Privacy Policy

Last updated: August 21, 2026

Introduction

Fantasy Sports Analytics LLC ("we," "our," or "us") operates Waiver Wizard (fantasywaiverwizard.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Account Information: When you create an account, we collect your email address and password (securely hashed).

League Credentials: To provide our service, we collect your league ID and platform-specific credentials (ESPN: SWID and espn_s2 cookies; Sleeper: username only). These are used solely to access your league's waiver wire data.

Payment Information: If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your credit card information directly.

Phone Number: Premium subscribers may optionally provide a US mobile phone number to receive SMS alerts. Providing your phone number is entirely voluntary and requires explicit opt-in via a verification code. Your phone number is used solely to deliver Waiver Wizard SMS alerts (roster injury and waiver status changes) and is never used for marketing, sold, or shared with third parties. You can remove your number at any time from Settings or by replying STOP to any message.

Usage Data: We may collect information about how you use our service, including alert preferences and settings. We use Vercel Analytics to collect anonymous, aggregated page view data to understand how visitors use our site. No personally identifiable information is collected by Vercel Analytics.

Chrome Extension — ESPN Connector

The Waiver Wizard ESPN Connector is an optional Chrome extension that replaces the manual step of copying your ESPN session cookies out of Developer Tools when connecting a private ESPN league. You never have to install it — manual entry is always available as a fallback during onboarding.

What it accesses: if installed, the extension can read the SWID and espn_s2 session cookies your browser holds for fantasy.espn.com, using Chrome's cookies API. That host is the only one the extension is granted, and it never sees or asks for your ESPN password.

When it acts: opening the extension's toolbar popup reads the cookies locally, in your browser only, to show you whether you're currently logged in to ESPN — nothing is sent anywhere at that point. The cookies are only ever transmitted off your device when you click "Connect with the ESPN Connector" on the private-league credentials step of onboarding. The extension does not monitor your browsing or act on its own; it only responds when you open its popup or a page on fantasywaiverwizard.com asks it to.

Where the data goes: the cookies are sent only to fantasywaiverwizard.com, and only at the moment described above — the extension is configured to respond exclusively to requests from our domain, so no other website can use it to request your ESPN session.

Uninstalling the extension does not affect any league you've already connected — it only removes the one-click convenience path for future connections.

A plain-English walkthrough of what the extension can and cannot access, who built it, and how to remove it lives on our ESPN Connector page.

How We Use Your Information

  • To provide and maintain our service
  • To monitor your league's waiver wire and send you alerts
  • To process your subscription payments
  • To send you email notifications (if enabled)
  • To send you SMS alerts for roster injuries and waiver status changes (Premium subscribers only, if opted in)
  • To respond to your inquiries and support requests
  • To improve our service and develop new features

Data Storage and Security

Your data is stored securely using industry-standard practices:

  • All data is encrypted in transit using HTTPS/TLS
  • Passwords are hashed using secure algorithms
  • League credentials are stored securely and used only for API access
  • We use Supabase for database hosting with built-in security features
  • Payment information is handled by Stripe, a PCI-compliant payment processor

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

  • Service Providers: We use third-party services (Stripe for payments, Resend for emails, Twilio for SMS) that may process your data solely to provide their services. Google AdSense would join that list if we begin serving advertising; it does not process any data for us today. Your phone number is shared with Twilio only to deliver SMS alerts you have opted into.
  • Legal Requirements: We may disclose information if required by law or in response to valid legal requests.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.

Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and associated data
  • Opt out of email notifications at any time
  • Opt out of SMS alerts at any time by replying STOP or removing your number in Settings
  • Cancel your subscription at any time

To exercise these rights, please contact us at support@fantasywaiverwizard.com.

Cookies and Advertising

We use cookies in three distinct categories. Only the first is required for the service to work; the other two are optional and, in the regions listed under "Your Choices About Cookies" below, are not set at all unless you consent.

  • Strictly necessary. Session and authentication cookies that keep you logged in and protect the site against request forgery. These cannot be switched off, because without them the service cannot identify your account.
  • Analytics. Vercel Analytics and Google Analytics, used to understand which pages people read and where they arrive from. Vercel Analytics collects no personally identifiable information.
  • Advertising. The X (Twitter) conversion pixel, which tells X whether a visit that began with one of our ads on X led to a signup, a purchase, or a completed game. This is the only advertising cookie on this site, and the only cookie set by a company other than us or our infrastructure providers. The X pixel is never loaded for visitors in the regions listed under "Your Choices About Cookies" below, or for any browser sending a Global Privacy Control signal. We do not currently serve advertising, so no Google AdSense cookie is set.

We also set three small first-party cookies of our own: ww-geo, which holds only a two-letter country code so we can honour the regional rules above without loading anything first; ww-utm, which records the campaign labels (source, medium, campaign name) from the first link that brought you here so we can tell which of our own campaigns work; and ww-ref, which records only the website name you arrived from (for example google.com) — never the page, the search you typed, or anything after the site name — so we can tell roughly how people find us. None of the three contains anything that identifies you, and the campaign and referrer cookies are both deleted as soon as they have been successfully recorded at signup, and otherwise expire on their own within 30 days. The campaign and referrer cookies are only set with your consent where the rules below require it, and never for a browser sending a Global Privacy Control signal.

