Privacy Policy
Last updated: August 28, 2026
Operated by Fantasy Roast Desk LLC (Georgia). Contact: hello@fantasyroastdesk.com
The short version
You buy Fantasy Roast Desk for your fantasy football league. To make the show we read your league's game data and turn it into a video. That means we end up holding information about everyone in your league, not just you, so this policy covers them too, and they have the same rights over their information that you have over yours.
We use team names only. We never use, store, or say a manager's real name.
Who this covers
- The buyer, usually the commissioner. You created the order and gave us the league.
- Every other manager in that league. You may not have bought anything. You still have every right listed below, and you can exercise them yourself without going through your commissioner.
What we collect
From the buyer: email address, the platform and league identifier you give us, your show settings (spice level, design), and payment records. Payments are processed by Stripe. We never see or store your card number.
From the fantasy platform, about every team in the league: team names, weekly scores, rosters and lineups, transactions, standings, and draft picks. This is the game data your league already generates. We do not collect account-owner names, profile photos, or anything about a manager outside the game.
Delivery is to the buyer. We email each episode to the person who bought it, at the checkout address. We do not collect other managers' email addresses, and we do not pull emails from ESPN or Sleeper. Every email has a one-click unsubscribe.
From the website: product analytics (pages viewed, buttons clicked) via PostHog, used to understand what works. We do not send your email address to PostHog.
ESPN credentials, only in one narrow case. ESPN has no official API. Most leagues connect by making the league viewable to the public and giving us the League ID, which requires no credentials, and that is the path we recommend. If a private league cannot use it, we accept ESPN session cookies (espn_s2, SWID). If you give us those:
- they are stored encrypted in a secrets vault, never in an ordinary database column;
- they are used only to read that league's game data;
- you can revoke them at any time by logging out of ESPN, and you can ask us to delete them;
- we delete them as soon as the league moves to the public-viewable path.
Why we hold it
To make and deliver the show you ordered, to keep your league's season history and records book working across weeks, to take payment, to answer support, and to meet legal obligations. That is the complete list. We do not sell personal information, and we do not share it with advertisers or data brokers.
Who we share it with
Only the services that run the product: Supabase (database for the order book and league memory), Cloudflare R2 (video hosting), ElevenLabs (voice synthesis), Anthropic (script generation, from computed statistics only, never from a person's identity), Resend (product and episode email), Stripe (payments), and PostHog (site analytics; no email addresses). Each gets only what it needs to do its job.
How long we keep it
Game data and episodes are kept for 24 months after a season ends, because the multi-season records book is part of what you are buying. Payment records are kept as long as tax and accounting rules require. ESPN cookies are deleted as soon as they are no longer needed. You can ask us to delete anything sooner.
Your rights, including if you never bought anything
Anyone whose information appears in a Fantasy Roast Desk episode can, by emailing hello@fantasyroastdesk.com:
- See what we hold about them
- Correct anything wrong
- Delete their information, including their team's data from our database
- Opt out of delivery at any time, with one click in any email
- Have a specific video taken down. See the Takedown Policy. We pull it the same day, and we do not ask you to justify the request
You do not need your commissioner's permission for any of these, and we will not tell you to go ask them.
Depending on where you live you may have additional rights (for example under GDPR or the CCPA). We will treat those as they come, at the point of a first sale in that place, rather than assuming them away.
Security
Data is encrypted in transit and at rest. Database access is restricted so one league's data cannot be read from another's. Credentials live in a secrets vault, not in application tables. No system is perfect, and we will tell affected people promptly if something goes wrong.
Children
Fantasy Roast Desk is for adults. It is not directed at anyone under 18 and we do not knowingly collect information from children. If you believe a child's information is in our system, email us and we will delete it.
Changes
If this policy changes materially we will email active customers before it takes effect.
Governing law
Georgia, United States.