Privacy policy

Effective November 1, 2026. This policy describes information handled by Leaguefolio at leaguefolio.app. Leaguefolio is an independent fantasy football project. For questions or requests concerning your information, use our contact form.

Information you provide and connect

You can explore public guides without an account. When you enter a Sleeper username, we retrieve public profile, league, roster, matchup, draft, and transaction information to provide your dashboard. We store your selected username and cached league information in browser storage. If you create an account or sign in with Google, our authentication provider, Supabase, handles sign-in and we use account information such as your email, user ID, and profile to save preferences and connect your data across visits.

Optional features can store league tags, notes, fee records, imported best ball data, and other information you choose to save. Connecting Sleeper write access uses a separate connection so requested lineup and trade actions can be sent to Sleeper. Do not send credentials through the contact form.

Usage information and browser storage

We record page views, link clicks, feature use, timestamps, session identifiers, referral and campaign information, and browser viewport information to understand usage and diagnose problems. These events may be associated with your Leaguefolio account or the Sleeper account you select. Local storage and session storage retain preferences, authentication sessions, cached league data, and analytics identifiers. Hosting and service providers also receive technical request information, such as IP addresses and browser information, to deliver and protect the service.

Services that process information

Cloudflare hosts this site. Supabase provides authentication, database storage, and server functions. Sleeper supplies league data and receives actions you explicitly request through connected features. Google provides optional sign-in and web fonts. Features using a CAPTCHA may send browser information to hCaptcha. Donations open Buy Me a Coffee, which handles its own payment flow.

When you request AI features such as roster commentary, waiver analysis, or trade screenshot analysis, the relevant roster information, prompt, or uploaded image is sent for processing through Google's Gemini service. Avoid uploading information you do not want processed for that purpose. Support messages are stored in our database and may be sent to the operator through Resend email notifications.

Google advertising and your choices

Leaguefolio has applied to Google AdSense. Ad serving is currently disabled while approval and implementation are pending. If enabled, third-party vendors, including Google, may use cookies to serve ads based on prior visits to this website or other websites. Google's advertising cookies enable Google and its partners to serve ads based on visits across the Internet. Third parties may place or read cookies, use web beacons, or process IP addresses and other identifiers for ad delivery, measurement, and personalization.

You can manage Google's personalized advertising through My Ad Center and learn how Google uses information from partner sites. Other participating vendors offer choices through YourAdChoices. Where an advertising consent message is shown, use its controls to accept, reject, or manage the available purposes and vendors. These choices do not remove browser storage needed for account access or the site's own usage records.

Public research and external links

Our public transaction research uses Sleeper data. Published snapshots include player names, trade assets, dates, selected league settings, and aggregate statistics. Manager names and direct league, account, and transaction identifiers are omitted from those snapshots, although a distinctive trade may still be recognizable. Links to other websites are governed by those websites' policies.

Retention and requests

Browser data remains until it expires, is replaced, or is cleared using your browser's site-data controls. Clearing it can sign you out and remove locally saved preferences or imports; it does not delete server records. Account, feedback, and usage records do not currently have a single fixed automatic deletion schedule. Contact us to request access, correction, or deletion of information associated with you. Include a reply address and enough non-sensitive context to identify the request; we may need to verify account ownership before acting. Records needed for security, resolving disputes, or legal obligations may need to be retained.

Changes to this policy

We will update this page when our practices change and revise the effective date. Check it before connecting a new service or using a new feature.