We do not currently display advertising. If we do, it would appear only on the /games/ section of our site, served by Google AdSense, and never on your dashboard, settings, or any authenticated page. At that point AdSense would use cookies to serve ads based on your prior visits to our site and other sites on the internet, and you would be able to opt out of personalized advertising by visiting Google's Ads Settings.

Were that to happen, third-party vendors including Google would use cookies to serve ads based on a user's prior visits to our website, enabling Google and its partners to serve ads based on your visit to our site and/or other sites on the internet. For more information, visit Google's Privacy & Terms.

Advertising Partners

We do not currently run advertising. If we do, Google would be our only advertising vendor — we do not work with any other ad network, exchange, or header-bidding partner. Google may use its own partners to fill inventory; the current list of those companies, and what each does with data, is published by Google at How Google uses information from sites that use our services.

You can limit or switch off personalized advertising at any time, without affecting your Waiver Wizard account:

Your Choices About Cookies (Consent)

If you are visiting from the European Economic Area, the United Kingdom, or Switzerland, we ask for your consent before any analytics or advertising cookie is set. Until you make a choice, those categories are switched off — this is enforced in the site's own code through Google Consent Mode, not only in the consent banner. Strictly necessary cookies are set regardless, because the service cannot function without them.

Consent is collected through a banner shown on your first visit. You can change or withdraw your choice at any time by clearing this site's cookies in your browser, which makes the banner appear again — withdrawing consent is as easy as giving it. If your browser sends a Global Privacy Control signal we treat that as a refusal and do not ask.

Outside those regions, analytics cookies and the X conversion pixel are set by default and you can opt out using the links under "Advertising Partners" above. No advertising cookie is set by us today, because we do not serve ads.

How Long We Keep Your Data

We keep personal data only as long as we have a reason to, and we would rather state real periods here than a vague "as long as necessary."

  • Account information — for as long as your account is open. If you ask us to delete your account, we remove it and its associated data within 30 days.
  • League credentials — deleted as soon as you disconnect that league, or when your account is deleted, whichever comes first. We never retain an ESPN session cookie for a league you are no longer connected to.
  • Alert history and league snapshots — kept while your account is open, because the service uses them to avoid sending you the same alert twice. Removed with your account.
  • Phone number — kept until you remove it in Settings or reply STOP, at which point it is deleted.
  • Email delivery and engagement records — 24 months.
  • Billing and subscription records — 7 years, which is the period we are required to keep records for tax and accounting purposes. Card details are never held by us; Stripe handles those under its own retention policy.
  • Support correspondence — 24 months.

Your Rights in the EEA, UK, and Switzerland (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (or its UK and Swiss equivalents) gives you the rights below. Fantasy Sports Analytics LLC is the data controller for the processing described in this policy.

The legal bases we rely on: performance of a contract for your account, league connection, and the alerts you signed up for; consent for analytics and advertising cookies, SMS alerts, and marketing email; legitimate interests for keeping the service secure and preventing abuse; and legal obligation for billing and tax records.

You have the right to:

  • Access — obtain a copy of the personal data we hold about you.
  • Rectification — have inaccurate data corrected.
  • Erasure — have your data deleted ("the right to be forgotten").
  • Restriction — ask us to pause processing while a dispute is resolved.
  • Portability — receive your data in a machine-readable format.
  • Objection — object to processing carried out on the basis of legitimate interests.
  • Withdrawal of consent — withdraw consent at any time, without affecting processing carried out before you withdrew it.
  • Complaint — lodge a complaint with your national supervisory authority. In the UK that is the Information Commissioner's Office.

To exercise any of these, email support@fantasywaiverwizard.com. We respond within 30 days and we do not charge for it.

Your Rights in California (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights over your personal information.

Categories we collect: identifiers (email address, and a phone number if you opt into SMS); commercial information (subscription and payment status); internet activity (pages viewed, alert preferences, and the cookie categories described above); and the league credentials you provide to connect a fantasy league.

Do Not Sell or Share My Personal Information. We do not sell your personal information, and we never have. We do not currently serve advertising either; if we begin, personalized advertising through Google may qualify as "sharing" for cross-context behavioral advertising under the CPRA. You would be able to opt out of that at any time by turning off ad personalization in Google Ads Settings, by using the industry opt-outs listed under "Advertising Partners" above, by enabling a Global Privacy Control signal in your browser, which we honor, or by emailing support@fantasywaiverwizard.com.

You also have the right to:

  • Know what personal information we have collected and how we use it.
  • Delete the personal information we hold about you.
  • Correct inaccurate personal information.
  • Limit the use of sensitive personal information — though we do not collect any of the categories the CPRA defines as sensitive.
  • Non-discrimination — we will not deny you service, charge you a different price, or give you a lower quality of service for exercising any of these rights.

Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected such information, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, please contact us at: support@fantasywaiverwizard.com

Waiver Wizard — Fantasy Sports Analytics LLC102 17th Ave NW PMB 1017Rochester, MN 55901