Privacy Policy

We collect the following categories of information:

• Email address — provided when you create an account via Supabase Auth.
• Fantasy league data — synced from Sleeper via their public API. This includes manager display names, league scores, matchup results, roster compositions, and transaction history.
• Payment information — processed and stored entirely by Stripe, Inc. The League Roast never receives or stores your card number or full payment details.
• Usage data — basic information about which The League Roast features you use, used to improve the service.

• Credit card numbers or full payment credentials (Stripe handles these)
• Social Security numbers or government-issued IDs
• Real names — The League Roast only stores display names from your Sleeper profile
• Location data beyond what your browser may send in standard HTTP requests

We use your information to:

• Operate and maintain The League Roast and its features
• Generate roast content, analytics, and other AI-powered commentary for your league
• Process subscription payments via Stripe
• Send transactional emails such as subscription renewal reminders

We will never:

• Sell your personal data to third parties
• Use your data to train AI models
• Share your data with advertisers

The League Roast relies on the following third-party services:

• Stripe — payment processing. Your payment data is governed by the Stripe Privacy Policy.
• Supabase — database and authentication hosting. Data is governed by the Supabase Privacy Policy.
• Sleeper — fantasy sports data source. The League Roast reads from Sleeper's public API to sync your league data. We do not share data back to Sleeper.
• AI providers (Anthropic / OpenAI) — to generate roast content and AI-powered league commentary, we send fantasy sports data (scores, rosters, transactions) to these services. We do not send personal contact information or payment data.

• Active account: Your data is retained for as long as your account exists.
• Deleted account: All personal data is deleted within 30 days of account deletion.
• Stripe records: Your Stripe customer record is deleted via the Stripe API when you delete your account.
• League data: All synced league data (rosters, matchups, transactions) is permanently deleted on account deletion or available for anonymization upon request.

Depending on your location, you may have the following rights:

• Right to access — you can request a copy of the data we hold about you.
• Right to deletion — you can delete your account and all associated data at any time via Account Settings › Delete Account.
• Right to export — data export is coming soon.
• California residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of sale of personal information (we do not sell personal information).
• EU/EEA residents (GDPR): You have the right to access, rectify, erase, restrict processing of, and port your personal data. You may also object to processing and lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at privacy@theleagueroast.com.

• Essential cookies only — The League Roast uses a session cookie managed by Supabase Auth to keep you logged in. This cookie is required for the service to function.
• We do not use advertising cookies or tracking pixels.
• We do not use third-party analytics cookies (such as Google Analytics).

If we make material changes to this Privacy Policy, we will notify you by email at least 30 days before the changes take effect. Continued use of The League Roast after the effective date constitutes acceptance of the updated policy.

For privacy-related questions or requests, email us at privacy@theleagueroast.com.