Privacy Policy

Last updated: June 26, 2026

1. Introduction

CDL Career Mode ("CDL Career Mode," "the Service," "we," "our," or "us") is an independent, fan-made esports management simulator available at cdlsimulator.com and as a desktop application. The Service is operated by an individual based in Canada.

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over it. By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

2. Information We Collect

Account information

If you create an account, we collect your email address and an encrypted password (or, if you sign in with Google or Discord, the basic profile information those providers share with us, such as your email address and name). You may optionally add a username, avatar image, bio, and a favourite team to your profile. Authentication is provided by Supabase.

Cloud save data

If you sign in and use cloud saves, your career and player save files (game progress and related in-game data) are stored on our servers (hosted by Supabase) so you can sync them across devices. Each account may store a limited number of cloud saves.

Local game data

Whether or not you have an account, the Service stores game progress, saves, and preferences locally in your browser (using localStorage and IndexedDB) or on your device in the desktop app. This local data stays on your device and is not transmitted to us unless you choose to use cloud saves.

Donation information

The Service is free. If you choose to make an optional donation, the payment is processed by Stripe. We do not collect or store your full payment card details. Stripe provides us with limited information such as your donation amount, billing country, and the last four digits of your card for support and record-keeping purposes.

Usage and analytics data

We collect anonymous or aggregated usage data such as page views, approximate location (country level), device and browser type, and performance metrics. This is collected through Vercel Analytics, Vercel Speed Insights, and Cloudflare Web Analytics.

Cookies and advertising

We use cookies and similar technologies that are necessary to keep you signed in and to remember your preferences. We may display advertisements through Google AdSense, which may use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising via Google Ads Settings.

3. How We Use Your Information

  • To create and manage your account and authenticate you when you sign in
  • To store, sync, and restore your cloud saves across devices
  • To process voluntary donations
  • To operate, maintain, and improve the Service
  • To understand usage through anonymous analytics
  • To display advertisements
  • To respond to your support requests and communicate important account or service notices
  • To detect, prevent, and address fraud, abuse, security, or technical issues
  • To comply with our legal obligations

4. Legal Bases for Processing

Where the GDPR or similar laws apply, we process your personal data on the following bases: to perform our contract with you (providing your account and cloud saves); your consent (for example, advertising and non-essential cookies, which you may withdraw at any time); our legitimate interests (securing and improving the Service); and to comply with the law.

5. Third-Party Services

We share data only as needed to run the Service. We do not sell your personal data. We rely on the following providers (each with their own privacy policy):

  • Supabase: account authentication and database/cloud save storage. Privacy Policy
  • Stripe: donation payment processing. Privacy Policy
  • Vercel: hosting, analytics, and performance monitoring. Privacy Policy
  • Cloudflare: privacy-friendly web analytics. Privacy Policy
  • Google AdSense: advertising. Privacy Policy
  • Google and Discord: optional sign-in (OAuth) providers, used only if you choose them.

6. International Data Transfers

We are based in Canada, and our service providers may process and store data in Canada, the United States, the European Union, and other countries. Where data is transferred internationally, our providers rely on recognized safeguards (such as Standard Contractual Clauses) to protect it.

7. Data Retention

We keep your account information and cloud saves for as long as your account is active. If you delete your account, we will delete or anonymize your personal data and cloud saves within a reasonable period, except where we are required to retain certain records (for example, payment records) to comply with legal, tax, or accounting obligations. Anonymous analytics data may be retained indefinitely.

8. Your Privacy Rights

Depending on where you live (including under Canada's PIPEDA, the EU/UK GDPR, and the California CCPA), you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your account and associated personal data
  • Export your data (your cloud and local saves can be exported from within the game)
  • Object to or restrict certain processing, and withdraw consent
  • Opt out of personalized advertising
  • Lodge a complaint with your local data protection authority

You can manage much of your data directly: update your profile in account settings, export saves in the game, opt out of ads via Google's settings, and clear local data through your browser. To exercise any other right, or to request account deletion, contact us at [email protected]. We will not discriminate against you for exercising these rights.

9. Security

We use reputable providers and reasonable technical and organizational measures (such as encryption in transit and access controls) to protect your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password and keep your credentials confidential.

10. Children's Privacy

The Service is not intended for children under 13 years of age, and you must be at least 13 to create an account. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date above. If we make material changes, we will take reasonable steps to notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, contact us at [email protected] or on X (Twitter) @shariqssk.