FantasyGameboard
Privacy Policy
Fantasy Gameboard shows your fantasy football leagues from Yahoo and ESPN on one screen. To do that it needs a small amount of data about you, described here. We collect nothing beyond what that job requires, and we do not sell or share it.
What we collect
- Your Google account email and user ID, when you sign in with Google. Used to identify your account and nothing else.
- Yahoo Fantasy access: an OAuth refresh token issued by Yahoo when you connect a Yahoo account, and the league, team and score data Yahoo returns for it.
- ESPN Fantasy access: two ESPN session cookies,
SWIDandespn_s2, captured when you connect ESPN, and the league, team and score data ESPN returns for them. The Chrome extension reads these two cookies from espn.com only, and only when you click Connect or when they change after you have connected. - Extension token: if you install the Chrome extension, it holds a token tied to your account so it can keep your ESPN connection current.
We do not collect passwords, payment details, location, browsing history, or the contents of any page other than the fantasy data above.
How we use it
Solely to fetch your fantasy league scores and display them to you. Tokens and cookies are decrypted only at the moment a poll runs. There is no advertising, no analytics profile, no sale or rental of data, and no use unrelated to showing you your leagues.
Where it lives
On Google Cloud in the United States. Yahoo tokens and ESPN cookies are encrypted at rest with a per-record key wrapped by Cloud KMS. Everything travels over TLS. Data is sent only to api.fantasygameboard.com.
The Chrome extension
The extension stores, on your device only: your extension token, the API address, and a one-way hash of your ESPN cookies used to notice when they change. It never writes cookie values to logs or error messages, injects nothing into any web page, and cannot read cookies for any site other than espn.com.
Deleting your data
Disconnecting Yahoo or ESPN at fantasygameboard.com/connect deletes the stored token or cookies and revokes any extension tokens immediately. To delete your account entirely, email the address below and it will be removed within 7 days.
Third parties
Yahoo and ESPN receive your requests under their own terms. Google provides sign-in and hosting. No one else receives your data.