Privacy

We connect to your fantasy leagues to give you advice. That is the job. Everything below is about being specific: what that means in practice, what we never touch, and the one thing we ask permission for.

Cardiant Sports Front Office is operated by Cardiant Security LLC.

Your account. Your email address and display name, held through our authentication provider, Clerk. We do not store your password — Clerk does, and we never see it.

Your leagues. When you connect a league from Sleeper, ESPN or Yahoo, we read what that platform gives us about it: rosters and starters, draft picks and auction prices, waiver and free-agent moves and what was bid, trades, standings and results. We also keep prior seasons of the leagues you connect, which is what lets us tell you something useful on day one instead of asking you to wait a year.

We do not have your fantasy platform password. Connections use each platform's own credentials or public endpoints, and you can disconnect a league at any time.

If you join the waitlist from this site, we store your email address, the date, and which page you came from — nothing else.

If you subscribe to a paid plan, Stripe processes the payment and holds the card details. We never see or store a card number.

Product usage categories. Replit-hosted analytics measures page views and selected actions on our websites. The native app sends the same draft, waiver, trade, lineup, Saved Work, and notification categories to our first-party project analytics service; no external analytics provider or key is used. These events do not include player or league names or IDs, your account ID, questions, notification text, search text, or other free-form content. The native app uses a random identifier that lasts only until the app process restarts.

• Your conversations with the assistant. Front Office chat is not stored. Questions are answered in the moment and are not written to our database, not kept against your account, and not used to train anything.
• Anything outside fantasy football. No browsing history, no contacts, no location, and no tracking you across other sites.
• Payment card details. Stripe holds those.
• Advertising or cross-site tracking. We run no advertising trackers and do not use product analytics to follow you across other sites or apps.

We use cookies for one thing: keeping you signed in. Those are set by Clerk, our authentication provider, and are required for the product to work — without them there is no way to know the request is yours.

We do not set advertising cookies, and we do not sell or share your data with advertisers.

Replit's website analytics is cookieless. Native product analytics does not persist its random analytics identifier.

Everything above is used to help you. There is a second, separate thing we would like to do, and we will not do it unless you say yes.

Pooled across many leagues, this data answers questions no single league can: what a player actually went for in auctions this year rather than what a projection guessed, which strategies genuinely work, whether the managers who follow a given approach really do finish better. That makes our models sharper, and it is the difference between telling you what we think and telling you what is measurably true.

It is off unless you turn it on in your account settings, and you can turn it back off whenever you like.

• It is aggregate and anonymous. Published numbers are averages and rates across many leagues — never your team, your name, or your league identified.
• Nothing is published from a small group. We enforce a floor in code: at least 20 separate people who have opted in, and at least 30 league-seasons of data, before any figure is shown at all. A number drawn from a handful of leagues can be traced back to the people in it, so we do not produce one.
• Your advice does not change either way. Opting in does not unlock features and opting out does not withhold any. This is not a paywall.
• It is reversible. Switch it off and your leagues stop being included going forward.

We do not sell your data, and we do not share it with advertisers. We use a small number of service providers to run the product, and each sees only what it needs:

• Clerk — accounts and sign-in.
• Stripe — payments, if you subscribe.
• SendGrid — the emails we send you.
• Neon — the database the product runs on.
• Replit — the infrastructure it is hosted on.

We may also disclose data if the law requires it, or to protect the service and its users from abuse.

Your account data is kept while your account exists. League data is kept while the league is connected, and historical seasons are kept because they are what makes the advice useful — a model with no history has nothing to reason from.

Ask us to delete your account and we will delete it and the data tied to it. Aggregate figures already published cannot be un-computed, but by construction they contain nothing that identifies you.

• Disconnect any league, at any time, from Leagues.
• Turn league-wide insights on or off in Settings.
• Ask us what we hold about you, ask for a copy, or ask us to delete it — write to privacy@cardiantsports.com.

Depending on where you live you may have additional rights over your personal data — including access, correction, deletion and portability. We honour those requests regardless of where you live, because operating two standards is how the weaker one becomes the real one.

Front Office is for adults. You must be 18 or older to use it, and we do not knowingly collect data from anyone under 18. If you believe a minor has given us data, write to privacy@cardiantsports.com and we will remove it.

If we change what we collect or what we do with it, we will update this page and change the date at the top. For a change that materially affects what you have already given us, we will tell you directly rather than relying on you re-reading this page.