on Underdog and DraftKings pages. It does not read any other site, and it does not track your browsing.

Draft recap

When you ask for a draft recap on a completed draft, the extension sends that draft's identifier, the players on that roster, and figures calculated from them (positional counts, draft capital, ADP value, pick slot, and whether the draft was fast or slow) to our server. The server compares them against a pool of past teams and returns the closest match, which is what the recap shows.

We do not store any of it. It is used to build your recap and then discarded — we keep no record of your roster. This happens only when you request a recap, and nothing else about the page or your browsing is included.

DraftKings average draft position (ADP)

DraftKings publishes an average draft position for each player to signed-in users, but does not publish a history of it. To show how a player's ADP has moved, we keep that history ourselves.

It is collected from a small number of designated collector accounts, not from users generally. Before sending anything, an extension asks our server whether this account is a collector. If the answer is no — which it is for everyone except the accounts we have designated — the extension never transmits a snapshot at all, not even once to be refused.

When a collector account does send one, the message contains only the DraftKings player IDs, the public average draft position for each, and the identifier of the contest group those figures came from. It contains no roster, no queue, no entry, no pick, no account identifier and nothing about the person sending it. Two different collectors submitting at the same moment would produce identical data.

The resulting series — one reading per day, covering roughly the last month — is served back to subscribers so the extension can show whether a player is rising or falling. It describes the market, not any individual, and it is the same for every user who reads it.

How we use your information

• To create and authenticate your account.
• To provide and restrict access to paid features.
• To send account emails (confirmation, password reset).
• To notify us when a new account is created, so we can activate access.
• To prevent account sharing (one active device at a time).

Service providers we use

We share the minimum necessary data with providers that operate the service on our behalf:

• Supabase — authentication and subscriber records (email + subscription status).
• Cloudflare — hosts the service that delivers projections, rankings and the ADP history to paid users, and stores the ADP snapshots described above.
• Google (Gmail) — delivers account emails.
• Resend — delivers a "new signup" notification to us (contains the new account's email).

We do not sell your personal information, and we do not share it for advertising.

Data retention

We keep your account information for as long as your account exists. You can request deletion at any time by emailing us. Data stored locally on your device is removed when you uninstall the extension or clear its storage. Draft recap requests are not retained at all — they are processed and discarded, so there is nothing to delete. ADP snapshots are retained as a market history; they contain no personal information, so there is nothing in them to identify or delete.

Your rights

You may request access to, correction of, or deletion of your account data by contacting us at the email below.

Security

All data in transit is encrypted over HTTPS, and access to account records is authenticated and restricted.

Age

Draft Assist is intended for adults of legal age to participate in fantasy sports in their jurisdiction (18+, or older where required). It is not directed at children.

Not affiliated with Underdog or DraftKings

Draft Assist is an independent tool and is not affiliated with, endorsed by, or sponsored by Underdog Fantasy, DraftKings or the NBA.

Changes

We may update this policy; we will revise the "Last updated" date above. Continued use after changes means you accept the updated policy.

Questions? Contact draft.assist.overlay@gmail.com