Privacy

We keep data collection minimal to run the product and improve reliability.

What we collect

  • Basic usage analytics (page views, feature use) without sensitive content
  • Operational logs (request_id, route, response time) for reliability
  • Account details when you sign up: your email address and, if you create a password, a one-way cryptographic hash of it — never the password itself
  • OAuth identifiers if you sign in with Google (email and your Google account id)
  • Your linked Sleeper username and league selection, if you connect a league

What we do not collect

  • No plaintext passwords — a password you set is stored only as a salted PBKDF2-SHA256 hash, which cannot be reversed to recover it
  • No payment details unless you enable payments (Stripe handles card data)
  • No personal notes or league chat content

Control and export

  • Request export or deletion any time: trust@customvenom.com
  • Turn off analytics in Settings (when available)
  • OAuth unlink in Settings (when available)