Privacy Policy

Information we collect

• Account information — your email address and a password (stored only as a secure hash by our authentication provider), plus any profile details you add.
• Payment information — subscriptions are processed by Stripe. We never see or store your full card number; we keep only limited billing metadata such as your Stripe customer ID, plan, and subscription status.
• Fantasy tools — if you use the optimizer, the Sleeper username you enter is used to fetch public league data on demand. We don't store your league data on our servers.
• Usage & device data — we automatically log IP address, browser/device type, and usage events to operate the site, prevent abuse, and understand aggregate usage.

Cookies

We use essential cookies to keep you signed in and to protect against cross-site request forgery. These are required for the site to work. We also use privacy-respecting analytics; you can block non-essential cookies in your browser without losing access to your account.

How we use your information

To provide and secure the service, process payments and manage your subscription, send transactional and (for subscribers) signal emails, respond to support requests, and improve the product. We process this data to perform our contract with you and for our legitimate interest in running a secure, reliable service.

Service providers

We share data only with vendors that help us operate, under their own security and privacy terms: Supabase (accounts & database), Stripe (payments), Resend (email), Vercel (hosting & analytics), PostHog (product analytics), and Upstash (rate limiting). We do not sell your personal information.

Your choices and rights

You can view and update your email, change your password, and enable two-factor authentication from your account page, and delete your account and associated data there at any time. Depending on where you live, you may have additional rights to access, correct, export, or delete your data — contact us to exercise them.

Data retention & security

We keep account data while your account is active and as needed to meet legal obligations. We protect data with encryption in transit, row-level access controls, rate limiting, and other safeguards. No system is perfectly secure, but we work to protect your information.

Children

RosterCoach is not directed to anyone under 18, and the betting-related content is intended only for adults of legal age in their jurisdiction. We do not knowingly collect data from children.

Changes & contact

We may update this policy; material changes will be posted here with a new date. Questions or requests: support@rostercoach.pro.