Effective June 18, 2026

The Sunday Chronicle ("TSC," "we," "us") is a fantasy football league-history and live-season platform built and operated by a single developer. This policy explains what data we collect, how we use it, and what choices you have.

1. What we collect

Account information

When you create an account we collect your email address and (when you sign in with Google) your Google display name and profile photo. We do not see or store your Google password.

Fantasy league data

To build your league's almanac we ingest league, manager, roster, matchup, draft, and transaction data from the fantasy platforms you connect — Sleeper, ESPN, NFL.com, and Yahoo. For Yahoo we use OAuth and store the resulting access and refresh tokens, scoped to your account and protected by row-level security plus Supabase's at-rest disk encryption. For ESPN and NFL.com we accept the cookies you choose to provide so we can read private-league data on your behalf.

Payment information

Subscriptions are processed by Stripe. We never see or store your card number. Stripe shares with us a customer ID, the plan you bought, and the subscription state (active, past due, canceled). Read Stripe's privacy notice for details on how they handle payment data.

Usage and diagnostics

We log basic request metadata (timestamps, paths, status codes) for debugging and abuse prevention. We do not run third-party analytics or ad-tracking pixels.

2. How we use your data

To:

• Run the service you signed up for — sync your leagues, render the almanac, send transactional emails.
• Bill you and keep your subscription in good standing.
• Investigate bugs, abuse, and platform errors.
• Contact you about your account or material changes to the service.

We do not sell your data. We do not use it to train any AI model outside of the league-specific summaries and trade grades shown in your own dashboard.

3. Who we share with

We share data with the following processors, only as needed to operate the service:

• Supabase — our database and authentication provider (US-hosted).
• Vercel — our hosting and edge-network provider.
• Stripe — payment processing and subscription management.
• Google — only if you sign in with Google; we receive identity, they receive nothing from us about your league activity.
• Groq — used to generate AI trade summaries when that feature is enabled; only the trade in question is sent, never your account identity.

We disclose data when required by a valid legal request, or to protect our users, our service, and our rights.

4. Cookies

We use a small number of first-party cookies for authentication, session state, mobile/desktop view preference, and CSRF protection. We do not use cookies for cross-site tracking or advertising.

5. Data retention

We keep your account and league data for as long as your account is active. If you delete your account, we remove your account record and league configuration. We may retain payment records and limited audit logs for as long as required by tax and accounting law.

6. Your rights

You can:

• Access and export your account data on request.
• Correct anything we have on you.
• Delete your account at any time from /account, or by emailing us.
• Disconnect any platform integration from your dashboard.

If you are in the EU, UK, or California, you have additional rights (access, portability, deletion, restriction, objection). Email us and we will honor them within the timelines required by law.

7. Children

The service is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has signed up, email us and we will delete the account.

8. Security

We use industry-standard encryption in transit (TLS) and at rest for credentials. No system is perfectly secure; we recommend a unique password and enabling Google sign-in where possible.

9. International users

The service is operated from the United States. By using it you consent to the transfer and processing of your data in the U.S.

10. Changes to this policy

If we make material changes we will update the effective date above and, where required, notify you by email. Continued use of the service after changes take effect means you accept the revised policy.

11. Contact

Questions, requests, or complaints: jzffgames@gmail.com.