Privacy Policy

1. What we collect

• Account info: the email address and password you sign up with. Your password is never stored in plain text — only a bcrypt hash of it.
• Username: the display name you choose. It identifies you inside the app, and publicly only if you opt in to the leaderboard.
• League connections: the Sleeper usernames and league IDs you add, and which team is yours in each league.
• ESPN cookies:if you connect a private ESPN league, the espn_s2/SWID cookie pair ESPN issues after you sign in, stored encrypted at rest. Your ESPN password itself is never stored — it's submitted directly to ESPN's own login page and never saved.
• Usage analytics:basic, aggregated page analytics via Vercel Analytics to understand how the app is used. This isn't tied to your fantasy football data.
• Verification and password-reset links: when you sign up or ask to reset your password, we generate a one-time link and email it to you. Only a hashed, single-use token is stored — never the link itself — and it expires automatically (24 hours for a verification link, 30 minutes for a password reset).

2. How we use it

Your data is used only to run the app: authenticating you, fetching your leagues' scores and rosters from Sleeper/ESPN on your behalf, and computing the cross-league analysis shown on your dashboard. We don't sell your data, and we don't use it for advertising.

3. Who we share it with

We don't share your account data with third parties, other than the infrastructure providers that run the app (hosting, database, and analytics providers) and Resend, which delivers the verification and password-reset emails described above — all of whom process your data only on our behalf to keep the app running. Requests to Sleeper and ESPN happen using your own connected credentials/cookies, the same way your browser would talk to them directly. The one thing that is ever published more widely is what you choose to publish yourself by opting in to the leaderboard, described in the next section.

4. Leaderboard (opt-in)

The app has an optional leaderboard. It is off by default. If you turn it on, your username and your win/loss record become visible to anyone who views the leaderboard, along with the players you are rooting for and against that week. Your email address is never shown. You can turn it back off at any time in Settings, which takes you off the leaderboard going forward. Pick a username you are comfortable showing publicly.

5. Cookies

We use one cookie to keep you signed in between visits — that's it. There are no advertising or third-party tracking cookies, and no cross-site tracking. Your ESPN espn_s2/SWID cookies (see above) aren't browser cookies at all; they're stored encrypted in our database and used server-side to talk to ESPN on your behalf. Because the only cookie we set is strictly necessary to run the app, there's nothing non-essential here to ask your consent for.

6. How long we keep it

We keep your data for as long as your account exists. Removing a single connected league or saved ESPN login deletes that specific data immediately. Deleting your account (available any time in Settings) permanently removes your account, every connected league, and every saved login — this can't be undone.

7. Security

Passwords are hashed with bcrypt. ESPN cookies are encrypted at rest. Verification and password-reset links use single-use, short-lived tokens, and we rate-limit login, signup, and password-reset attempts to reduce abuse. We use standard safeguards to protect your data, but no method of storage or transmission is 100% secure, and we can't guarantee absolute security.

8. Your choices

You can remove any connected league or saved ESPN login, or delete your account entirely, at any time from Settings — no need to contact anyone. You can also turn the leaderboard off whenever you like, which takes your username and stats back off it.

9. Changes to this policy

We may update this policy from time to time. Continued use of the app after a change means you accept the updated policy.

10. Related

See our Terms of Service for the rules that govern using the app.