Privacy Policy

1. Information we collect

We collect the following information:

• Account information: the email address you sign up with, and a salted, hashed version of your password. We never store your password in plain text.
• Sleeper username: if you choose to sync a league, the Sleeper username you provide and league data returned by Sleeper’s public API (league name, size, and roster information).
• Usage data: which tools you use and how often (for example, daily trade-analyzer and start/sit usage), used to enforce free-tier limits and to improve the Service.
• Payment data: if you subscribe to Pro, our payment processor Stripe collects and stores your payment card details directly. We receive and store only a Stripe customer/subscription identifier and your subscription status — we do not receive or store your full card number.
• Cookies: a single session cookie used to keep you logged in (see Section 4).

2. How we use information

We use the information above to:

• Create and maintain your account and authenticate you when you log in;
• Provide the Service’s features, including league sync, trade tools, and personalized recommendations;
• Enforce free-tier usage limits and process subscription upgrades and billing;
• Communicate with you about your account, billing, or changes to the Service;
• Maintain the security and integrity of the Service.

We do not sell your personal information to third parties.

3. Third-party services

We share limited information with the following third-party service providers, solely to operate the Service:

• Stripe — payment processing. Stripe’s handling of your payment data is governed by Stripe’s own privacy policy.
• Sleeper — if you choose to sync a league, we query Sleeper’s public API using the username you provide.
• Vercel / Neon — hosting and database infrastructure used to run the Service and store account data securely.

We may also disclose information if required by law or to protect our rights, users, or the public.

4. Cookies

We use a single, essential session cookie to keep you logged in. It is signed and does not contain your password. It is not used for advertising or cross-site tracking, and we do not currently use third-party analytics or advertising cookies.

5. Data retention

We retain your account information for as long as your account is active. If you request deletion of your account, we will delete or anonymize your personal information within a reasonable time, except where we are required to retain certain records (for example, billing records) for legal or tax purposes.

6. Your rights

You may access, correct, or delete your account information at any time. To request a copy of your data, request corrections, or request deletion of your account, email support@gridiron-edge.app from the email address associated with your account. We will respond within a reasonable time.

7. Data security

We use industry-standard measures to protect your information, including password hashing with per-user salts, signed session cookies, and encrypted connections (HTTPS/TLS) between your browser and our servers, and between our servers and our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us information, contact us at the email below.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you by email or through the Service.

10. Contact

Questions about this Privacy Policy or your data can be sent to support@gridiron-edge.app.