LeagueHQ

LeagueHQ Privacy Policy

Last updated: June 13, 2026

DRAFT — review before launch. This is a tailored draft, not legal advice. Have it reviewed (or run through a maintained policy generator) before processing payments and before serving EU/California users.

This Privacy Policy explains how LeagueHQ ("LeagueHQ," "we," "us," "our") collects, uses, and shares information when you use leaguehq.ai, our apps, and our browser extension (together, the "Service"). LeagueHQ is operated by Kappler Consulting LLC, DBA LeagueHQ, 6545 Market Ave. North STE 100, Canton, Stark County, OH 44721 USA.

Questions: support@leaguehq.ai

1. Who this applies to

The Service is intended for adults (18+) organizing and following fantasy sports leagues. It is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has provided us data, contact us and we will delete it.

2. Information we collect

Information you provide

  • Account — name, email, and password. Passwords are stored hashed by our authentication provider; we never see them in plain text.
  • Profile and league content — display name, team names, profile details, chat messages, images you upload, events, RSVPs, polls, and other content you add.
  • Support communications you send us.

Information from connected fantasy platforms

  • When you connect an ESPN, Sleeper, or Yahoo league, we collect your league data (teams, rosters, matchups, scores, transactions) to build your league history.
  • For ESPN private leagues, our browser extension reads your ESPN authentication cookies (espn_s2, SWID) from your browser, with your action, and sends them to our servers over an encrypted connection so we can retrieve your private league on your behalf. See Section 8.

Information collected automatically

  • Usage and device data — pages viewed, actions taken, device and browser type, and IP address, via cookies and similar technologies (see our Cookie Policy).
  • Error and performance data to keep the Service reliable.

Payment information

  • When you subscribe, our payment processor (Stripe) collects and processes your payment details. We do not store full card numbers; we receive limited details such as subscription status and the last four digits of your card.

3. How we use information

  • Provide, operate, secure, and improve the Service.
  • Sync and display your league history, records, chat, and events.
  • Process subscriptions and free trials.
  • Send transactional messages (account, billing, weekly sync recaps) and, where permitted, product updates and push notifications you can opt out of.
  • Provide support, prevent abuse, and comply with law.

Where required, we rely on your consent, the performance of our contract with you, and our legitimate interests in operating the Service.

4. How we share information

We do not sell your personal information. We share it only:

  • With service providers (sub-processors) that process data on our behalf under contract (Section 5).
  • With other members of your league, for content you post to that league (profile, chat, records, etc.).
  • To comply with law, enforce our Terms, or protect rights and safety.
  • In a business transfer (merger or acquisition), with notice.

5. Sub-processors

We use trusted providers to run the Service, including: Supabase (database, authentication, file storage), Vercel (hosting and analytics), Stripe (payments), Resend (transactional email), OneSignal (push notifications), PostHog (product analytics), Sentry (error monitoring), and Zoho Mail / Crisp (support). Each processes data only as needed to provide its function.

6. Data retention

We keep your information while your account is active and as needed to provide the Service. League history may persist as part of your league's shared record. You can request deletion (Section 7); some data may be retained where required by law or for legitimate business needs such as billing records.

7. Your rights

Depending on where you live (including under the EU GDPR and the California CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict use of your personal data, and to object or withdraw consent. California residents have the right not to be treated differently for exercising these rights. To make a request, email support@leaguehq.ai; we will verify and respond as required by law.

8. The browser extension and ESPN credentials

Our extension exists solely to connect ESPN private leagues. With your action, it reads your ESPN session cookies (espn_s2, SWID) and transmits them to LeagueHQ over HTTPS. We use them only to retrieve your league data on your behalf, store them encrypted, and never sell them or use them for advertising. You can disconnect at any time from your league settings, which deletes the stored credentials, and you can remove the extension from your browser. Our handling of data obtained through the extension complies with applicable Chrome Web Store policies, including the Limited Use requirements.

9. Security

We use encryption in transit, access controls, and other safeguards to protect your data. No method of transmission or storage is perfectly secure, but we work to keep your information safe.

10. International transfers

We are based in the United States and process data there. If you use the Service from outside the U.S., you consent to that transfer.

11. Changes

We may update this Policy. We will post the new date above and, for material changes, provide additional notice.

12. Contact

Kappler Consulting LLC, DBA LeagueHQ — support@leaguehq.ai