Last updated: June 2026
AllMyLeagues is a read-only fantasy football dashboard that shows your leagues from Sleeper, Yahoo, and ESPN on one screen. This policy covers the AllMyLeagues web app and the “AllMyLeagues ESPN Connector” browser extension. We try to collect as little as possible, and we never sell your data.
SWID and
espn_s2), which authorize read access to your ESPN fantasy
leagues. ESPN has no official API, so these cookies are the only way to
read your private leagues — the same approach other fantasy tools use.We use privacy-conscious product analytics (PostHog) and error monitoring (Sentry) to understand how the app is used and to catch bugs. These set cookies / local storage and record events like page views, feature usage, and errors, along with technical details such as device, browser, and approximate location (from IP). To protect the secrets that pass through the app (ESPN cookies, the admin key), session recording and automatic form/DOM capture are turned off — we only send specific, named events.
When you sign in, analytics are associated with your account’s internal id — never your email or other personal details. Anonymous visitors are not given a stored analytics profile. You can limit tracking with your browser’s cookie controls or a “Do Not Track” / ad-blocking extension.
We send sign-in “magic link” emails through our authentication provider (Supabase), and product emails — such as a waitlist confirmation and a notification when the season starts — through Resend. If you join the waitlist, we store the email address you give us to send those notifications; you can ask us to remove it at any time. We don’t send marketing email beyond what you signed up for.
If and when you purchase AllMyLeagues+, payments are handled by Stripe. We don’t receive or store your full card number — Stripe processes it directly. We keep a record of your subscription status so we know what you’re entitled to.
The extension exists solely to connect your ESPN leagues without manual
copy/paste. When you click “Connect automatically” on allmyleagues.com, the
extension reads your SWID and espn_s2 cookies from
espn.com and passes them to the AllMyLeagues page, which sends them to the
AllMyLeagues backend. The extension accesses no other cookies, sites, or
data, and does nothing in the background or on any other website.
We keep your data while your account is active so the Service works across devices. Disconnecting a provider removes its stored credentials; deleting your account removes your associated data. We may retain limited records where required for security, legal, or accounting purposes (for example, a record that a subscription payment occurred).
You can disconnect a provider in the app at any time, which removes the stored credentials. To delete your account and all associated data, or to be removed from the waitlist, email the address below.
AllMyLeagues isn’t directed to children under 13, and we don’t knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email us and we’ll delete it.
Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, and to opt out of its “sale” or “sharing.” We do not sell or share your personal information, and we don’t use it for cross-context behavioral advertising. California residents (under the CCPA/CPRA) and users in other regions with similar laws can exercise these rights — including the right not to be discriminated against for doing so — by emailing us at the address below; we’ll respond as required by applicable law.
The Service is operated from the United States and relies on U.S.-based providers (Supabase, Render, Stripe, Resend, PostHog, Sentry). If you use it from outside the U.S., you understand your information is processed in the U.S.
We may update this policy as the Service evolves; we’ll change the “Last updated” date above when we do.
Questions or deletion requests: wgeffen2906@gmail.com
See also our Terms of Service.