Your leagues stay tied to your account.
Use Fantasy is operated by Dylan Elder for a controlled private preview. This notice describes the implemented service; it does not certify platform approval or legal compliance. Contact: dylankelder@gmail.com
What the service stores
We store the verified issuer/subject binding and profile, your explicit team selections, provider league facts and original source times, saved preferences, attributed research/rule notes, decision history/dispositions, update requests and operational/recovery records. A public Sleeper username associates public team data; it does not authenticate native account control.
The owned ESPN extension transfers necessary session cookies only after explicit consent to the receiving Use Fantasy account. That copy is encrypted server-side and used for configured provider GET reads. It is not passed through ChatGPT, a model tool argument, application logs or recovery archives. Disconnect removes the usable stored copy. We do not collect your ESPN password.
Account and conversation access
Auth0 handles normal login. ChatGPT read access, trusted Codex application writes, account controls and extension connection access use separate audiences or capabilities. Account control tokens and PKCE verifiers remain in service RAM; the browser receives an opaque Secure/HttpOnly cookie, with at most a ten-minute session and no refresh grant. A restart requires sign-in. The account page may keep goal/risk drafts only in its browser tab, scoped to the verified profile; it never stores credentials there.
When you invoke the ChatGPT/Codex connection, requested saved facts are returned to that conversation host under its own privacy controls. Hosted collection and reporting do not run a separate background language model or claim to verify news articles.
Why and where data is processed
Data supports selected-team reviews, scope/readiness checks, personalization, requested application changes, opted-in maintenance, security and recovery. Current infrastructure providers include Auth0 for authentication, Render for the Oregon application/private disk, Cloudflare R2 for encrypted off-host recovery, and the ChatGPT/Codex host you choose. GoDaddy supplies domain registration/DNS. We do not sell account data or activate customer billing.
Application diagnostic responses avoid raw exceptions, credentials and private dumps. Hosting/authentication providers can process request metadata and security/operational logs under their policies. This page uses no advertising or product analytics tracker. Access is limited to the bound account and authorized operation/support of the service; another user's public numeric league ID never grants access to your saved state.
Retention and recovery
Accepted maximums are 30 days for raw captures, 90 days for normalized evidence and 30 days for recovery points, with shorter source restrictions taking precedence. Preferences and decisions remain until explicit deletion or an applicable shorter restriction. Active account deletion is handled within seven days of a verified request; eligible backups expire within their existing thirty-day maximum. Necessary cancellation/revocation/deletion denial records prevent an old backup from silently reactivating access.
Existing records whose source dates cannot be established are retained for operator review and shown as unresolved; dates are not invented. Compression preserves logical IDs, original facts and source timestamps. Recovery omits provider credentials/raw captures, quarantines restored identities and disables restored jobs until reviewed. Provider authorization is required again after restore.
Your choices
Use Account for supported preferences, team selection, attributed context, update requests and existing decision choices. Manage ESPN access in the connector. Logging out, disconnecting ChatGPT, uninstalling the extension and deleting an account have different effects, explained in Help. Request verified access/removal/deletion through Support. Do not send secrets in a support request.