Your data, plainly

The short version

• You can look up any public ESPN league without an account. Nothing about you is stored when you do.
• An account is just your email address. We email you a sign-in code. There is no password.
• You can bring your league's seasons in from ESPN, Yahoo, CBS, Sleeper, MyFantasyLeague, Fleaflicker or Fantrax. Your phone does the reading and sends us league data only, never a password or what keeps you signed in. Details below.
• The app never handles money. Pick'em entry fees and league dues are tracked, not paid through us.
• You can delete your account yourself, inside the app or on the web.

What we keep, and why

Only when you have an account, and only to run the features you use:

• Your email address, to sign you in and to match invites sent to it. A display name, if you set one.
• Your teams and roles: which ESPN team you hold in each league, and whether you are a commissioner or co-commissioner.
• What you do in a league: trade offers and how they were answered, trade-block listings, comments, NFL pick'em picks and entries, rule changes you make as a commissioner (including combining or hiding managers in league history), the name your team shows for its manager and whether its co-owners show, and league dues and prize records you are part of. Leaguemates in the same league can see the parts that are meant to be shared, such as which team is yours, your pick'em results and your trade offers to them.
• Leagues you bring in: the seasons you choose to bring in from another fantasy site, as the next section explains. They are kept with your account until you delete them.
• Trade ideas you share: when you share a trade as a card ("Would you do this?"), we keep the trade itself (the league, the teams and players, their prices and the app's verdict), with or without an account, to make the app's trade suggestions better. If you're signed in it is linked to you, and it goes when you delete your account.
• Trade profiles: what a manager's offers, answers and completed ESPN trades add up to (the positions they buy and sell, how often they answer) is shown to their leaguemates to suggest good trade partners. Single trade ideas and declined offers are never shown to anyone else.
• The trade calculator: each trade worked out in it is kept (the players, the league format you chose and the prices), with a random code for your phone or browser rather than your name, to improve player values. If you're signed in it is linked to your account, and it goes when you delete it.
• Reports and blocks: when you report something, we keep what was reported, why, and that you reported it, so we can review it. The person reported isn't told who reported them. When you block someone, we keep that, so their trade offers stop reaching you.
• Pick'em groups: the groups you start or join and the name you choose to show in each. Members of a group see each other's names, picks once they lock, and results.
• Payment handles (a Venmo, Cash App or PayPal name), only if you type one in, so the leaguemates who owe you can find you. We never see a card or bank number and we never move money.
• Invites: when a member invites someone by email, we keep that address with the invite, and use it to send the invite and matching reminders.
• Alerts: if you turn on trade alerts, your phone's push token and your alert settings.
• Team logos: when a signed-in member opens a league, we may copy that league's custom team logos from ESPN into our storage, so everyone in the league can see them. A logo you make in the app (a picture you pick from your phone, or one drawn for you) is uploaded to our storage as a public picture, so your league and your share cards can show it. It belongs to your team: it stays after you delete your account until you replace it, or you or the commissioner remove it.
• Punishment photos: if your league's punishment needs proof, the punished team's manager or a commissioner can add a photo from their phone. It is kept in private storage, not on the open web. Only members of that league can see it, through a link that stops working after an hour. Anyone in the league can report it to us or hide it on their own phone, and the team's manager, a commissioner or whoever added it can take it down. A new photo replaces the old one, and undoing the punishment deletes it. It stays with the league's record after you delete your account, until one of them takes it down.

League rosters, scores and history come from ESPN's public data, and player prices are worked out by us from that data. That is league data, not personal data about you.

Your ESPN sign-in

To open a private league, the app can show you ESPN's own sign-in page. When you finish, the app keeps ESPN's sign-in cookies in your phone's secure storage and sends them with your requests, so our server can read your private league from ESPN for you. The server uses them for that one request. It does not store or log them. Signing out of ESPN in the app, or deleting your account, removes them from your phone. We never see your ESPN password.

Signing in to LeagueLeverage with your ESPN account isn't open yet. When it opens, so we know it's you next time, we keep a scrambled code made from your ESPN member ID with a secret key only our server has. Without that key the code can't be turned back into your ESPN ID or matched to your ESPN account. We still never keep your ESPN sign-in cookies or your password.

Bringing in your league's history

With an account, you can bring a league's seasons into LeagueLeverage from ESPN, Yahoo, CBS, Sleeper, MyFantasyLeague, Fleaflicker and Fantrax. Those are the sites' names, used here only to say where a league comes from.

