Privacy

• We collect your email address and your league's history.
• We use it to build your league's analytics, and nothing else.
• We do not sell your data, run ads, or share your league with anyone outside it.
• You can ask us to delete everything, and we will.

• Your email address. It is how you sign in. There are no passwords.
• Permission to read your league. For Yahoo that is an access token you grant us. For ESPN it is the two session cookies your browser already holds. Sleeper needs no credentials at all. We never ask for your password on any platform.
• Your league’s history. Rosters, transactions, drafts, matchups, scoring settings, standings, and the team and display names of everyone in the league. We pull what the platform makes available, which is usually several seasons.

When you connect a league, we ingest the whole league, not just your team. That includes the rosters, moves, and team names of everyone else in it. A league is the unit of analysis, so there is no way to do this for one team alone.

Their data is used only for that league’s analytics, it is visible only to people with access to that league, and any of them can ask us to remove it.

To compute your league’s analytics and show them to you. That means scoring drafts, tracking waiver activity, measuring lineup decisions, and writing season recaps.

We also use league data in aggregate to test and improve the analysis, with names and identities stripped out, and we sometimes publish what we find. Those findings describe patterns across many leagues. They never name a person, a team, or a league.

• Yahoo, ESPN, and Sleeper. The source. We read from them and never write back.
• Anthropic. Writes the season recap narratives. It gets that season’s numbers and team names, never your email address or credentials.
• Resend. Sends your sign-in links. Sees your email address.
• Hetzner. The server the site runs on, in Germany.
• Backblaze. Encrypted nightly backups, deleted automatically after 30 days.

• Sell your data to third parties, or share it with data brokers or advertisers.
• Run ads or ad tracking.
• Share identified league data outside the league it came from.
• Use third-party analytics or tracking scripts.
• Change anything in your fantasy league. Access is read-only.

You can create a link that lets someone view one of your leagues without signing in. Anyone holding that link can see that league, so share it the way you would a house key. Creating a new link revokes the old one.

One cookie, and only once you sign in. It holds a random session identifier, cannot be read by JavaScript, and expires after 90 days. Signing out deletes it. There are no advertising or analytics cookies, so there is no cookie banner to click through.

Your platform credentials are encrypted before they are written to disk, using a key held only on the server. Sign-in links are single use, expire 15 minutes after we send them, and are stored hashed rather than in the clear.

Email hello@leaguenomics.com and ask. We will delete your account, your email address, your stored credentials, and the league data you connected, and confirm when it is done. You do not need to give a reason.

You can also revoke our access at any time from the platform itself. That stops future updates, but it does not delete what we already have.

Two caveats. Encrypted backups roll off on their own schedule, so a copy can persist for up to 30 days after deletion. And if a leaguemate has separately connected the same league, that league stays for them; we remove your account and your access, but we cannot delete a shared league out from under someone else.

This is not built for children, and we do not knowingly collect data from anyone under 13.

If this changes in a way that matters, we will update the date above and email you before the change takes effect.

Email hello@leaguenomics.com. A real person reads it. See also our terms of use.