League Warden

Privacy policy

Effective date: November 3, 2026 · Operator: Leon An

League Warden (formerly League Winner) helps you plan and follow an NBA fantasy basketball draft and manage your fantasy leagues during the season. This policy explains the account, draft and league information the extension and War Room use.

Account and data you create

When you sign in with Google, we receive your Google account ID, email address, and display name to identify your League Warden account. Web sign-in uses the openid, email, and profile scopes; the Chrome extension requests userinfo.email for sign-in. We do not request Gmail, contacts, or Google Drive access. We store the leagues, rankings, starred players, and preferences you save.

Rankings you share

If you choose to share a ranking, we publish a copy of it at a link you can give to others: the ranking's name and, in order, each player's name, team and position. Anyone with the link can view it, and the page asks search engines not to index it. Your name and email address are not shown. The copy changes only when you click Update, and it is deleted when you stop sharing, delete the ranking, or delete your account.

Draft sessions contain the league settings captured when the session began, strategy choices, recorded picks and board player IDs, your choices when a draft-room name could match more than one player, the session revision, and the board version used. Completed drafts remain viewable until 2027-06-30, then the retention job deletes them. An unfinished draft expires 24 hours after its last activity. The daily retention job deletes it once it has been expired for at least another 24 hours. Account deletion removes your leagues, lists, and draft sessions from the active database. Copies may remain temporarily in the hosting provider's scheduled backups.

Sign-in uses hashed refresh tokens, web sessions and token families. The daily retention job deletes those records 30 days after they expire or are revoked. It deletes an account and its data after 18 months without a sign-in or token refresh.

Draft-room information

When you enable tracking for a supported ESPN or Yahoo draft room, the extension reads visible player names, teams, positions, platform player IDs, pick order, and the room's reported league settings. It sends those facts to the League Warden service to reconcile picks and update advice. Platform player ID bindings are held only for the running session and are not persisted. For tab attachment, the extension temporarily keeps the supported room's origin, path and league ID in browser session storage. The draft-room tracker does not send page HTML, cookies, ESPN or Yahoo credentials, or room URLs to the service.

Connected leagues

If you connect a fantasy league, we keep its latest snapshot in your account: league settings, fantasy team names, rosters, draft results, free agents, every week’s matchup schedule and scores (including field-goal and free-throw makes and attempts behind percentages), transactions, and which team is yours. You can connect a public ESPN or Yahoo league by pasting its link, paste a draft or roster table, or sync a league from a page you open in Chrome with the extension. For extension sync, the extension reads the league data from that page after you accept its updated notice and sign in. It removes manager names, nicknames, email addresses, member and owner IDs, and other personal fields before sending one league to our service. The service discards the raw capture after parsing it. The extension temporarily reuses past Yahoo scoreboards in its worker memory while it is running; it does not keep a separate persistent scoreboard cache. An extension-synced league can refresh when you visit its page, at most hourly, or when you choose Sync now. Public and remembered ESPN leagues can refresh when viewed or when you choose Sync now.

For a private ESPN league, you may separately choose to provide your espn_s2 and SWID cookie values so the service can refresh that league. We encrypt those values for your account and league and do not return them to the browser or put them in application logs. This option is unavailable unless it is enabled on the service. We do not store a Yahoo login. Disconnecting a league deletes its saved snapshot and any saved ESPN login. Connected leagues are also deleted when you delete your account or after the season ends on June 30, 2027.

Use and sharing

We use this information to run your account, lists, draft sessions, and recommendations. We derive our own aggregate counts of sign-ups and drafts started and completed. To apply fair-use limits, we also count how many times each account uses certain features each day, such as the trade analyzer, waiver and trade suggestions, and the waiver comparison. These counts contain no league or player details, are kept for 90 days, and are deleted with your account. We do not use a third-party analytics script, sell personal data, or use it for advertising. Render hosts the service and account database; Cloudflare provides the domain's DNS and sits in front of the service as a network proxy, so it processes your IP address and the requests your browser sends in order to deliver and protect them; Cloudflare R2 stores private board snapshots and provider caches. Google provides sign-in.

Zoho Mail handles messages sent to our support address. League Warden's use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Purchases

If you buy League Warden Pro, Stripe processes your payment and receives your email address for the receipt. We never receive or store your card details. We store only the purchase record needed to provide Pro: Stripe's checkout and payment identifiers and the date your pass ends, plus which draft used your free Pro draft. Stripe handles payment data under its own privacy policy.

Security and logs

Extension requests to the hosted service use HTTPS. League Warden's application logs contain method, route without IDs, status and duration. They exclude IP addresses, query strings, tokens, email addresses, pick payloads and league contents. Render may process network metadata and retain operational logs and database backups under its own retention schedule.

Your controls

You can pause draft tracking in the side panel, disconnect a connected league in My leagues, export your account data, or delete your account in account settings. Signing out clears the extension's stored tokens. For privacy questions, use the address on the support page.

About third-party sites

League Warden is not affiliated with or endorsed by the NBA, ESPN, or Yahoo.