• Your phone does the reading, and only when you ask. You pick a league and its seasons and tap to start. For ESPN, Yahoo and CBS you sign in on the site's own page inside the app, and your phone reads what you can already see there, as you. For Sleeper, MyFantasyLeague, Fleaflicker and Fantrax your phone reads the site's public data, with no sign-in. Our servers never ask any of these sites for an import.
• One more time we look: for an ESPN league you brought in on this phone, the app checks it quietly while you are signed in to LeagueLeverage, at most every six hours (a private league also needs your ESPN sign-in), and sends the season being played: the whole season the first time, once week 1 is over, then the new weeks at later looks, and a finished season once. It looks only when you open the app or come back to it. It reads nothing else on its own.
• What your phone sends us is league data: the league's settings and scoring, its teams, their names and their logos or pictures (links to the site's own images), the names of the managers as the site shows them, scores and standings, the draft, trades and pickups, and, from ESPN, each week's lineups. Your phone trims each answer down to the fields we use before it sends. It never sends your password or what keeps you signed in (ESPN's espn_s2 cookie, or another site's sign-in cookies and tokens), and nothing about your account on that site beyond the league. Your ID on the site is part of the league data, as below. If you find your Fleaflicker leagues by email, or your Sleeper leagues by username, that goes only to that site.
• Managers are kept as scrambled codes. Each manager's ID on the site arrives inside the league data (yours too). Our server turns it into a code at once, with a secret key only our server has, the same way as the ESPN member ID above, and keeps only the code. The same person gets the same code in every season, and the code can't be turned back into the ID. We keep no readable copy of the ID. Fantrax doesn't give a manager's ID, so there we match a manager from season to season by team name. MyFantasyLeague doesn't show who owns a team, so there a manager is the team itself. CBS names only today's owners, so past seasons show each team with whoever has it now. The names themselves (league, team and manager) are kept as plain text with the season, until it is deleted.
• Who sees a season you brought in: for an ESPN league, you, and other members of that league who have claimed a team in LeagueLeverage, but only if you also hold a team in it or are its commissioner or a co-commissioner. It says "Brought in from ESPN by" and your display name, if you set one. For the other six sites, only you, with one exception: you can link your own import from another site to an ESPN league as another stretch of its history. If you are that league's commissioner or a co-commissioner, members who have claimed a team in it, and its other commissioners, then see those seasons too, with team and manager names and your display name. If you aren't, only you see the link. You can also link two of your own imports from other sites into one league; only you see that. Nobody else sees them.
• Deleting it: you can delete what you brought in whenever you like, from the league's History in the app. For an ESPN league, its commissioner or a co-commissioner can also delete all of that league's imported seasons. If you delete it, we remove your league's names and keep the scores and settings without them, to make LeagueLeverage better. The league's name, team names, manager names, logos, manager codes and who brought it in all go, and the seasons stop showing in the app. A link between eras is not part of that: the link itself (the league ids on each site, the manager matches you confirmed and the name you gave it) stays until you remove the link in the app or delete your account.
• The anonymous copy: what stays is the scores, standings, settings, drafts, moves and lineups, with teams as plain numbers, under a random code that isn't the league's ID. Nothing in it names the league or anyone in it. We use it only ourselves, to test and improve LeagueLeverage. It is never shown in the app, and the app can't reach it; only we can read it.
• Deleting your account deletes every season you brought in the same way (the names go, and the anonymous copy stays) and every link between eras you made.

Things that stay on your phone

• If you pick a screenshot so the app can read your league ID, the reading happens on your phone. The picture is not uploaded.
• When you sign in to Yahoo or CBS to bring a league in, the sign-in stays in the app's own browser on your phone. The app never reads it or sends it to us. Signing in to ESPN works as described under "Your ESPN sign-in" above, and bringing a league in never sends it to us.
• Share cards (rivalry cards, trophies) are drawn on your phone and go only where you choose to share them.

Who else handles data

We use a few services to run the app. Each receives only what its job needs:

• Supabase hosts our database, sign-in and server functions.
• Resend sends the sign-in code and invite emails.
• Expo delivers app updates and push notifications. Google (Firebase Cloud Messaging) and Apple carry notifications to Android and iPhone.
• Cloudflare hosts leagueleverage.com and sees ordinary web-request details such as your IP address. The website loads its fonts from Google Fonts.
• ESPN supplies league data; our server asks it for a league by its ID. To bring a league in, your phone reads these sites (ESPN, Yahoo, CBS, Sleeper, MyFantasyLeague, Fleaflicker, Fantrax) itself; our server doesn't contact them for it. nflverse supplies player stats and usage; our server downloads its public lists, and sends nothing about you. Player prices are our own, worked out from those.

We do not sell or rent your data, and we do not use it for advertising. We may share it if the law requires.

What we don't collect

No location, contacts, camera, microphone or advertising ID. The app has no ads and no analytics or tracking software.

How long we keep it, and deleting it

Account data stays until you delete your account. You can do that any time from Account → Delete my account in the app or at leagueleverage.com/app; the delete-account page explains what goes and what stays. In short: your sign-in, teams, picks, payment handles and alert settings are deleted, open trade offers are cancelled, your comments are emptied, and league stats stay because they are ESPN's data and belong to the league. Seasons you brought in from another site are deleted too; only an anonymous copy stays, as explained above.

Our hosting providers keep short-lived technical logs (for a few days). One list is kept on purpose: an address that asked us to stop emailing it stays on a do-not-email list, so a later invite doesn't reach it again.

Your choices

Besides deleting your account, you can turn off trade alerts in the app (Account → Notifications), sign out of ESPN in the app, and ask us for a copy of what we hold or a correction by emailing support@leagueleverage.com from the address you signed in with.

Children

LeagueLeverage is not made for children under 13, and we don't knowingly collect their information. If you think a child has an account, email us and we will delete it.

Changes and contact

If this policy changes in a way that matters, we will update the date above and, for a real change in what we collect, tell signed-in users in the app. Questions: support@leagueleverage.com.