DraftLab helps you review College Football dynasty players and create experimental Madden draft projections. You can use many features as a guest, without an account.
If you choose to sign in with Google, we receive your Google account's stable identifier, verified email address, and basic profile information (name and optional picture). We use this information only to create and protect your DraftLab account. We do not ask for your Gmail, Drive files, Google password, or other Google account content.
When you explicitly open or create a cloud workspace, we store its player roster, captured and manually entered player attributes, selected draft year, projection settings, and private scouting decisions in a Cloudflare D1 database linked to your account. You control when to save an existing guest workspace to the cloud. Your data is not made public by signing in. Separately, if you explicitly publish an online league board, its chosen roster and league information can be viewed by anyone with the share link.
Capture Lab processes screenshots and MP4 recordings in your browser with an OCR library. DraftLab's server does not receive or store those raw recordings or images through Capture Lab. The browser now automatically saves pending Capture Lab reviews, corrected stats, approvals, OCR text, and potentially small preview crops in browser-local storage (IndexedDB and/or localStorage) so that a refresh or crash does not erase your work. The original screenshot or MP4 is not automatically backed up. This local recovery data is not included in your private Google cloud workspace and will not sync to another device. You can download or restore a review backup. Before replacing a pending review, DraftLab tries to save up to four older restore points on this device, separated by guest or signed-in workspace. Restore points may contain player details, corrected values and OCR evidence but not the original video or screenshot. Use Clear restore points to delete previous snapshots; Discard pending review deletes only the current active review. Both types of local data are removed if you clear site storage. You can also clear the site's browser storage; doing so may delete guest rosters. Confirmed player data may be saved to your cloud workspace when cloud saving is active.
Guest workspaces are stored in this browser's local storage. Google sign-in uses short-lived, secure, HttpOnly cookies for OAuth state and account sessions. The service retains server-side hashes of session secrets rather than storing raw session tokens. We are preparing optional Google AdSense advertisements on public guide pages. No DraftLab ad units display until the advertising feature is configured and enabled. If enabled, Google and its advertising partners may use cookies or similar technologies for advertising, measurement, and fraud prevention, subject to consent requirements and applicable law. DraftLab does not place ad units inside Capture Lab or private account screens. DraftLab does not currently offer premium billing.
The site uses Cloudflare Workers and D1 for hosting and account data. Google processes authentication. Authorized signed-in requests are required to read or change private cloud data. Account data remains until you delete your account, subject to any temporary infrastructure logs, security processing, or backups maintained by service providers according to their retention practices.
If you use the optional beta feedback form, we send your message and any image attachment through our email delivery provider, Resend, to the development inbox. You may optionally enter a name or reply email address. These details are not published on the website. Attached screenshots are not stored in the DraftLab roster database, but the email provider and recipient mailbox may retain messages and attachments according to their retention policies. The form uses Cloudflare Turnstile anti-spam verification and hashed, short-lived submission counters. Avoid including passwords, access codes or sensitive information in screenshots.
If advertising is enabled, Google AdSense may process browser identifiers and data to show or measure advertising. Where required, a Google-certified consent management platform will be provided before ads can run. See Google advertising technologies for further information. You can use browser privacy controls and the consent choices made available on the website.
You may continue as a guest, export a Dynasty Archive, sign out, or use Delete my DraftLab account in the account popout. Account deletion removes your account and private cloud workspace from the live database. Public league publication and commissioner keys operate separately and are not automatically deleted with a personal account. For requests involving public league data, contact the site operator.
This notice may change if DraftLab adds features such as team collaboration, paid subscriptions, or analytics. Beta feedback can be submitted using the Feedback button in the app. A separate dedicated privacy contact method should be added for formal data/privacy requests.