Privacy and your data

What your account stores

Supabase handles email sign-in. GridLore stores your saved leagues, default view, team preference, delivery preference, membership and roster-claim status, and the League Office records you create or vote on. Sign-in cookies keep this browser session active.

Saving a league is only a bookmark. Team ownership and commissioner access require separate verification, and those decisions are recorded in an audit log.

Where league information comes from

GridLore reads public Sleeper league data, including team and manager names, scores and league activity. League pages require a signed-in account that saved the league. Removing your bookmark does not remove public data from Sleeper or change the league.

Services involved

Supabase provides account and database services. Resend delivers transactional sign-in email. Vercel hosts the application. These services process the information needed for their roles and may retain operational logs under their own policies.

Weekly editions are generated from completed league results. When optional AI league briefs are enabled, only clicking Generate league brief sends your question and a bounded league snapshot to OpenAI. Loading a page does not request AI generation. Do not include sensitive information in your question.

AI allowance reservations store the requesting account, league and usage metadata in Supabase. Your question and the generated response are saved to your private Desk library so you can reread the conversation. Only your account can read them, and they are included in your data download. OpenAI may retain request data under its own API policies.

Download your saved data

While signed in, you can download your bookmarks, preferences, memberships, roster claims and assignments, delivery settings and history, authored League Office records, votes, provider-account metadata, legacy drafts, and your own audit events as JSON. Authentication credentials, provider tokens, other members' private records, and system-only logs are excluded.

Download my personal data →

Removal and questions

You can remove bookmarks from your account library. You can delete your account from your account page. It removes your saved leagues, roster claims, provider links, notifications, Desk conversations and preferences. The league's shared record stays: workspaces, editions, the constitution, proposals, the ledger and dues history do not belong to one member. Deletion is blocked while you are the only commissioner of a league, so transfer that role first. Your sign-in record itself is kept, because league history refers to it; to have that removed too, contact nathanwolf100@gmail.com from your account email.

No fixed retention period or deletion completion time is promised here. This beta is not presented as a compliance certification.