Privacy Policy
Last updated: August 27, 2026
This Privacy Policy describes how RosterSpy (“RosterSpy,” “we,” “us”) collects, uses, and protects your information when you use the RosterSpy application. This is a template; sections marked [Placeholder] require final legal or business information before publication.
1. Information We Collect
- Account information: your name, email address, and authentication details you provide when you register or sign in.
- Fantasy platform data: identifiers and league data we retrieve from connected platforms (for example, your Sleeper username, user ID, and league IDs) when you choose to connect them.
- Usage & preferences: your RosterSpy preferences, notification settings, default league, saved analyses, and how you interact with the app.
2. How We Use Information
- To provide, personalize, and improve league-specific fantasy analysis.
- To restore your account, connected leagues, and preferences when you return.
- To communicate with you about your account, subscription, and product updates.
3. Fantasy Platform Connections
For platforms that use OAuth, RosterSpy stores connection identifiers and, where required, refresh tokens server-side only. We never expose client secrets, access tokens, or refresh tokens to the browser or frontend code. For Sleeper, which uses a public API, we store your Sleeper username and user ID.
4. Third-Party Services
RosterSpy integrates with third-party fantasy platforms such as Sleeper. We may also use infrastructure, analytics, and billing providers. These providers process data under their own terms. RosterSpy is not necessarily affiliated with, endorsed by, or sponsored by Sleeper, Yahoo, ESPN, or the NFL.
5. Data Retention
We retain your account data for as long as your account is active. Dynamic fantasy data (rosters, scores, standings) is refreshed from the source platform and cached for performance. You can request deletion of your RosterSpy data at any time. [Placeholder: specific retention periods]
6. Security
We use reasonable administrative, technical, and physical safeguards. Record ownership is enforced server-side; one user cannot access another user's private records by manipulating URLs, IDs, or requests. No system is perfectly secure, however.
7. Your Rights
- Access & export: download your RosterSpy data from Profile → Data & Privacy.
- Manage connections: connect or disconnect fantasy platforms at any time.
- Delete: permanently delete your RosterSpy account data from Profile → Data & Privacy.
8. Account Deletion
Deleting your RosterSpy account removes your profile, connected leagues, preferences, saved analyses, notification settings, and platform connection data. This action cannot be undone.
9. Children's Privacy
RosterSpy is not directed to children under 13 (or the applicable minimum age in your jurisdiction) and we do not knowingly collect their information.
10. Changes to This Policy
We may update this Policy. We will indicate the “Last updated” date above. Material changes will be communicated through the app.
11. Contact
Questions about this Policy or your data: [Placeholder: contact email/address]