Privacy Policy

• Account information: Email address, name, and password (or authentication via Google OAuth).
• Fantasy platform credentials: ESPN session cookies (SWID, espn_s2) or Yahoo OAuth tokens used to access your fantasy league data. Sleeper uses a public API and requires only your username. Platform credentials are stored encrypted at rest and are never returned in API responses.
• League data: Auction draft results, league settings, team and manager names, and related statistics imported from ESPN, Yahoo, and Sleeper.
• Content you create: Custom player rankings you upload, strategies, target and avoid tags, position notes, and valuation inputs you save in your workspace.

• Device and browser information:Your browser’s user-agent string (browser type, operating system, and device type) is logged when you log in, along with a timestamp, to help us understand how the Service is accessed and to support account security.
• Basic analytics: Anonymized, aggregate usage data collected via Vercel Analytics (e.g., page views, device type). No personal information or individual browsing behavior is tracked.

We use minimal cookies, primarily for authentication and to maintain your session, and we cache data locally in your browser to improve performance. These are essential for the Service to function. You can disable cookies in your browser settings, but this may affect your ability to use the Service.

We do NOT collect or track:

• IP addresses for storage (IP addresses are processed in memory for rate-limiting purposes, and may be processed by our error- monitoring provider for diagnostics, but are not retained by us).
• Detailed individual browsing behavior or usage analytics beyond aggregate page views.
• Tracking cookies for advertising purposes.
• Location data.

• ESPN and Yahoo: To retrieve your fantasy league data via their APIs using the credentials you provide.
• Sleeper: To retrieve your fantasy league data via its public API (username only, no credentials).

• Railway: Cloud hosting (United States) for our database and backend services.
• Vercel: Hosting (United States) for our website and frontend.
• Vercel Analytics: Basic website analytics (device type and aggregate page views only, no personal tracking).
• Sentry: Error-monitoring service that captures application errors and exceptions to help us diagnose and fix issues. Sentry may collect technical information such as stack traces, browser type, and IP addresses solely for error-reporting purposes.
• Stripe: Payment processing (United States) for subscription billing. Stripe receives your payment information directly — we do not store credit-card numbers.
• Brevo: Email service provider for transactional emails.

These providers are bound by data-protection obligations and may use your information only to provide services to us.

We incorporate player rankings and projections from FantasyPros and player-identity and bye-week data from nflverse. These are inbound data sources — we do not send your personal information to them. See our Data Sources page for details.

We may disclose your information if required by law or in response to valid legal requests (subpoenas, court orders, etc.).

Your data is stored on servers in the United States.

• Active accounts: We retain your data while your account is active.
• Deleted accounts: When you delete your account, your personal data is permanently removed from our database. Data may persist briefly in automated backups before being rotated out.

We implement reasonable security measures to protect your information, including encrypted connections (HTTPS/SSL), encryption of platform credentials at rest, and industry-standard authentication and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

You may authorize another person or entity to submit requests on your behalf where permitted by law. We may require verification of the agent’s authority.