Privacy

What is collected

• Your ESPN session cookies (espn_s2 and SWID), read by the browser extension. They are the only way to read a private ESPN league, because ESPN publishes no API for it. The extension reads those two cookies by name and never enumerates the cookies on your machine.
• Your Yahoo sign-in, if you connect Yahoo: the OAuth token Yahoo issues and the account identifier that comes with it. We never see your Yahoo password, and we do not ask Yahoo for your name or email address.
• Your fantasy data as read back from those platforms: leagues, teams, rosters and scores.
• A session cookie for the site itself, so you stay signed in.

What it is used for

One thing: showing you your own fantasy teams and working out which players help or hurt you across them. Nothing is used for advertising, nothing is sold, and your fantasy data is not used to train any AI model, ours or anyone else's.

Our use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Who it is shared with

There are no advertising networks, data brokers or analytics services. The full list:

• Render, Neon and Cloudflare, which host the server, the database and the network in front of them, and process your data only to run the service.
• ESPN and Yahoo, necessarily. Reading your leagues means asking them, as you.
• Your league-mates, as access rather than data. When you connect ESPN, your cookies let the other members of that league see it without giving up their own login. The cookies themselves are never shown to anyone, and a league-mate can reach nothing of yours beyond the league you share. Disconnect ESPN and your credentials leave that pool.
• OpenAI, only if you use screenshot import or the commentary feature. Screenshot import sends the screenshot you upload there to have the roster read out of it; the commentary feature sends the lineup decisions it discusses, with the rosters, opponents and scoring behind them. Use neither and nothing of yours goes there.
• An AI assistant such as Claude or ChatGPT, only if you connect one yourself. The connection is off until you create it, uses a token you can revoke, and gives that assistant the same fantasy data the site shows you and nothing else.

The extension sends your ESPN cookies to mondaymiracle.app and nowhere else. Any other destination is refused.

How it is stored

Credentials are encrypted at rest (AES-256-GCM) and never written to logs: the server records a cookie's length and format, never its value. Nothing you give us is ever made public.

The extension itself keeps only the token that lets it hand your ESPN cookies to Monday Miracle, and a one-way fingerprint of those cookies so it can tell when they change. It never stores the cookies, and its token cannot read a roster, a score or a league.

How to delete it

From any signed-in page, open your browser's console and run await fetch('/api/espn/logout', { method: 'POST' }) to remove your ESPN credentials, or await fetch('/api/credentials/clear', { method: 'POST' }) to remove every stored credential for your account, Yahoo and ESPN alike.

Your stored fantasy data expires on its own (below), and an imported roster can be deleted at once from the import hub. Uninstalling the extension does not delete what the server already holds.

To have your account and everything in it removed, email [email protected].

How long it is kept

Fantasy data is kept for 30 days from when it was first stored, then deleted. One rule for everything: a sweep runs every few hours and removes every stored record past the window, whatever feature stored it and whether or not you sign in again. Nothing extends the clock.

Two things last until you remove them: your credentials, and what you set up yourself, such as a shared league, the team you linked to it, how you rank your leagues, which leagues you hid and your alert settings.

Yahoo and ESPN

Yahoo leagues are read through the Yahoo Fantasy Sports API, with read-only access you grant and can revoke. Yahoo's own Terms of Use and Privacy Policy continue to apply to that data. Fantasy data provided by Yahoo Fantasy.

ESPN publishes no API for private leagues, so the connection relies on the session your browser already holds, and ESPN may change how that works at any time. Monday Miracle is not affiliated with ESPN, Yahoo or the NFL.