Privacy, in plain English.

This policy covers the RosterBots app (Android package com.rosterbots.app), the MegaCast waitlist and this website. RosterBots is made by Turbo Devs. Questions go to support@rosterbots.com.

The short version

• We never see your ESPN password or your Google password.
• We keep only what the app needs to watch your lineup and fix it.
• We don't sell your data, and the app has no ads and no ad trackers.
• You can delete everything from the app's Settings at any time.

What we collect

• An account ID. When you first open the app we create an account for you with a random ID. Every record we keep about you is tied to it.
• Your Google name and email, if you sign in with Google. Signing in is optional, and it's what lets automatic protection work and lets you get your account back on a new phone. Google tells us your account's email address, name, profile picture link and Google account ID. We use the email to identify your account and show it in Settings. Accounts set up before October 26, 2026 may have an email given by code instead.
• Your ESPN session. You sign in on ESPN's own page inside the app. ESPN gives that page two session cookies, which the app sends to our server when you sign in. We store them encrypted, and use them only to read your team and change your lineup as your settings allow.
• Your league and team. The league and team names and IDs, your roster as ESPN shows it (players, positions, injury status, projections and kickoff times), and your settings in the app.
• What RosterBots did. Every problem found, proposal made, move made or move that failed, so you can see it in the app's Activity screen.
• A push token, if you turn on notifications, so alerts reach your phone.
• Your waitlist email, and whether you use Android or iPhone, if you join a waitlist on this website.

What we don't collect

• No ESPN or Google password, ever.
• No phone number, location, contacts, photos or files.
• No analytics, and no cookies on this website.

How we use it

Only to run RosterBots: to read your ESPN team, find lineup problems, propose or make fixes as your protection level allows, send you alerts and receipts, and email you about the app if you joined a waitlist. We don't use your data for advertising, and we don't sell it.

Who it's shared with

• Supabase hosts our database, sign-in system and server code, and stores your ESPN session encrypted.
• Expo delivers push notifications, through Google or Apple's notification services.
• Google confirms who you are when you sign in with Google.
• ESPN receives your session cookies and lineup changes, on your instruction, because that's how RosterBots reads and changes your team. Nothing else about you goes to ESPN.
• Anthropic, only if you use Agentic Protection. Its AI model sees your team name, your roster, free agents, injury statuses, projections and kickoff times. It never sees your ESPN session, your email or your name.
• GitHub hosts this website and keeps standard server logs, such as IP addresses.

How long we keep it

Your data stays until you delete it. Forgetting your ESPN sign-in in Settings deletes the ESPN session and every league connection, with its activity. Deleting your account removes everything. Waitlist emails are kept until we've invited you, or until you ask us to remove yours.

Your choices

• Forget my ESPN sign-in in Settings stops all reading of your ESPN team and deletes the stored session.
• Delete my account in Settings permanently deletes everything RosterBots has about you. Without the app, follow our delete your account steps.
• Email support@rosterbots.com to see, correct or delete anything else, or to leave a waitlist.

Children

RosterBots isn't for children under 13, and we don't knowingly collect data from them.

Changes

If this policy changes, we'll update the date at the top, and tell you in the app when a change matters.