Privacy

What Swindlr reads. When you enter a Sleeper username or open a league, Swindlr reads that league's public data from Sleeper, ESPN, MyFantasyLeague, Fleaflicker or Fantrax: rosters, lineups, scores, scoring and settings. It never asks for your password and can't change anything in your league.

Private ESPN leagues, if you choose. To open a private ESPN league you can paste two cookies from your own ESPN sign-in (SWID and espn_s2). They're kept in one cookie in your browser that only Swindlr's server can read, sent with your own visits, passed to ESPN only to read your leagues, and never stored on Swindlr's side, logged or shared. What ESPN sends back is held in memory for a minute for you alone, never in the cache other visitors use. Forget them on any private league's page; signing out of ESPN everywhere ends them too.

What it keeps. League data is held in a short-lived cache (minutes, or hours for finished weeks) so pages load fast, then dropped. To count how Swindlr is used, it records the page or action (for example “opened a league” or “checked a trade”), a random id for your browser, and a few coarse facts such as the league's size and type. Never your username, league or team names, or which players you looked at.

What stays in your browser. Your browser remembers your Sleeper username, the leagues you've opened and which team is yours in each, trades and rosters you save, the trade you were last working on, your last few custom formats, your own draft board, mock and best-ball drafts, and a snapshot of your players' values for “since your last visit.” That stays on your device; clearing your browser's site data removes it.

One cookie per sport. The last league you opened in each sport is also kept in a cookie: the league's id and your team's id, the same ones in your address bar. Your browser sends it with each page, and Swindlr uses it only to put that league first on that sport's home page. It isn't recorded or shared, and it lasts a year unless you clear it.

Accounts. If you make an account, Swindlr keeps your email address to send sign-in links, and your referral code and who joined with it. It never sends anything else to that address without asking.

Feedback. If you send feedback, Swindlr keeps what you wrote, the page you sent it from (the address without anything after a question mark) and, only if you give one, your email address to reply to. Nothing else, and it isn't shared.

What it never does. No ads, no selling or sharing data, no third-party trackers. Share images show players and verdicts; images of your league's rankings, matchups or recaps show team names only when you choose to share them with your league.

Questions: jared@swindlr.io.