The short version

We store what an account needs to work and nothing else. We do not sell your data, we do not run advertising, and there is no third-party analytics or tracking on this site. You can download everything we hold about you, or delete all of it, from Settings, without asking us.

What we store

If you create an account:

• Email address — to sign you in and to send password resets
• Username — shown on the site
• Password — stored only as a one-way hash. We cannot read it, and neither can anyone who obtained the database.
• Google account identifier — only if you sign in with Google, and only the opaque ID Google issues for this site. We never receive your Google password.
• Profile picture — only if you upload one
• Your Sleeper username and the IDs of leagues you sync — so League Manager can show your rosters. We do not change anything on Sleeper.
• Your preferences — scoring format, rankings defaults, theme and primary colour
• Your Start/Bench/Cut votes — which feed the community rankings
• When the account was created

We do not store your IP address, your location, a device fingerprint, or any advertising identifier.

Cookies

One cookie, used to keep you signed in. It is marked Secure, HttpOnly and SameSite=Lax, which means it is only ever sent over HTTPS, cannot be read by scripts, and is not sent from other sites. There are no advertising or analytics cookies. Your theme choice is stored in your browser’s local storage so pages render in the right colours before they load; that never leaves your device.

Who else is involved

• Render — hosts the site and the database
• Google — only if you choose to sign in with Google
• Resend — sends password-reset and account emails
• Sleeper, ESPN and FantasyCalc — we read football data from them. We do not send them anything about you.

Player photographs and team logos shown on this site are loaded directly from Sleeper’s and ESPN’s servers. Those requests come from your browser, so those companies can see that a request was made, the same as any image on any website.

Your rights

Whoever and wherever you are, not only where the law requires it:

• See it — download everything we hold about you, as a file
• Correct it — change your username, email, picture and settings yourself
• Delete it — delete your account. It is immediate and permanent. Your Start/Bench/Cut votes remain in the community rankings with the link to you removed, so they no longer identify you; that is stated plainly on the deletion screen before you confirm.
• Stop the emails — every email we send has an unsubscribe link, and the setting is in Settings. Password resets are not marketing and are always sent.

Children

This site is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will delete it.

Changes

If this policy changes in a way that affects what we collect or who we share it with, we will say so on this page and update the date above.

Contact

Questions about any of this: get in touch.