Privacy Policy
Concourse shows you your own fantasy football leagues — from the platforms you already use — in one place. To do that, we need access to a small amount of your data. This policy explains exactly what we collect, why, how it is protected, and what we will never do with it.
The short version: we collect only what is needed to show you your own leagues. Your platform credentials are encrypted at rest. We are read-only — we never post, trade, or change anything in your fantasy accounts. We do not sell your data, and we do not show ads.
Who we are
Concourse Fantasy ("Concourse") is operated by JF Digital LLC, an Arizona limited liability company. You can reach us any time at support@concoursefantasy.com.
What we collect
Account information
When you create a Concourse account, we collect your email address and a password. Authentication is handled by Supabase, our authentication and database provider. Your password is stored only in hashed form by Supabase; we never see or store your plaintext password.
Launch notifications
Our website previously offered an email signup to be notified when Concourse launched. That signup was discontinued on September 16, 2026, when Concourse became available on both the App Store and Google Play. No email addresses were ever collected or retained through it: the signup form was never enabled to receive submissions, so no address was ever stored. We no longer collect email addresses for launch notifications.
Fantasy platform connections
Concourse connects to your fantasy platforms with your authorization, and only ever with read access:
- Yahoo: when you sign in with Yahoo, we receive OAuth tokens that let us read your Yahoo Fantasy leagues. We request read-only access. These tokens are encrypted at rest using AES-256-GCM before being stored.
- ESPN: when you sign in to ESPN inside the app, we capture the session cookies ESPN issues for your login and use them to read your ESPN fantasy leagues. These cookies are encrypted at rest using AES-256-GCM before being stored.
- Sleeper: we store only your public Sleeper username and user ID. Sleeper league data is publicly readable, so no password, token, or private credential is ever collected for Sleeper.
Fantasy data
Using the connections above, we retrieve and store the fantasy data needed to build your dashboard: your leagues, teams, matchups, rosters, scores, and records, along with derived information such as notable plays across your leagues. This is your own data from your own leagues, retrieved on your behalf.
What we use it for
We use your data for exactly one purpose: operating Concourse for you — fetching your leagues, keeping your scores current, showing you what matters across your fantasy portfolio, and providing support when you contact us. We do not use your data for advertising, profiling, or any purpose unrelated to the service.
What we never do
- We never sell your personal information.
- We never show ads or share your data with advertisers.
- We are read-only: we never make changes in your fantasy accounts — no lineup changes, no trades, no messages, no actions of any kind.
- We never share your fantasy data with other users or any third party, except the service providers below that host and operate the app on our behalf.
Service providers
Concourse runs on a small set of infrastructure providers that process data on our behalf, under their own security and privacy commitments:
- Supabase — authentication and database hosting
- Railway — backend application hosting
- Netlify — website hosting
- Sentry — error monitoring; receives crash logs and diagnostic data when the app encounters errors
These providers process data solely to provide their services to us. We do not permit them to use your data for their own purposes.
Diagnostics and crash reporting
Concourse Fantasy collects crash logs and diagnostic information when the app encounters errors. This includes technical details such as device model, operating system version, app version, and information about the error itself. We use Sentry, a third-party error monitoring service, to process this information on our behalf. This data is collected automatically and is used solely to identify and fix problems in the app; it is not used for advertising and is not sold or shared with third parties for their own purposes. Crash and diagnostic data may include your account identifier so we can investigate issues you report, and is retained by Sentry according to its data retention policies. This data is transmitted securely and is deleted when your account is deleted, consistent with the account deletion process described below.
How your data is protected
- Platform credentials (Yahoo tokens and ESPN cookies) are encrypted at rest with AES-256-GCM.
- Data in transit between the app, our servers, and the fantasy platforms is protected with TLS encryption.
- The mobile app never talks to fantasy platforms directly with your credentials; all platform requests are made by our servers, so your credentials are not distributed to your device beyond the sign-in itself.
- Access to production systems is limited to JF Digital LLC.
Data retention and deletion
Hiding leagues: you can turn individual leagues off in the app (Settings → Manage Leagues) to remove them from your dashboard. Hidden leagues and their data are retained so you can re-enable them at any time.
Deleting your account: you can delete your account at any time from inside the app, under Settings → Delete Account. This takes effect immediately. If you have already uninstalled Concourse, email support@concoursefantasy.com from the address on your account and we will delete it for you within 30 days, and usually much sooner. Either route removes your account, your stored platform credentials and connections, and our copy of your fantasy data — your leagues themselves are never changed. See our account deletion page for details.
What survives deletion: when an account is deleted we keep a single non-identifying record — a one-way SHA-256 hash of the account's internal ID and the date it was deleted. It contains no name, email address, or fantasy data, and cannot be reversed to identify you. We keep it only so that a deletion can be confirmed if you later ask us to verify it.
We retain data only as long as your account is active or as needed to operate the service, resolve disputes, or meet legal obligations.
Children
Concourse is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will delete it.
Third-party platforms
Concourse is an independent product of JF Digital LLC. It is not affiliated with, endorsed by, or sponsored by ESPN, Yahoo, Sleeper, or the National Football League. Your use of those platforms is governed by their own terms and privacy policies. ESPN, Yahoo, Sleeper, NFL, and related marks are trademarks of their respective owners.
Changes to this policy
If we make material changes to this policy, we will update the effective date above and, where appropriate, notify you in the app. Continued use of Concourse after changes take effect means you accept the updated policy.
Contact
Questions about this policy or your data: support@concoursefantasy.com
JF Digital LLC · Tempe, Arizona, USA