PRIVACY POLICY

Last updated: April 2026

1. Information We Collect

Account Information: When you sign in with Google, we collect your name, email address, and profile picture. When you link your Sleeper account, we store your Sleeper username and user ID.

League Data: We access your Sleeper league rosters, draft picks, and league settings via the public Sleeper API. This data is used to provide trade analysis and is cached temporarily for performance.

Usage Data: We track feature usage (which tools you use and how often) to improve the Service. We do not track individual trade decisions.

Payment Data: Payment processing is handled entirely by Stripe. We store transaction IDs and subscription status but never see or store your credit card information.

2. How We Use Your Information

  • To provide trade analysis and roster management features
  • To manage your account and subscription
  • To send transactional emails (welcome, subscription, cancellation)
  • To improve the Service based on usage patterns
  • To provide customer support

3. Data Sharing

We do not sell your personal information. We share data only with:

  • Stripe — for payment processing
  • SendGrid — for transactional emails
  • OpenAI — roster data is sent to generate AI recommendations (no personal info)
  • Google — for authentication

4. Cookies

We use a single httpOnly session cookie ("session_token") for authentication. We do not use advertising or tracking cookies. We store your preferences in browser localStorage.

5. Data Retention

Account data is retained as long as your account is active. League data is cached for up to 1 hour for performance. You can request deletion of your account and data by contacting us.

6. Data Security

We use industry-standard security measures including HTTPS encryption, secure httpOnly cookies, and server-side session management. Authentication is handled via Google OAuth — we never store passwords.

7. Your Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Cancel your subscription at any time

8. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy periodically. We will notify users of significant changes via email.

10. Contact

For privacy-related questions or data requests, contact derek@emerald.consulting.