Privacy notice

Who we are

Punt Engine is based in Malta. The data controller for the waitlist, and for the order details Stripe shares with us when you buy the Draft Kit, is Robert Loporto, trading as Punt Engine, who decides how your data is used. Send questions or requests to the Punt Engine team at [email protected].

What we collect and why

We collect only the email address you give us, the time you signed up, and the fact that you signed up on this page. We use your address to send you the free top 100, news about the Draft Kit (including when it went on sale) and an occasional draft-strategy newsletter. The legal basis is your consent, which you confirm through the link in our first email.

Who handles it for us

Our email provider, MailerLite, stores the list and sends the emails on our behalf under a data processing agreement. MailerLite is based in Lithuania and keeps the list in data centres in the EU. If one of its own providers handles your address outside the EU, that agreement requires the safeguards GDPR sets for the transfer. We don't sell your address or share it with anyone else.

If you buy the Draft Kit

Stripe sells the kit to you through Link, its checkout, and handles your payment details under its own privacy policy (stripe.com/privacy). Stripe shares your name, email address, country and order with us so we can deliver the kit and answer questions about it; the legal basis is our contract with you. We see them in our Stripe account, don't copy them anywhere else, and don't add you to the newsletter. Your download page checks your order with Stripe each time you open it.

To send you the link to your download page, we pass your email address to Resend, which sends that one email for us under a data processing agreement. Resend is based in the United States, and that agreement requires the safeguards GDPR sets for the transfer. It keeps a log of the email it sent, which we use only to check that it arrived.

The draft room beta

Your beta key and your drafts stay in your browser's storage on your device. To rank your next pick, the draft room sends your league settings and the picks made so far to our draft engine, which answers and doesn't store them. Like any web server, the engine's log records the time, the address asked for and your IP address.

Site statistics

We count visits with Cloudflare Web Analytics, which uses no cookies and doesn't identify you or follow you to other sites. It records the page, the site that sent you, and your browser, device type and country, and we see only totals. Cloudflare also delivers this site, under its data processing agreement.

How long we keep it

We keep your address until you unsubscribe or ask us to delete it. If you never confirm it, we delete it within 30 days.

Your rights

You can unsubscribe with the link in any email, and you can ask to see, correct or delete your data at any time. You can also complain to Malta's data protection authority, the Information and Data Protection Commissioner, at idpc.org.mt.

Cookies

This site sets no tracking or advertising cookies. The draft room's key and drafts are in your browser's local storage, and clearing your site data removes them.