This policy covers the Win Your League mobile app and
thedraftboss.com (together, "the Service"), operated by Alki Lane Creative
("we", "us"). The short version: we collect what the Service needs to work, we don't sell it,
and your fantasy-provider passwords never reach us.
Your logins stay with your providers
We do not store your Yahoo or ESPN username or password on our servers —
ever. Sign-in happens on Yahoo's and ESPN's own pages. What we store is the limited access
credential those services issue after you grant permission: a read-only OAuth
token for Yahoo, and the session credential ESPN issues. Both are held server-side under strict
access controls, are never shared, and can be revoked by you at any time (unlink in the app,
revoke in your Yahoo account settings, or change your ESPN password).
What we collect
Account information — the email address you sign up with (or the identity
provided by Sign in with Apple / Google), and a nickname if you set one.
Linked fantasy data — with your permission: your leagues, rosters, scores,
standings, and free-agent pools from Yahoo, ESPN, or Sleeper, used to power your dashboards,
alerts, and analysis. Sleeper data is public and read-only; only your Sleeper username is used,
and it is stored on your device.
Game data — leagues, teams, drafts, lineups, and results you create inside
our own games (Screwball Leagues, Pop Up Leagues, The Draft Boss, Cap Room Perfect).
Device push token — if you enable notifications, so alerts can reach you.
Usage records — basic metering of feature use (for example, AI questions
asked) to run fair-use limits and keep the Service healthy. Usage logs are pruned after 90
days.
Purchase records — what you bought and when. Web payments are processed by
Stripe; app-store payments by Apple or Google. We never see or store your card
number.
What we do with it
Run the Service: your dashboards, leagues, games, scores, and alerts.
Generate analysis: roster and matchup data is processed by AI services (Google Gemini) to
produce the advice and commentary you see, and by ElevenLabs to produce audio reports. These
processors receive only the data needed for the feature and no login credentials of any
kind.
Send the notifications and emails you've asked for. Every email includes an unsubscribe
link; every push channel has in-app controls.
What we don't do
We do not sell your personal information.
We do not run third-party advertising.
We do not store fantasy-provider passwords or payment card numbers.
Service providers
We use a small set of processors to run the Service: Supabase (database and hosting),
Cloudflare (web hosting), Google Gemini (AI analysis), ElevenLabs (audio), Expo (push
notifications), Resend (email), and Stripe (web payments). Each receives only what its job
requires.
Data retention and deletion
Your data is kept while your account is active. Usage and delivery logs are pruned after 90
days. You can delete your account at any time in the app (Settings → Delete
Account) — this removes your account, your linked-provider credentials, and the data
tied to you. You can also email us to request deletion.
Children
The Service is rated 13+ and is not directed at children under 13. We do not knowingly collect
personal information from children under 13; if you believe a child has provided it, contact us
and we will delete it.
Changes
If this policy changes materially, we will update this page and the effective date above.