Conflicted is a personal fantasy-football tracker that pulls your leagues together from ESPN, Yahoo, and Sleeper into one view. This page explains, in plain language, what we store and how to remove it.
Conflicted works without an account. Accounts are optional — you only have one if you choose to sign in by email. The sections about email and stored sessions apply only if you do.
What we store
Without an account: your platform connections live in your own browser as encrypted, HttpOnly cookies. They never leave your device except to talk to the fantasy provider on your behalf. We don't have a copy.
If you create an account: we store your email address (to sign you in) and, when you connect a platform, an encrypted copy of that platform's session so the connection follows you to your other devices.
How your credentials are protected
We never receive or store your ESPN, Yahoo, or Sleeper password. For ESPN we store the session tokens you provide; for Yahoo we use official sign-in (OAuth). Any stored session is encrypted with AES-256-GCM before it touches our database, so the database only ever holds unreadable ciphertext.
How we sign you in
Accounts use a one-time "magic link" emailed to you. We store only a hashed, short-lived version of that link's token; it works once and expires in 15 minutes. We don't use passwords, and we don't sell or share your email.
What we don't do
No advertising, no ad networks, no selling your data.
No tracking you across other websites.
No sharing your fantasy data with anyone.
Deleting your data
You're in control. You can:
Disconnect a platform at any time from within the app — this removes that platform's stored session.
Delete your entire account — this permanently erases your email and every stored session. From the app, choose “Delete account,” or email the address below and we'll do it for you.