Privacy
Sleeper Brain stores the account you sign in with and the league data you choose to sync. There is no third-party analytics SDK and no advertising network.
Account and leagues
- Login email is held by Supabase, the sign-in provider.
- A linked Sleeper username, and ESPN, Yahoo, or CBS credentials you paste, stay encrypted in the app database.
- Synced league snapshots (rosters, settings, seasons) are stored so draft, lineup, and trade tools can run.
- Optional feature history expires after 90 days.
First-party product events
The marketing page and the sign-in card send a small event to this app
(POST /api/landing/events). The same database records when an account
connects a league or runs a lineup, draft, or trade tool.
- An anonymous session id for this browser tab (
sb:landing-sessionin session storage). A later visit gets a new id. The email-confirmation handoff uses a separate pending-signup marker, not this id. - The page that referred you, reduced to scheme and host. Path and query are dropped.
- Campaign parameters (
utm_source,utm_medium,utm_campaign) when present on the link you opened. - Your browser’s User-Agent string, capped in length.
- After you confirm an account, the confirmed-signup event is tied to that account id. League and tool events are tied to the signed-in account.
The IP address is used only to rate-limit the event endpoint. It is not written to the database.
Your controls
Signed in, open Profile and choose Download my data or Delete account. Delete removes the league data and the product events tied to your account id.