Browser Extension Privacy Policy

Summary

The Edge Pro Fantasy Connector extension reads two cookies (SWID and espn_s2) from espn.com, and only when you explicitly click Connect ESPN to Edge Pro. It sends those two cookies, over HTTPS, to edgeprofantasy.com/api/espn/connect, which stores them in a signed, httpOnly cookie in your browser. We do not store your ESPN credentials in a database, share them with third parties, sell them, or use them for advertising.

What the extension can access

• Cookies on espn.com (the cookies permission with https://*.espn.com/* host access). Used only to read SWID and espn_s2 when you click Connect.
• The URL of your active tab (the tabs permission). Used only to detect whether you're on an ESPN, Yahoo, or Sleeper fantasy league page and to extract the league ID from the URL.
• Local extension storage (the storage permission). Used only to remember the API base URL for development overrides. No personal data is stored here.

What the extension does NOT do

• It does not read your browsing history, bookmarks, passwords, or autofill data.
• It does not inject scripts into web pages or modify page content.
• It does not track which sites you visit beyond detecting fantasy.espn.com, fantasy.yahoo.com, and sleeper.com / sleeper.app for the toolbar badge.
• It does not load or execute any remote code. The extension's logic ships entirely in the bundle you install.
• It does not communicate with any server other than edgeprofantasy.com.
• It does not collect analytics, telemetry, or usage metrics.

How your ESPN cookies are handled after Connect

1. You click Connect ESPN to Edge Pro in the extension popup.
2. The extension reads SWID and espn_s2 from your browser's cookie store for espn.com.
3. The extension POSTs those values to edgeprofantasy.com/api/espn/connect over HTTPS.
4. Our server signs the pair with an HMAC and writes them to an httpOnly, secure cookie in your browser. The cookie expires after 30 days.
5. When you use Edge Pro to look up an ESPN private league, our server reads that signed cookie, attaches your ESPN cookies to a single request against ESPN's API, and uses the response to compute draft recommendations. The cookies are not written to disk on our servers.
6. If you save a paid draft tied to a private ESPN league, the cookies may be persisted in our database alongside that draft record so the tool can refresh league state during your draft. They are encrypted at rest and only used for that purpose.
7. You can disconnect at any time by clicking Paste manually on the Edge Pro setup page (which clears the signed cookie) or by signing out of ESPN, which invalidates the underlying SWID/espn_s2 values.

Yahoo and Sleeper

For Yahoo and Sleeper league pages, the extension never reads cookies. It only reads the active tab's URL to extract the league ID, then opens edgeprofantasy.com/setup with that ID in the query string so you don't have to copy it manually.

Data we do not collect

The extension does not collect personally identifiable information, health information, financial information, authentication credentials for other sites, personal communications, location, web history, user activity, or website content. The only data that crosses the network from the extension is the explicit SWID + espn_s2 payload, sent only when you click Connect.

Third parties

The extension does not share any data with third parties. Edge Pro Fantasy as a whole uses Supabase (database hosting), Vercel (web hosting), and Stripe (payments) for the paid product, governed by the main Edge Pro Fantasy privacy policy. The extension itself does not interact with any of those except by handing off to our own first-party domain.

Contact

Questions about this policy or how the extension handles your data: edgeproanalytics@gmail.com.