Privacy Policy

1. Information we collect

Account information. When you sign in, our authentication provider (Clerk) processes your email address, name, and, if you use a social login, the basic profile your chosen provider returns. We use this to create and secure your account.

Yahoo league connections. If you connect a Yahoo league, you grant read-only access through Yahoo’s official OAuth flow. We store the resulting access tokens (encrypted) and your choice of primary league. We do not store the league data itself: rosters, matchups, standings and scoring settings are requested from Yahoo when you open a page, and are not written to our database. We never see or store your Yahoo password.

ESPN and Fantrax league connections. These work differently, and the difference is worth stating plainly. For ESPN we store the league ID you provide and, for private leagues only, the espn_s2 and SWID cookies you supply (encrypted). For Fantrax we store the league ID you provide. For both, the league data those services return, such as rosters, ownership, standings and scoring settings, is synced into our database so the league-aware pages can run. We never see or store your ESPN or Fantrax password.

Content you submit. Your email address, if you join the mailing list.

Usage and device data. Like most sites, our hosting and analytics providers automatically receive your IP address, browser and device type, referring page, and the pages you view. We use privacy-focused product analytics (Vercel Analytics) to understand aggregate traffic and performance.

Cookies and local storage. We use a small number of cookies and browser storage entries for essential functions: keeping you signed in, and remembering preferences such as your selected league and which sidebar sections you left open. See section 5 for how to control these.

2. How we use your information

• Provide the Site’s features, including league-aware tools that need your connected roster.
• Authenticate you and keep your account secure.
• Send email to the mailing list, only if you opt in.
• Measure and improve performance and content in aggregate.
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your connected-league data for anything other than delivering the features you asked for.

3. Advertising

4. Service providers we share data with

We share data only with the providers needed to run the Site, each acting under its own privacy terms:

• Clerk, authentication and account management.
• Vercel, hosting, analytics and performance monitoring.
• Render, the application backend.
• Supabase, database and file storage.
• Yahoo, ESPN and Fantrax, only when you connect a league, and only through their official interfaces.
• Anthropic, used to draft article copy from our own data. Article drafts contain no personal or league-connected information, and nothing publishes without operator review.

We may also disclose information if required by law, to protect our rights, or in connection with a business transfer.

5. Your choices and controls

• Cookies. You can block or delete cookies in your browser settings. Essential features such as staying signed in may stop working if you do.
• Mailing list. Unsubscribe at any time using the opt-out link, or by emailing us.
• Disconnect a league. You can revoke Yahoo access in your Yahoo account settings, and remove an ESPN or Fantrax connection from the Connection tab inside any connected league.
• Account deletion. Email b.lands16@gmail.com and we will permanently delete your account, your stored league connections, and any stored credentials.

6. Your privacy rights (GDPR / UK GDPR / CCPA)

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to opt out of the “sale” or “sharing” of personal information. We do not sell personal information. To exercise any of these rights, email b.lands16@gmail.com and we will respond within the timeframe required by applicable law. You may also lodge a complaint with your local data-protection authority.

7. Data retention and security

We keep personal information only as long as needed to run the Site and for legitimate legal or operational purposes, then delete or anonymise it. OAuth tokens and any stored league cookies are encrypted at rest. We use reasonable technical and organisational measures to protect your data, but no method of transmission or storage is 100% secure.

8. Children

The Site is not directed to children under 13, or under 16 in the EU and UK, and we do not knowingly collect their personal information.

9. International users

The Site is operated from North America. If you access it from elsewhere, your information will be processed in the United States and other countries whose data-protection laws may differ from those where you live.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, a notice on the Site.

11. Contact

Questions or requests? Email b.lands16@gmail.com.