Privacy Policy

The short version

League Advantage helps fantasy football commissioners run their leagues. We collect only what we need to make the product work: your email, your league memberships, and the activity inside those leagues (rosters, trades, waivers, messages). We don't sell your data, we don't run ads, and we don't share your information with third parties for marketing.

Who we are

League Advantage is operated by Chris Alves, an individual developer. Contact: hello@leagueadvantage.com.

Information we collect

Account information

• Email address — used to sign you in (magic-link or Apple Sign-In) and to send transactional emails (league invites, weekly digests, trade notifications).
• Authentication identifiers — Supabase user ID, Apple user identifier (if you sign in with Apple). We do not receive your Apple password.
• Push notification token — if you opt in on the mobile app, we store an Expo push token so we can deliver notifications to your device. You can revoke this at any time in the app's Settings or your device's notification settings.

League activity

• League data you create or import — team names, rosters, trades, waiver claims, FAB bids, draft picks, scoring rules, message board posts, polls, and commissioner adjustments.
• Player data — public NFL player statistics sourced from third-party providers (ESPN, nflverse, NFL Next Gen Stats). This is league-scope only; it does not identify you personally.

Automatically collected information

• Basic request logs — IP address, timestamps, requested URLs. Used for security, abuse prevention, and debugging. Retained for 30 days.
• Crash and error reports — anonymous diagnostic data from the mobile app when something breaks, used only to fix bugs.

We do not collect: precise location, contacts, photos, microphone, camera, advertising identifiers, or any data we don't have a clear product reason for.

How we use your information

• To operate the product (sign you in, show your leagues, deliver notifications)
• To send you transactional emails you've opted into
• To improve reliability and fix bugs
• To prevent abuse and unauthorized access

We do not use your data to train AI models or sell it to anyone.

How we share your information

We share data only with the service providers that make the product run, and only the minimum needed for them to do their job:

• Supabase — database and authentication hosting
• Vercel — web hosting
• Resend — transactional email delivery
• Apple Push Notification service / Expo — push notification delivery to iOS devices
• Hostinger — backend data sync jobs (NFL stats, news feeds)

We may also share information if required by law (subpoena, court order) or to protect the safety of users.

We do not sell your personal information to data brokers, advertisers, or anyone else.

Within your league

Your league members can see your team name, roster, trades, waiver claims, and messages you post to the league board — the same visibility you'd have in any fantasy football platform. Your email address is visible to commissioners of leagues you join (for invite and contact purposes) but not to other members by default.

League Central and the browser extension

If you use League Central, you can connect fantasy leagues you play in on other sites (such as CBS Sports, Yahoo, Sleeper or ESPN). The League Advantage browser extension reads a league only when you ask, from your own signed-in browser tab: the page you choose, or, when you import a league, that league's pages, such as its standings, matchups and team rosters. Nothing is added to your account until you select Save or explicitly start automatic updates. We store the league data you save — team names and logos, player names, positions, statistics, scores and projections, schedules, standings and headlines — to show it to you on League Advantage.

If you choose Keep this league updated for Yahoo football, Chrome asks for access to Yahoo football pages. After you confirm the league and LA account, the extension periodically opens a temporary background tab, reads that league and saves its current scores, standings and rosters. Your computer must be awake and Chrome running with your Yahoo sign-in. You can close the original tabs; updates resume when Chrome restarts. The extension stores a revocable LA connection credential on your device for these read-only saves. Stop updates in the extension or your League Central connections. If Yahoo signs you out, updates pause until you sign in again. This never changes your Yahoo lineup or sends Yahoo passwords or cookies to LA.

The older Start automatic updates and save flow for Yahoo football, and CBS basketball automatic updates, require the LA sync page and provider tab to stay open. Closing or reloading the sync page stops those sessions. CBS basketball asks for access to CBS basketball pages and may reload the Live Scoring tab if it stops updating. You can stop any automatic updates at any time; a save already sent may finish.

If you confirm a lineup change on League Advantage, the extension makes only the changes you confirmed, using your own sign-in on that site. To do this it may open your league there in a background tab and check the result afterward.

We do not collect your passwords for those sites; you sign in on their own pages. Before you save, reads stay in the extension's storage on your device, and you can clear them at any time. You can remove saved League Central data from League Central at any time. We do not sell this data or use it for advertising.

Data retention

• Account data — kept while your account is active. Deleted within 30 days of you closing your account (see "Your rights" below).
• League data — retained as long as the league exists. Historical seasons are kept indefinitely as part of the league's archive (this is a feature, not surveillance — commissioners use historical data for keepers, records, and award tracking).
• Request logs — 30 days.
• Backups — encrypted backups may persist for up to 30 days after deletion before being overwritten.

Your rights

You can, at any time:

• Access your data — every page in the app shows you what we have. Email us if you want a structured export.
• Correct your data — edit your profile and league settings in the app.
• Delete your account — go to Account → Delete account on web, or Settings → Delete account on mobile. This is irreversible. If you're a commissioner, you'll need to transfer commissioner rights first or your league will be archived.
• Withdraw consent — opt out of any email or push notification category in the app's preferences pages.
• Lodge a complaint — if you're in the EU/UK, with your local data protection authority. If you're in California, you have the rights described under CCPA and can contact us to exercise them.

Security

We use industry-standard practices: TLS encryption in transit, encrypted data at rest, role-based access controls in our database (Supabase Row Level Security), and minimal privileged access. No system is perfectly secure — if you discover a security issue, please report it to hello@leagueadvantage.com and we'll respond promptly.

Cookies and tracking

We use a single authentication cookie to keep you signed in. We do not use third-party analytics, advertising cookies, or cross-site tracking pixels.

Children

League Advantage is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with information, contact us and we'll delete it.

International users

Our servers are located in the United States. If you use League Advantage from outside the US, you consent to your data being processed in the US.

Changes to this policy

We may update this policy as the product evolves. We'll update the "Last updated" date at the top and, for material changes, send you an email notice. Continuing to use the product after a change means you accept the updated policy.

Contact

Questions, requests, or complaints: hello@leagueadvantage.com.