What the extension does
The League Read Browser Extension is operated by League Read, referred to here as “League Read.” Questions about this policy can be sent to support@leagueread.com.
The extension connects a browser to the user’s League Read account and helps the user discover and connect fantasy-football leagues belonging to the ESPN account signed into that browser.
Information accessed and collected
1. League Read account information
When the user links the extension, it receives and stores the League Read account identifier, account display name, browser-connection identifier, extension version, connection date, and a revocable League Read access token.
The access token is stored in the browser’s extension-local storage. League Read stores only a cryptographic hash of the token secret on its server.
2. ESPN authentication information
After the user grants ESPN access, the extension can read the “SWID” and “espn_s2” cookies associated with the signed-in ESPN session. These are authentication credentials.
The extension never reads or receives the user’s ESPN password. It does not save the ESPN cookies in extension-local storage.
The extension may check locally whether the cookies are present so it can show whether an ESPN session is available. Their values are not sent to League Read during this status check.
When the user explicitly selects and connects a private ESPN league, the extension sends the SWID and espn_s2 values directly to the configured League Read server over HTTPS. The League Read webpage does not receive or expose those values. League Read encrypts the ESPN credential at rest and associates it with the selected account and league.
3. ESPN league information
When requested by the user, the extension uses the signed-in ESPN session to request the user’s ESPN fantasy-football league list. It processes league names, league identifiers, seasons, and team names.
A normalized league list is provided to the League Read setup page so the user can choose a league. The extension does not permanently store that list. League Read stores the selected league and subsequently imports league settings, teams, rosters, matchups, transactions, and related fantasy-football information required to provide its service.
4. Operational information
League Read may receive normal HTTPS request information, including IP address, request time, user-agent information, extension version, request identifiers, response status, and browser-connection activity. This information is used for security, troubleshooting, abuse prevention, and operation of the service.
How information is used
Information accessed by the extension is used only to:
- Link the browser to the user’s League Read account.
- Display whether an ESPN session is available.
- Find ESPN fantasy-football leagues belonging to the signed-in user.
- Connect the private ESPN league explicitly selected by the user.
- Perform current and scheduled league imports.
- Secure, troubleshoot, and maintain the extension and League Read service.
League Read does not sell this information, use it for advertising, or use it to build advertising profiles. It is not used to determine creditworthiness or for lending purposes.
Information sharing
The extension communicates with ESPN to retrieve the signed-in user’s fantasy league information and with the configured League Read server to provide the features described above.
Information may also be processed by service providers that host or secure the League Read service, subject to appropriate confidentiality and security requirements. Information may be disclosed when required by law or when reasonably necessary to protect users, League Read, or the security of the service.
League Read does not provide ESPN credentials or private league information to advertisers or data brokers.
Storage and retention
The League Read connection token and connection details remain in extension-local storage until the user disconnects the extension, clears the extension’s storage, or uninstalls it.
Disconnecting the extension revokes its League Read token and removes the active connection from extension storage. League Read may retain limited revocation and audit metadata for security and operational records.
Encrypted ESPN credentials are retained until the user disconnects the ESPN league connection, removes the league, or deletes the associated account data, subject to the service’s ordinary backup-retention cycle. Imported league data is retained until removed through League Read’s Data & Privacy controls.
User choices
Users can:
- Revoke a browser connection from League Read’s Browser Connections page.
- Disconnect the extension from its popup.
- Disconnect the saved ESPN sign-in for a league.
- Remove an imported league and its private data.
- Uninstall the extension through the browser.
Security
Personal and sensitive information is transmitted using HTTPS. ESPN credentials are encrypted when stored by League Read. No method of storage or transmission can be guaranteed completely secure.
Third-party services
ESPN’s own privacy policy and terms apply when the extension communicates with ESPN. League Read is not affiliated with or endorsed by ESPN.
Chrome Web Store Limited Use
League Read’s use and transfer of information received through browser APIs is limited to providing and improving the user-facing features described in this policy and complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.
Changes to this policy
League Read may update this policy when the extension’s data practices change. The updated policy will identify its effective date. Material changes will be disclosed through the extension, its store listing, or the League Read website.
Contact
Chris Woodward
support@leagueread.com