Privacy Policy
This policy explains what information Fantasy Goblin collects, how we use it, and the choices you have when using our fantasy football tools.
Information We Collect
- Account information: name, email, username, encrypted password, account settings, and subscription status.
- Fantasy football inputs: Sleeper usernames, league IDs, rankings, trade inputs, and saved settings you choose to use in the app.
- Billing metadata: plan, subscription status, renewal state, and payment records supplied by Stripe. We do not store full card numbers.
- Technical data: IP address, browser, device, request logs, timestamps, and diagnostics used for security and reliability.
- Cookies and sessions: essential cookies or similar storage used to keep you signed in and make the site work.
How We Use Information
- To create, secure, and maintain your account.
- To load leagues, rankings, trade tools, saved boards, and subscription features.
- To process billing, manage subscriptions, and review cancellation or refund requests.
- To troubleshoot bugs, prevent abuse, improve performance, and respond when you contact us.
When We Share Information
- Service providers: we may share limited information with vendors that help with hosting, analytics, email, payments, security, or app operations.
- Payments: Stripe handles payment details and subscription processing under its own policies.
- Legal and safety: we may disclose information when reasonably necessary to comply with law, protect users, or investigate misuse.
How Long We Keep Data
We keep information only as long as reasonably needed to operate Fantasy Goblin, maintain account history, support billing records, resolve disputes, prevent abuse, and meet legal obligations.
If you close your account or request deletion, we will remove or anonymize information when practical, except where we need to keep limited records for security, billing, fraud prevention, or legal compliance.
Your Options
- You can request access, correction, or deletion by contacting us.
- You can control cookies in your browser, though some site features may stop working correctly.
- You can cancel paid subscriptions through your billing tools or by contacting us if those tools are unavailable.
Fantasy Goblin ESPN Helper — Extension Data Handling
The Fantasy Goblin ESPN Helper is an optional Chrome browser extension that connects your ESPN fantasy account to Fantasy Goblin. This section explains how the extension handles your ESPN session data.
What the extension collects
- SWID — your ESPN account identifier (a UUID-format string set by ESPN in your browser).
- espn_s2 — your ESPN session credential, which allows Fantasy Goblin to retrieve your private ESPN fantasy league data on your behalf. ESPN marks this cookie as HttpOnly; it cannot be read by websites, only by browser extensions.
- Active tab URL — when you click the extension icon, the URL of your current browser tab is read to detect your ESPN fantasy league details (league ID, sport, season) from the URL path. No page content is read.
How your ESPN credentials are transmitted
When you click “Connect ESPN to Fantasy Goblin,” the extension sends your SWID and espn_s2 values once, over HTTPS, to your own Fantasy Goblin account using a one-time token you generate from your Account Settings. The token expires in 5 minutes and works only once. No credentials are sent to any other server.
How Fantasy Goblin stores ESPN credentials
- espn_s2 is encrypted at rest using AES-256-GCM before being written to the Fantasy Goblin database. The plaintext value is never logged, never returned in API responses, and never displayed in the interface after the initial connection.
- SWID is stored as your ESPN account identifier. Fantasy Goblin displays only a partial value (first 8 characters + last 4) in Account Settings as confirmation — the full value is never shown.
- Stored credentials are used exclusively to authenticate requests to the ESPN Fantasy API on your behalf to retrieve your team and league data.
What the extension does not store locally
The extension stores nothing in your browser. It does not write to
localStorage, sessionStorage, or chrome.storage.
ESPN credential values are held in extension memory only for the duration of the single
connection request and are immediately discarded after transmission.
Disconnecting your ESPN account
You can disconnect your ESPN account at any time from Account Settings → ESPN → Disconnect. Disconnecting revokes the stored credentials and removes the encrypted data from Fantasy Goblin's database. Deleting your Fantasy Goblin account removes all associated ESPN credentials.
Third-party sharing
Your ESPN credentials are never sold, shared, or transmitted to any party other than your own Fantasy Goblin account. Fantasy Goblin does not share ESPN credential data with ESPN, Google, or any other third party.
No official ESPN affiliation
Fantasy Goblin ESPN Helper is an independent tool. It is not affiliated with, endorsed by, or supported by ESPN or The Walt Disney Company. ESPN, ESPN Fantasy, and related marks are trademarks of ESPN, Inc.
Children, Updates, and Contact
Fantasy Goblin is not intended for children under 13.
We may update this policy as the product changes. The date at the top reflects the current version.
Questions about privacy can be sent through the Contact page.