Privacy Policy

Last updated: March 3, 2026

1. Information We Collect

We collect information you provide directly when you create an account and use our service:

  • Account information: name, email address, and hashed password.
  • Platform credentials: ESPN cookies (SWID and S2), Yahoo OAuth tokens, and Sleeper usernames used to import your fantasy league data. ESPN cookies and Yahoo tokens are encrypted at rest using AES-256 (Fernet) symmetric encryption and are never stored in plaintext.
  • League data: rosters, scores, standings, draft picks, and transaction history imported from ESPN, Sleeper, and Yahoo.
  • Payment information: processed entirely by Stripe. We do not store credit card numbers, CVVs, or full card details on our servers.
  • User-generated content: writing style samples uploaded for AI recap voice matching, insult entries, rule suggestions, and support tickets.

2. How We Use Your Information

  • To provide and operate The Front Office service.
  • To import and sync your league data from ESPN, Sleeper, and Yahoo on your behalf.
  • To generate AI-powered recaps and analytics using your league data.
  • To send newsletters and email communications you have opted into (via Resend).
  • To process payments and manage your subscription (via Stripe).
  • To respond to support requests.

3. Third-Party Services

We use the following third-party services:

  • Stripe — payment processing. Subject to Stripe's Privacy Policy.
  • OpenAI — AI recap generation. League data (scores, standings, rosters) is sent to OpenAI's API to generate recaps. No personally identifiable information beyond manager display names is included.
  • Resend — transactional and newsletter email delivery.
  • ESPN — league data is fetched from ESPN's fantasy football platform using your provided credentials.
  • Sleeper — league data is fetched from Sleeper's public API using your username.
  • Yahoo — league data is fetched from Yahoo's Fantasy Sports API using OAuth 2.0 tokens.

4. Data Security

We take reasonable measures to protect your information. ESPN credentials and Yahoo OAuth tokens are encrypted at rest using Fernet (AES-256) encryption. Passwords are hashed using bcrypt and never stored in plaintext. All communication between your browser and our servers uses HTTPS. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your account data and league data for as long as your account is active. If you delete your account, your personal data and platform credentials are deleted immediately upon processing your deletion request. Anonymized, aggregated data may be retained for analytics purposes.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.
  • Disconnect your ESPN, Sleeper, or Yahoo credentials at any time from your account settings.
  • Opt out of non-essential email communications.

California residents may have additional rights under the CCPA. To exercise any of these rights, contact us at the email below.

7. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

9. Contact Us

The Front Office Fantasy is a product of Shipyard Labs LLC.

If you have questions about this Privacy Policy or your data, contact us at info@tfofantasy.com

Shipyard Labs LLC
145 Beachwalk Shore Dr
Ste 102 PMB 1079
St Johns, FL 32259
United States