Privacy Policy

Effective August 18, 2026 · Last updated August 18, 2026

RosterCue is operated by Just Bits LLC. This policy describes what we collect, why, and what you can do about it. We have tried to make it specific rather than broad, so that it describes what the software actually does.

What we do not do

These are worth stating plainly, because they are unusual:

  • No advertising and no ad networks.
  • No third-party analytics or tracking. RosterCue loads no Google Analytics, no tag manager, no session recording, no advertising pixels, and no third-party scripts of any kind.
  • No tracking cookies. RosterCue does not set advertising or analytics cookies.
  • We never sell or rent your personal information.
  • We never see your card number. Payments are handled entirely by Stripe on Stripe's own hosted checkout page. Card details never reach our servers.

What we collect

Account information. Your username, email address, and a one-way hash of your password. We cannot read your password.

Fantasy data you enter. Saved teams, rosters, league scoring settings, alert preferences, and draft state.

League connections. If you sync a Sleeper or ESPN league, we store the league and team identifiers needed to keep your draft board in sync. These integrations are read-only: RosterCue never makes picks or changes anything in your league.

Payment records. When you buy a Season Pass, Stripe sends us a customer identifier, a payment identifier, the amount, the currency, and the payment status. We store those to grant and verify your access.

Email delivery records. Queued and sent notification records, so alerts are not sent twice.

Server logs. Ordinary web server logs, including IP address and request information, kept for security, abuse prevention, and debugging.

Browser storage

RosterCue stores your sign-in token and your in-progress draft in your browser's localStorage. This stays on your device, is not transmitted to third parties, and is cleared when you sign out or clear your browser data. It is functional storage, not tracking.

Why we use it

  • To operate your account and show you your teams and rankings.
  • To determine whether you have a paid Season Pass.
  • To send transactional email you asked for: verification, password resets, and alerts.
  • To keep the service secure and prevent abuse.
  • To meet accounting, tax, and legal obligations.

We do not send marketing email. Every email RosterCue sends is either something you requested or something required to operate your account.

Who we share it with

We use a small number of service providers, each for one job:

  • Stripe — payment processing. Stripe receives your email and payment details directly.
  • Resend — outbound transactional email delivery.
  • Amazon Web Services (Lightsail) — server hosting.
  • Cloudflare — network protection and traffic delivery.

We also read public data from nflverse, Fantasy Football Calculator, the National Weather Service, Sleeper, and ESPN. Those requests are made by our server, not by your browser, and they do not carry your personal information.

Beyond this, we disclose personal information only when legally required, or to protect our rights or the safety of others.

How long we keep it

Account and fantasy data is kept while your account is open. When you delete your account, it is removed promptly.

One exception: anonymized payment transaction identifiers are retained after deletion for accounting, tax, fraud prevention, and legal compliance. These are stripped of your name and email and cannot be used to sign in.

Your choices

Both of these are self-service on your Account page — you do not have to email anyone or wait:

  • Export your data. Download a complete JSON copy of your account, saved teams, preferences, notifications, and billing records. The export deliberately contains no passwords or access tokens.
  • Delete your account. This permanently removes your saved teams, league connections, alerts, preferences, and sign-in credentials, then anonymizes your user record.

You may also unsubscribe from alerts in your preferences, or email [email protected] with any privacy request, including access, correction, or deletion. We respond to verified requests within 30 days.

If you are in a jurisdiction with specific data rights — for example California, or the EU and UK — those rights apply to you, and the export and deletion controls above are how we honor them.

Security

Traffic is encrypted in transit with HTTPS. Passwords are stored only as one-way hashes. Access tokens are signed and expire. We limit request rates and restrict administrative access.

No system is perfectly secure. If we discover a breach affecting your personal information, we will notify affected account holders by email.

Children

RosterCue is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.

Changes

If we materially change this policy, we will email registered account holders and update the "Last updated" date above.

Contact

Just Bits LLC · [email protected]