What we collect
- Verified email and account ID — used to create your account, secure your session, start your trial, and connect subscription access.
- Sign-in records — one-time email codes are stored only as hashes with expiration and attempt counts. Google sign-in stores Google's stable account identifier, verified email, and basic profile details.
- Linked Sleeper profile — public Sleeper user ID, username, display name, and avatar used to fetch your leagues and rosters.
- Subscription metadata from PayPal — subscription ID, plan ID, status, billing dates, and the email PayPal returns for support purposes. We do not see your card details.
- Session cookie — a signed, httpOnly cookie that identifies your verified account and expires after 30 days.
- Aggregate product analytics — Google Analytics receives page categories and events such as trial starts, league opens, upgrade clicks, and subscription approvals. Dynamic league and team identifiers, usernames, player names, and query strings are removed before analytics events are sent.
- Advertising measurement — the Reddit Pixel receives page visits and a small set of conversion events, such as verified signup and checkout. Automatic email and phone matching are disabled, and we do not send Sleeper or league identifiers.
What we don't collect
- Passwords (we don't use them)
- Credit cards (PayPal handles payment)
- Your browsing history outside rosterrr
How we use it
We use the data above only to operate the service: showing you your rosters, evaluating trades, gating Pro features, and processing billing. We do not sell or share your data with advertisers.
Third parties
- PayPal — for subscription billing. See PayPal's own privacy policy.
- Resend — to deliver one-time sign-in codes and a minimal new-account notification to the site owner.
- Google — for optional Google sign-in and verified email identity.
- Google Gemini API — your trade analyses and team data are sent to Google for AI processing when you use AI features. Google's API terms apply.
- Sleeper public API — we read your public Sleeper data on your behalf.
- Dynasty rankings provider — we cache public consensus dynasty rankings.
- Google Analytics — for aggregate product and conversion measurement. We do not send Sleeper usernames, league IDs, team IDs, player names, or PayPal account details.
- Reddit Ads — for measuring whether Reddit ads lead to visits, verified signups, and subscriptions. Automatic email and phone matching are disabled.
Data deletion
Email info@rosterrr.com to request deletion of your account data. We'll remove your account identity, subscription history, grants, linked Sleeper profile, and sign-in records within 30 days, subject to required financial record retention.
Cookies
We use an essential session cookie and Google Analytics for aggregate usage measurement. The Reddit Pixel may store advertising measurement data in your browser so we can attribute campaign conversions. We do not sell analytics data or send Reddit your account email, Sleeper username, league IDs, team IDs, or player names.