Privacy Policy
Kodiak GM waitlist · Effective October 12, 2026
This policy is a plain-English draft. It is not legal advice. Have a qualified attorney review it before you rely on it.
Kodiak GM is run by Jafa Media LLC ("we," "us"). This policy covers the waitlist at kodiakgm.com (the "Site"). Kodiak GM is a fantasy basketball tool that has not launched yet. Right now the Site only collects waitlist signups.
What we collect
What you give us
- Email address. Required to join. We store it in lowercase.
- League answers (optional). League type (Dynasty, Keeper, Redraft), scoring format (9-cat H2H, Points, Roto), platform (ESPN, Yahoo, Sleeper, Fantrax, Other), and how many leagues you play in.
- Price survey (optional). Four price answers ($0–$5,000) about what a season would be worth to you, and a 1–5 rating of how likely you are to buy.
- Feedback (optional). Anything you type in the open text box, up to 1,000 characters. Please don't include sensitive personal details.
- Emails you send us. If you reply to our emails (for example, with your league settings), we keep that message.
What we collect automatically
- Referral data. Your personal referral code, the code of the person who referred you (if any), and how many people joined with your link. The referral code from a link is saved in your browser's local storage until you sign up.
- Campaign data. UTM tags in the link you clicked (source, medium, campaign, content, term), which page version and headline you saw, and the referring web page. UTM tags are held in your browser's session storage until you sign up.
- Device and location data. Your browser's user-agent string and your country, worked out from your IP address by Cloudflare. We do not store your full IP address in our waitlist database.
- Bot-check data. Cloudflare Turnstile checks whether you are a real person. To do this, Cloudflare processes your IP address and browser signals. We send Cloudflare your IP address with the check token. See Cloudflare's Turnstile privacy addendum.
- Ad pixels. We use or plan to use the Meta Pixel and the TikTok Pixel. These tools can set cookies and send Meta and TikTok data such as your IP address, browser details, the pages you visit, and the fact that you signed up (a "Lead" event). We use this to measure our ads and to show ads to people likely to be interested.
We do not collect payment details, your fantasy league login, or precise location.
How we use it
- To add you to the waitlist, hold your spot, and work out your position and founding-member status.
- To send your confirmation email and launch updates, like founding pricing and early access.
- To credit referrals.
- To understand who the product is for and set pricing (league answers, survey, feedback).
- To measure which ads and pages work.
- To block spam, bots, and fake signups.
Who we share it with
We do not sell your personal information for money. We share it only with service providers who help us run the Site:
| Provider | What they do |
|---|---|
| Cloudflare | Hosts the Site (Pages), stores the waitlist database (D1), runs bot protection (Turnstile), and handles network traffic |
| Resend | Sends our emails |
| Meta (Facebook/Instagram) | Ad measurement and ad targeting via the Meta Pixel |
| TikTok | Ad measurement and ad targeting via the TikTok Pixel |
We may also share information if the law requires it, to protect our rights or users, or as part of a merger or sale of the business.
Ad pixels and your choices
Some US state laws, including California's, may treat ad-pixel data shared with Meta and TikTok for targeted ads as "sharing" (or, in some states, a "sale"). You can opt out:
- Global Privacy Control (GPC). Turn on GPC in your browser or extension. We treat a GPC signal as a request to opt out, and our ad pixels won't load for that browser.
- Email us at privacy@kodiakgm.com with the subject "Do Not Sell or Share."
- Block cookies. Block third-party cookies in your browser, or use an ad blocker.
- Platform settings. Change your ad settings in your Meta and TikTok accounts.
Your rights
Depending on where you live, including California under the CCPA/CPRA, you may have the right to:
- know what personal information we have about you and get a copy;
- correct it;
- delete it;
- opt out of the sale or sharing of your information, or of targeted advertising;
- limit the use of sensitive information (we don't collect any on purpose);
- not be treated differently for using these rights.
To make a request, email privacy@kodiakgm.com from the address you signed up with. We may need to confirm the request is yours. We'll reply within 45 days. You can also have an authorized agent make a request for you.
Deletion. If you ask us to delete your data, we remove your signup record from our database. Your referral link will stop working. Copies kept by our providers' backups or logs are deleted on their own schedules.
Unsubscribe. Reply "unsubscribe" to any of our emails, or email privacy@kodiakgm.com.
How long we keep it
We keep waitlist data until Kodiak GM launches and for up to 12 months afterward, or until you ask us to delete it, whichever comes first. After that, we delete it or keep only totals that can't identify you. Providers keep their own logs for limited periods under their own policies.
Children
The Site is not for children under 13, and we don't knowingly collect their information. If you think a child under 13 has signed up, email privacy@kodiakgm.com and we'll delete it.
Security
We use HTTPS, bot protection, and limited admin access to protect your data. No system is perfectly secure.
Where data is processed
We and our providers are based in the United States. Your data may be processed in the US and other countries where our providers operate.
Changes
If we update this policy, we'll change the date at the top. If the changes are significant, we'll email the waitlist.
Contact
Jafa Media LLC · privacy@kodiakgm.com · [Business mailing address]