Privacy Policy

Last updated: August 2, 2026

Roster Locker ("we," "us") is an AI-powered fantasy sports assistant. This policy explains what we collect, why, and the choices you have. We've tried to write it in plain English rather than legalese.

The short version: We collect your email and the fantasy league data you choose to connect. We never ask for or store your platform passwords. We don't sell your data. You can delete your account and data at any time by contacting us.

Information we collect

Account information: your email address, a password (stored only as a secure one-way hash — we can't see it), and an optional display name.
Fantasy league data: when you connect a league, we import public or authorized data such as your rosters, league settings, draft history, and matchups from the platform you choose (Sleeper, ESPN, Yahoo, MyFantasyLeague, Fleaflicker, Fantrax, and Fantasy Premier League). We connect using each platform's public or sanctioned method (for example, a username, a league ID, or an official OAuth sign-in). We never ask for, store, or use your platform passwords.
Private-league credentials (only if you provide them): for private ESPN leagues, you may optionally supply browser cookie values so we can read that league. These are encrypted before storage and used only to sync that league.
Usage data: basic technical information such as your device type, and the questions and requests you make to the AI so we can generate answers and improve the product.
Waitlist email: if you join our waitlist, we store your email address to notify you about launch and early access.

How we use your information

To provide the service — importing your leagues and generating AI analysis grounded in your actual rosters and scoring settings.
To send you account-related email (for example, password reset links).
To respond to feedback and support requests.
To operate, secure, and improve the product.

AI processing

Roster Locker uses third-party large language models (currently Google's Gemini) to generate analysis. When you ask the AI a question, the relevant context (such as your roster and league settings) is sent to that provider to produce a response. We use these providers under terms intended to keep your data out of their model training. We do not use your personal fantasy data to train our own models.

How we share information

We do not sell your personal information. We share it only with service providers who help us run the product, under agreements that limit their use of it:

Fantasy platforms — to read the leagues you connect.
AI providers — to generate analysis (see above).
Email provider — to send transactional email.
Payment provider — if and when you subscribe, billing is handled by a third-party processor; we don't store your full card details.
Support chat provider: DMChamp, which powers the chat assistant on our website and inside the app.
Legal reasons — if required by law or to protect our rights and users.

Support and sales chat

Our website and app include a chat assistant provided by DMChamp. Messages you send in that chat, along with any contact details you choose to share (such as your name or email address), are processed by DMChamp so we can answer you and follow up. This applies whether or not you have a Roster Locker account. We do not sell or share this information, and you can ask us to delete it at any time by emailing support@roster.locker.

Yahoo Fantasy

When you connect a Yahoo account, we read your Yahoo fantasy data live at the moment you ask for analysis and do not store, cache, or index it in our database. Fantasy data sourced from Yahoo is provided by Yahoo Fantasy. Yahoo Fantasy integration covers NFL, NBA, MLB, and NHL and is available to users in the United States and Canada.

Data retention and deletion

We keep your data while your account is active. You can request deletion of your account and associated data at any time by contacting us at support@roster.locker. We may retain limited records where required for legal or security reasons.

Cookies and local storage

We keep things minimal. We do not use third-party advertising or cross-site tracking cookies. The app uses your browser's local storage to keep you signed in (for example, your session token) and to remember basic preferences. If we add privacy-respecting product analytics or error monitoring in the future to improve the service, we'll update this policy to say so.

Security

Passwords are hashed, sensitive credentials are encrypted at rest, and connections are served over HTTPS. No system is perfectly secure, but we take reasonable measures to protect your information.

Your rights

You can:

Access the personal data we hold about you.
Correct inaccurate information (for example, your display name).
Delete your account and associated data.
Disconnect any connected league at any time.
Opt out of non-essential email.

To exercise any of these, email support@roster.locker.

California privacy rights (CCPA/CPRA)

If you're a California resident, you have the right to know what personal information we collect, to request its deletion, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law. To make a request, contact support@roster.locker.

Children

Roster Locker is not directed to children under 13, and we do not knowingly collect their information.

Governing law

This policy is governed by the laws of the United States and the State of Hawaii, without regard to conflict-of-laws principles.

Changes to this policy

We may update this policy as the product evolves. We'll revise the "last updated" date above and, for significant changes, notify you.

Contact

Questions? Email support@roster.locker.