PRIVACY POLICY

• Account info. Your email and a user ID, via our authentication provider (Clerk).
• League connections. The fantasy leagues you connect and which team is yours.
• Platform credentials. The tokens needed to read your leagues: Yahoo OAuth tokens, your Sleeper username, and (for private ESPN leagues) ESPN session cookies/tokens. These are stored encrypted at rest and used only to fetch your own league data.
• League data. Matchups, rosters, standings, and scores for the leagues you connect.
• Usage analytics. The website (not the extension) uses Google Analytics to understand how the product is used: pages visited, device type, and approximate location. This involves analytics cookies. Analytics data is aggregated and is never tied to your league credentials.

The optional League Blitz browser extension exists for one purpose: to connect your private ESPN leagues. When you use it, it reads your ESPN session cookies from your own browser and uses them to fetch your league data, which it sends to your League Blitz account over an authenticated, signed request. It does not read data from any non-ESPN, non-League Blitz site, it does not track your browsing, and it does not collect anything unrelated to syncing your fantasy leagues.

• To display your leagues, matchups, rosters, and rankings.
• To generate AI matchup and roster analysis you request.
• To keep your connected leagues refreshed.

We do not sell your data, and we do not share it with third parties except the infrastructure providers that run the service (e.g. hosting, storage, authentication, and the AI provider that powers analysis) acting on our behalf.

Your connections and credentials are kept until you disconnect a league or delete your account. Disconnecting a league removes its stored credentials. To delete your account and associated data, contact us at the email below.

Sensitive credentials (Yahoo tokens, ESPN cookies/tokens) are encrypted at rest. Extension sync requests are authenticated with short-lived signed tokens. No system is perfectly secure, but we take reasonable measures to protect your information.

Questions or deletion requests: leagueblitz@celticwinter.com.