Down Field / privacy
How Down Field uses your data.
Privacy notice · Updated September 13, 2026
Account and connection data
We store your verified email address, account identifiers, session records, and the public verification information needed for passkeys. Private passkey material stays with your authenticator.
For fantasy connections, we store platform identifiers, your selected leagues, and source-attributed league snapshots such as rules, rosters, matchups, transactions, and draft history. Those snapshots can include names and team information that your fantasy platform makes available within the league.
ESPN sign-in
Passwords and verification codes entered in the dedicated connection form are processed temporarily. They are not saved as reusable passwords. Reusable ESPN session credentials are encrypted in a separate vault. Fantasy credentials are never returned by the AI tools.
Who receives data
Resend delivers account login and verification emails. ESPN and Sleeper receive the requests needed to connect and retrieve platform data. When you authorize an AI integration, the requested tool results are shared with that AI provider under the permissions you grant. Its own privacy terms govern data it receives.
Access to your saved connections is restricted to your account and authorized integrations. Operational logs omit passwords, verification codes, access tokens, and provider credentials.
Retention and your controls
Saved league history is retained for up to 24 months. Disconnecting removes active saved platform credentials and stops synchronization. You can keep that connection’s history or choose to delete it.
Use Your data to export account data or request account deletion. Deletion revokes account access and records a cleanup receipt. If a dependency is unavailable, cleanup can remain pending until it can be completed safely.
Managed encrypted backups expire within 30 days. A minimal deletion record containing opaque account identifiers and timestamps is retained separately so a restore does not revive deleted data; it contains no email address, password, or league content.
Questions
Visit Help or contact [email protected] for account and privacy questions.