Privacy Policy
What we collect
The Fleece ESPN Sync Chrome extension reads two ESPN session cookies — SWID and espn_s2 — from your browser when you are logged into ESPN Fantasy. These tokens are used solely to authenticate your ESPN Fantasy league with Fleece. We also collect your league ID, league name, and season year.
We do not collect your ESPN password, browsing history, ESPN page content, or any data beyond the two cookies named above.
How we store it
Your ESPN session credentials are transmitted over HTTPS and stored encrypted at rest using AES-256 (Fernet). The encryption key never leaves our servers and credentials are never logged, printed, or included in error reports.
How we use it
Credentials are used only to fetch your league roster data on your behalf for use inside Fleece. We do not sell, share, or transmit your credentials to any third party for any purpose.
Data retention
Stored credentials are retained until you disconnect your league. You can disconnect at any time by clicking "Disconnect" inside the Fleece ESPN Sync extension popup. On disconnect, your credentials are removed from our servers.
Third-party services
Fleece connects to ESPN's API using your credentials to retrieve league data. We have no control over ESPN's own data practices. Please review ESPN's Terms of Service for their privacy practices.
Contact
Questions about this policy: admin@fleece.gg