Privacy Policy

The short version

We don't sell or share your data, and there are no analytics or trackers. Signed out, everything the extension and this site handle stays in your browser. Two optional things put data on our servers, both under your control: creating an account stores your email and the things you save (teams, notes, boards), and connecting your ESPN account stores an encrypted copy of your ESPN sign-in so we can read your leagues for you. Both are described below.

What the extension does

The extension's draft overlay runs on ESPN and Sleeper fantasy football draft-room pages. It reads your draft's league settings, live picks and your own draft queue — the same data ESPN or Sleeper already sends to your browser — and forwards them to the draft board so players are marked as drafted automatically. Requests to ESPN's API are made from your own browser session, so your existing login is used without the extension copying it; Sleeper's data comes from its public API. To tell your picks from everyone else's it reads one identifier of your own: ESPN's SWID cookie, or your Sleeper user id. Both are used locally and never leave your browser; leaguemates' identities and your Sleeper login token are never read. Your ESPN password is never read either, and the ESPN sign-in cookie is read only when you click “Connect ESPN account” on this site, as described in the next section — never on its own.

The overlay can be switched off in the extension's toolbar menu; that setting is kept in the extension's own storage, which your browser may sync between your devices as it does for any extension.

ESPN account sync (optional)

League Sync can read your ESPN leagues for you — private leagues included — so you can import every league you're in at once and re-sync rosters from any device. To do that, when you click “Connect ESPN account” while signed in to this site, the extension reads the two cookies ESPN uses to keep you signed in (SWID and espn_s2) from your browser and hands them to this site, which sends them to our server over an encrypted connection. Nothing is read until you click, and nothing else is read: no password, no other sites' cookies.

On our server the cookies are encrypted with a key that is not stored in the database, then saved against your account. They are used for exactly one thing: making requests to ESPN's fantasy API on your behalf, the same requests your browser makes when you open your league on espn.com, to list your leagues and read their settings, rosters and scores. They are never shown to you, never used to change anything on ESPN, and never shared with anyone. ESPN expires them on its own after a period, at which point sync stops until you reconnect. Click “Disconnect” in the league dialog at any time to delete them immediately; deleting your account deletes them too.

Where your data lives

Draft state (picks, league settings, your board markings) is stored locally in your browser — in the extension's local storage and the site's localStorage — so a page reload doesn't lose your draft. It is never sent to our servers. Signed out, the same goes for everything else on the site: saved teams, notes and custom boards live only on that device. Clearing the site's browser data removes its local copies; removing the extension removes its separate local storage. Signed in, the items listed under Accounts are mirrored to your account so they follow you between devices.

Cookies & browser storage

We use browser storage to keep you signed in, preserve your draft progress and saved work, and remember your settings. We don't use advertising cookies, analytics trackers, or browser storage to track you across websites.

Local storage (localStorage) holds your sign-in session, draft picks and settings, saved teams, custom boards, draft strategies, and interface preferences, including whether you've seen the introduction. It also caches team images to avoid downloading them repeatedly. These entries have no fixed expiry and can remain between visits until you clear them, the site updates or removes them, or your browser removes them. Signing out removes the locally stored sign-in session. Player notes use session storage (sessionStorage), which lasts for the tab's session and is normally cleared when you close it; notes saved to your account remain available when you sign in again.

The extension keeps its own settings and draft data in browser extension storage. Its use of ESPN cookies is described under “What the extension does” and “ESPN account sync” above. Connecting ESPN is optional and starts only when you choose to connect it.

You can clear this site's stored data in your browser's site settings. Doing so can sign you out and remove draft progress, preferences, and work saved only on this device. Blocking browser storage may prevent sign-in and saving from working. Clearing browser data does not delete your account, its saved items, or the ESPN connection stored on our server; use Disconnect for ESPN or the account deletion process described below to remove those.

Accounts

Accounts are optional — everything above works without one. If you sign up, your email address and password are handled by Supabase, our authentication provider (the password is stored only as a hash, and we never see it). They are used solely for signing you in and unlocking account-gated rankings. Your signed-in session stays in your browser; the extension relays it between the site and its draft-room overlay panel so you only sign in once, and signing out signs out every instance.

While signed in, the things you save are stored against your account so they follow you between devices: your saved teams (the players and lineup slots, plus, for a synced team, which platform and league it came from, your team id there, and the league and team names), your player notes, your custom rankings board, your saved draft strategies, and — if you connect it — the ESPN sign-in described above. We don't store live scores, stats, or your leaguemates' rosters; those are fetched fresh each time you look. To delete your account and everything tied to it, use “Request Account Deletion” in account settings, which emails us the request, or write to support@fantasyforge.gg.

Third parties

The extension communicates with ESPN and Sleeper (to read your draft, using your existing ESPN session or Sleeper's public API) and with this site (to display your board, and to hand over your ESPN cookies if you connect your ESPN account). The site is hosted on Vercel, which keeps standard server logs, and reads league data from ESPN and Sleeper on your behalf — with your ESPN cookies if you connected them, anonymously otherwise. If you create an account, Supabase processes your sign-in and stores your account data, including any connected ESPN cookies in encrypted form. The stats and projections shown on the site come from sports-data providers that receive nothing about you. No other third party receives anything. This project is not affiliated with or endorsed by ESPN or Sleeper.

Changes & contact

If this policy changes, the effective date above will be updated. Questions and deletion requests go to support@fantasyforge.gg, or through the extension's Chrome Web Store or App Store listing.