Gridiron Value collects only the account, product, support, billing-status, and optional league information needed to operate and protect the service.
We use account identity, legal acceptance, preferences, subscription status, support messages, technical diagnostics, and user-initiated league imports to provide features, secure accounts, troubleshoot problems, and improve the product.
Essential browser storage supports authentication, security, theme, consent choices, and saved product settings. Optional analytics are enabled only after affirmative consent, and the choice can be reopened from Cookie preferences.
Limited information is shared with Auth0 for authentication, Azure and Render for hosting, Stripe for payments, and Sleeper for user-initiated public league imports. Controls include authenticated APIs, authorization checks, rate limiting, database access controls, and transport encryption in production.
Account records remain while an account is active or when needed for operational, tax, fraud-prevention, dispute, and legal obligations. After canceling an active subscription, the self-service control in Profile removes the Auth0 identity and first-party account, preferences, favorites, alerts, Sleeper connection, selected leagues, and account-linked messages.
Depending on location, users may have rights to access, correct, receive, restrict, object to, or delete personal information and withdraw optional consent. Users may update preferences, disconnect imports, control communications, and delete an account in Profile or submit a request through Contact.
Gridiron Value is not directed to children under 13. Material changes are published with a revised effective date.