Privacy

Oskie · Fantasy AI Co-Manager is run by Paceway Consulting LLC. This page says plainly what Oskie keeps about you and why. Last updated October 21, 2026.

What the site keeps

• Your account: your username and a scrambled (hashed) password, or, if you use Sign in with Google, your Google email address, Google's account ID and your first name. Nothing else from Google: not your photo or last name.
• Your name: the first name used in your greeting, from Google or typed by you under Account information. Change or remove it there any time.
• Requests to join: if sign-up needs approval and you ask for access with Google, your email address and the date.
• Your league's sign-in key (if you connect a private league): the sign-in key (session cookie) your browser holds for ESPN, never your ESPN password. Stored encrypted (AES-256), used only to read leagues you're in, never shown back or logged. Deleted when you disconnect.
• League data: rosters, player stats, projections and news for your league, saved weekly to show trends and write reports.
• Your reports, player colour dots and trade reviews.
• Billing: your plan (Free, trial or Gold), your trial and renewal dates, and the customer and subscription numbers Stripe gives us. Your card number is entered on Stripe's page and never reaches us or is stored by us. We see only the card's brand and last four digits, as Stripe reports them.
• Feedback you send: emailed to us with your username, email, league, which part of the page you were on and your screen size. The site itself only keeps a count of how many you sent that day.
• Messages: when you last opened your messages, so new ones can be marked.
• Claude or ChatGPT connections (if you use one): which app you connected and when it was last used. The access keys themselves are stored only in scrambled form.
• Security counters: failed logins per network address, and how often an AI connection is used, to block password guessing and overuse. Only recent activity counts.

Who handles it

• Netlify hosts the site and keeps standard server logs and traffic counts.
• Cloudflare Web Analytics counts visits to the public pages (front page, About, Privacy, Terms) and to the login page with no cookies and no personal profile: the page, where the visitor came from, country, browser type and how fast the page loaded. Cloudflare receives the visitor's IP address as part of the request but does not use it to build a profile. On the login page the counter runs only on a plain visit, never when the link carries an invitation or a connection request, and it never sees what you type. It is not used on the signed-in dashboard or Admin.
• Neon runs the database where accounts, reports and billing records are stored.
• Stripe processes payments and keeps your card details. It sends us your plan status and billing numbers.
• ESPN is where league data comes from. The site only reads from ESPN and never changes anything there.
• Google handles Sign in with Google, if you use it.
• Resend sends the site's emails (approvals, "your weekly report is ready", trade-offer verdicts, billing notices and the feedback you send). It receives the email address and that message. Switch report and trade emails off any time in Email settings.
• Apple, Google, Mozilla or Microsoft deliver phone and computer notifications, only if you turn them on for a device (Notifications, under your initial). Each message is encrypted so only your device can read it: the delivery service sees that a message went to your device, not what it says.
• Anthropic (Claude) writes reports, dots, trade reviews and news summaries. It receives league and player data and the news it needs, never your password or your league's sign-in key. Under Anthropic's commercial terms, data sent through its API is not used to train its models. If you connect your own Claude or ChatGPT (through MCP), that app sees what you ask it to look up from your Oskie account, and OpenAI's or Anthropic's own terms and privacy policy cover what they do with your chats.
• OpenAI (ChatGPT) is involved only if you connect ChatGPT to Oskie. It then sees what you ask it to look up from your Oskie account. Oskie itself does not send your data to OpenAI.
• The National Weather Service and public NFL statistics (nflverse) supply game forecasts and player usage numbers. Only game locations and player names are looked up, never anything about you.

Nothing is sold or shared for advertising. There are no ads and no tracking cookies.

Cookies

One login cookie keeps you signed in, plus short-lived ones during Google sign-in, payment and when you allow Claude or ChatGPT. No tracking cookies.

Your choices

• Disconnect your league, Claude or ChatGPT any time from the site; the stored key or access is deleted right away.
• Turn notifications off for a device any time (Notifications, under your initial). Logging out on a device turns them off there too. The device's delivery address is deleted right away.
• Cancel Gold any time from Billing.
• Ask us what is stored about you, to correct it, to get a copy, or to delete your account entirely: email hello@oskie.app. This applies wherever you live, including the rights US state privacy laws such as California's give residents.

How long it's kept

• Your account, name and connections: while your account exists.
• Your league's sign-in key: until you disconnect or your account is deleted.
• Notification delivery addresses (one per device you turned on): until you turn it off on that device, log out there, the device stops accepting them, or your account is deleted. Never in the backups.
• Your reports, player colour dots and trade reviews: while your account exists, then kept with your username and email removed (see below).
• League data (rosters, player stats, projections, news): kept with no end date. Past seasons are how the advice gets measured and improved.
• Billing records: as long as tax and accounting rules require. Stripe keeps its own records under its own policy.
• Backups: a weekly copy of accounts, reports and league data is kept for 4 weeks in case something goes wrong, then deleted. It never includes your league's sign-in key, Claude or ChatGPT connections or notification delivery addresses.
• When you ask for your account to be deleted, it's done within 30 days: your account, email, name, league sign-in key, Claude or ChatGPT connections and notification delivery addresses are deleted, and any paid subscription is cancelled. Your past reports and colour dots are kept with your username and email removed, only to measure how good the advice was. They still mention your fantasy team, so they aren't fully anonymous. Everything deleted drops out of the backups within 4 weeks after that.

Children

Oskie isn't meant for anyone under 13, and paid plans are for people 18 and older. If an account belongs to someone under 13, email us and it will be deleted.

Changes

If this page changes in a way that matters, the date at the top changes and we tell members by email or on the site.

Contact

Paceway Consulting LLC · hello@oskie.app

About · Terms · Open Oskie