AllMyLeagues — Privacy Policy

Last updated: June 2026

AllMyLeagues is a read-only fantasy football dashboard that shows your leagues from Sleeper, Yahoo, and ESPN on one screen. This policy covers the AllMyLeagues web app and the “AllMyLeagues ESPN Connector” browser extension.

What we access

• Sleeper: your public Sleeper username, to look up your leagues.
• Yahoo: OAuth access/refresh tokens you grant via Yahoo’s official login (read-only fantasy scope).
• ESPN: your ESPN session cookies (SWID and espn_s2), which authorize read access to your ESPN fantasy leagues. ESPN has no official API, so these cookies are the only way to read your private leagues — the same approach other fantasy tools use.
• Account: if you sign in, your email address (via a one-time magic link) to keep your leagues linked across devices.

The browser extension

The extension exists solely to connect your ESPN leagues without manual copy/paste. When you click “Connect automatically” on allmyleagues.com, the extension reads your SWID and espn_s2 cookies from espn.com and passes them to the AllMyLeagues page, which sends them to the AllMyLeagues backend. The extension accesses no other cookies, sites, or data, and does nothing in the background or on any other website.

How we use and store it

• We use this data only to fetch and display your fantasy matchups.
• Yahoo tokens and ESPN cookies are encrypted at rest (envelope encryption) in our database; the encryption key is held separately on our server, never in the database.
• We never sell or share your data, and never post to or modify your fantasy accounts (everything is read-only).

Deletion

You can disconnect a provider in the app at any time, which removes the stored credentials. To delete your account and all associated data, email the address below.

Contact

Questions or deletion requests: wgeffen2906@gmail.com