Privacy Policy

What we collect

• Account info: your email address, a securely hashed password (never stored in readable form), and optionally your first/last name.
• League info: your Scoresheet league name, type, and team number, found automatically at signup or entered by you.
• The Scoresheet page URLs and pasted league data (rosters, transactions, schedule, prospects) you provide, used to power the app's modules.
• Feedback you submit through the in-app feedback form.
• Basic account activity (last login, last visit) to keep your session working.

Optional: stored Scoresheet login

If you choose to save your own Scoresheet login inside Front Office (Settings → Data Sources), we store your Scoresheet first/last name and password so the app can fetch your Lineup Card automatically on your behalf. That password is encrypted, not just hashed, since we have to use it to log in for you. It's never displayed, logged, or emailed anywhere. This is entirely opt-in: skip it and nothing is stored, you'll just paste your Lineup Card in manually instead. You can remove a stored login at any time from Settings.

What we don't collect

No payment information (Front Office is free). No advertising or analytics trackers, no ad cookies, and we never sell or rent your data.

How we use it

• To run the app's features: draft boards, lineup recommendations, matchup comparisons, and trade evaluations.
• To send account-related emails (password resets, feedback replies) through our email provider, Resend.
• To keep you signed in via a secure session cookie.

Who we share it with

• MLB's public Stats API: to pull real player statistics. No personal data is sent, only player/team lookups.
• Scoresheet.com: to fetch your league's own pages, and, only if you opt in, to log into your Scoresheet account on your behalf.
• Resend: our transactional email provider, used only to deliver the account emails above.

Cookies

One strictly necessary session cookie, used only to keep you signed in. No tracking or advertising cookies.

Data retention & deletion

Your data is kept as long as your account is active. You can permanently delete your account and all associated data at any time from Settings.

Security

Passwords are hashed, never stored in readable form. All traffic is encrypted (HTTPS). Any stored Scoresheet credential is encrypted at rest.

Changes to this policy

We may update this policy as the app changes. This page always reflects the current version, dated above.