Privacy Policy

All of this lives in Chrome’s extension storage, on your own machine:

• Preferences — Theme, notification choices, whether automatic sync is on, and a log level. These use Chrome’s sync storage, which means Chrome copies them between browsers where you are signed in to the same Google account.
• Connected leagues — League ID, season, league name, your team name and ID, the connection ID issued by Green19, the commissioner’s name as ESPN reports it, and the name and account ID of whoever connected the league.
• Your Green19 account ID — An identifier only. Our site does not expose your name or email address to the extension.
• A synchronisation log — Up to fifty recent runs, kept as summaries: which kind of data, the outcome, a record count, a content fingerprint and a short description.
• Notification bookkeeping — Trade IDs already seen, the ranked order of teams, and a fingerprint of league settings, so the same event is not announced to you twice.
• An installation ID — A random identifier generated when you install the extension. It is not transmitted; it appears only in the support report you can choose to copy yourself.

The extension does not keep copies of your league’s records — only the counts, fingerprints and identifiers listed above. Your ESPN cookies are never stored by the extension — not on disk, not between operations, and never written to any log.

• When you connect a league — Your league ID, the season, and your ESPN espn_s2 and SWID cookies.
• When a sync runs — The connection ID, and nothing else. No league data and no credentials.
• When you disconnect — The connection ID.
• Routine checks — Whether you are signed in, and which connections your account has.

Nothing else is transmitted. The extension can contact only green19fantasy.com and ESPN’s servers — a restriction enforced by the extension’s Content Security Policy rather than by convention.

Your ESPN cookies are sent to Green19 over HTTPS. They have to be sent: our servers present them to ESPN themselves, to confirm you belong to the league, to work out which team is yours, and to import your league data. That is not something we can do against a value we cannot read.

On our servers they are encrypted with AES-256-GCM, using a key derived from a server-held secret, and stored outside the main database in a server-only store keyed by connection ID. Every read checks that the account making the request owns that connection. We also keep a one-way fingerprint of your SWID so we can tell whether two connections belong to the same ESPN account without holding the value itself.

When you disconnect a league, the stored session is destroyed first, before anything else about the connection is updated.

• It cannot see your browsing — No tabs permission and no scripting permission. It cannot read the address of any page you have open, and the only website it runs any code on is this one — described above.
• It contains no tracking code — No analytics, no telemetry, no crash reporting, no advertising — none of it, from any provider.
• It never handles payment information — Nothing about billing passes through the extension.
• We do not sell your data — We do not sell it, rent it, or use it for advertising or profiling.

If you turn notifications on, Chrome asks you for a separate optional permission. Notifications are worked out on your machine, from data the extension has already read. Turning them on sends nothing additional to us or to anyone else.

ESPN is the source of all fantasy data used here. Your use of ESPN remains governed by ESPN’s own terms and privacy policy, which we do not control.

Once a league is connected, our servers import and store your league data under your account. The website uses Supabase for accounts and database storage, Stripe for Premium subscriptions — card details are handled by Stripe, and we store only the customer and subscription identifiers and the status — and Anthropic’s Claude API to generate written summaries of rankings and draft results from league facts such as team names and scores. None of these are part of the extension.

Disconnecting a league destroys the stored ESPN session immediately. The connection record and any league data already imported are kept unless you ask us to remove them, so that disconnecting does not silently delete your history.

• Erase local data — In the extension, under Settings → Privacy & data. Removes everything the extension has stored in that browser.
• Disconnect or delete a connection — On this site, under Settings → Fantasy Connections.
• Withdraw ESPN access — In the extension, under Settings → Connection, or from Chrome’s own extension settings.
• Uninstall — Removing the extension removes everything it stored locally.

Account deletion is handled by our team rather than by a button. Email us at service@green19fantasy.com and we will delete your account and the data associated with it. You can use the same address to ask for a copy of your data, or to ask anything about this policy.

Green19 Fantasy is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at service@green19fantasy.com and we will delete it.

If this policy changes we will update the date at the top of this page, and for anything material we will say so in the extension or on this site.

service@green19fantasy.com