Privacy Policy

We collect the following categories of information:

• Email address — provided when you create an account via Supabase Auth.
• Fantasy league data — synced from Sleeper via their public API, or from ESPN when a league's commissioner has made it viewable to the public, or past seasons downloaded with a league member's one-time ESPN login (not stored). This includes manager display names, team names, league scores, matchup results, roster compositions, and transaction history.
• Payment information — processed and stored entirely by Stripe, Inc. The League Roast never receives or stores your card number or full payment details.
• Usage data — basic information about which The League Roast features you use, used to improve the service.

• Credit card numbers or full payment credentials (Stripe handles these)
• Social Security numbers or government-issued IDs
• Real names — The League Roast only stores display names and team names. ESPN shows managers’ real names on public leagues; we discard them when we read the league and never store them.
• Location data beyond what your browser may send in standard HTTP requests

We use your information to:

• Operate and maintain The League Roast and its features
• Generate roast content, analytics, and other AI-powered commentary for your league
• Process league pass payments via Stripe
• Send account emails, such as sign-up confirmation and password resets. Stripe may also email you a receipt when you buy a league pass.

We will never:

• Sell your personal data to third parties
• Use your data to train our own AI models
• Share your data with advertisers

The AI providers listed in Section 4 handle the league data we send them under their own API terms.

The League Roast relies on the following third-party services:

• Stripe — payment processing. Your payment data is governed by the Stripe Privacy Policy.
• Supabase — database and authentication hosting. Data is governed by the Supabase Privacy Policy.
• Sleeper — fantasy sports data source. The League Roast reads from Sleeper's public API to sync your league data. We do not share data back to Sleeper.
• ESPN — fantasy sports data source. For the current season we read ESPN's public league pages when a commissioner has made the league viewable. To show past seasons, a league member may paste their ESPN login cookies once: they are used only to download that league's history during that one request and are then discarded — never stored, logged, or shared. Members' real names are removed before anything is saved. We do not share data back to ESPN.
• AI providers (DeepSeek and Google Gemini) — to generate roast content and AI-powered league commentary, we send fantasy sports data (scores, rosters, transactions, and the Sleeper or ESPN display names and team names in your league) to DeepSeek's API, with Google's Gemini API as a fallback. We do not send email addresses or other contact information, or payment data.
• Vercel — hosts the website. Like any web host, Vercel processes the standard request data your browser sends (such as IP address and browser type) to serve pages. Governed by the Vercel Privacy Policy.
• Klipy — powers the GIF picker in league letters. Your GIF search text is sent to Klipy from our servers (not tied to your account); the GIF images themselves load directly from Klipy's servers, so Klipy receives the standard request data your browser sends when displaying them. We do not send your email address or account details.

• Active account: Your data is retained for as long as your account exists.
• Deleted account: Deleting your account removes your email address, login, profile, league memberships, and purchase records. If deletion through Account Settings does not complete, email us and we will finish it within 30 days.
• Stripe records: We ask Stripe to delete your Stripe customer record when you delete your account. Stripe may keep transaction records it is required to keep by law.
• League data: Synced league data (rosters, matchups, transactions, display names, and team names) belongs to the whole league, so it stays after you delete your account and the league's other members keep their access. You can ask us to anonymize your display name and team name in it.

Depending on your location, you may have the following rights:

• Right to access — you can request a copy of the data we hold about you.
• Right to deletion — you can delete your account at any time via Account Settings › Delete Account (see Section 5 for what that removes).
• California residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of sale of personal information (we do not sell personal information).
• EU/EEA residents (GDPR): You have the right to access, rectify, erase, restrict processing of, and port your personal data. You may also object to processing and lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at privacy@theleagueroast.com.

• Essential cookies only — The League Roast uses a session cookie managed by Supabase Auth to keep you logged in. This cookie is required for the service to function.
• We do not use advertising cookies or tracking pixels.
• We do not use third-party analytics cookies (such as Google Analytics).

The League Roast is for adults. You must be at least 18 years old to create an account, and the service is not directed to children. We do not knowingly collect personal information from anyone under 13. If we learn that we have, or that an account belongs to anyone under 18, we will delete that account and its data. If you believe a child has given us personal information, contact us using the details in Section 10.

If we change this Privacy Policy, we will post the new version on this page and update the “Last updated” date above. Continued use of The League Roast after a change constitutes acceptance of the updated policy.

For privacy-related questions or requests, email us at privacy@theleagueroast.com.