Read Option reads public Sleeper league data through Sleeper's open API: league settings, rosters, trades, drafts, and results. That is the entire input to every grade, profile, and suggestion. We hold Sleeper usernames and public transaction history. We do not have real names, emails, or contact information for the managers we grade, and we never try to find any.
An account adds your email address, account id, optional linked Sleeper username, email preferences, and private product state such as saved offers. We use these only to operate the account, provide requested league features, deliver required service messages, and send optional emails you explicitly select. They are never sold or shown to other users.
Sign-in runs on Supabase Auth, a managed identity service. If you set a password, it is stored (hashed) by Supabase; we never see or store passwords ourselves. Linking a Sleeper username checks through Sleeper's public API that the handle exists. It does not expose private Sleeper data.
Stripe processes your name, billing address, payment method, charges, invoices, refunds, and subscription. Read Option receives and stores only the Stripe customer, subscription, product and price identifiers plus the subscription status, paid-through date, cancellation state, plan, amounts, currency, and the policy versions accepted. We never receive or store your full card number.
We keep a minimal purchase-agreement record so we can provide support, honour refunds, prove what was accepted, meet tax and consumer obligations, and prevent fraud. Stripe's own privacy policy governs the payment details it processes.
Supabase provides authentication and the primary database. Stripe provides payments and subscription management. Resend delivers Read Option emails. Railway hosts the application. Sleeper, DynastyProcess, and nflverse supply the public football data used by the product. These providers process only the information needed for their role and may process it outside your province or country under their own safeguards and legal obligations.
The delete button first cancels and deletes the linked Stripe customer when one exists, then removes your email, linked username, private Offer Book, and Read Option account row. Stripe and Read Option may retain the minimum transaction and agreement records required for payment, tax, fraud, consumer, or legal obligations. Those retained records are not used for marketing. Public Sleeper data about your leagues is not tied to your account and continues to exist, the same as before you signed up.
Your league activity is public through Sleeper's API, and that is the only place we read from. If you want your profile excluded from Read Option anyway, open a request at our contact page with your Sleeper username and we will honor it.
We count which parts of the product get used and whether a visit reaches a successful scout, trade grade, personalized tool, or purchase. To connect those steps, your browser creates a random id that stays in this tab and expires after 30 minutes without activity. Shared Read Option links carry a separate random id so we can tell whether sharing brought someone back.
Those random ids are not tied to your account, Sleeper username, league, device, or identity. No cookies, no IP addresses, no fingerprinting, no third-party analytics scripts on Read Option pages. Stripe's separate hosted Checkout and portal use their own security and fraud controls. We keep aggregate page/day, referrer-host, and card-preview counts. The connected journey stores only an allowlisted event name, an optional campaign label, the random ids, and whether the visit was our own testing.
Trade alerts and the free weekly digest are separate optional preferences that you can change in your account or turn off with the unsubscribe link in every such email. Required account and billing messages, including purchase confirmations, payment failures, renewals, refunds, and cancellations, are transactional and are sent even if marketing-style league emails are off. A future paid GM briefing will have its own clearly identified preference before it is launched.
We keep account data while the account exists, private saved offers for their stated product window, anonymous measurement only as long as useful, and limited commercial records as required for the purposes above. We use access controls, provider-managed authentication, signature-verified billing events, and least-privilege credentials. No internet service can promise perfect security; if a breach creates a real risk of significant harm, we will investigate, document, notify affected people and report it where required.
You may ask what personal information we hold, request a correction, raise a privacy concern, withdraw optional email consent, or request deletion by using the contact below. We may need to verify that the account is yours.
If this policy changes materially, the version above changes and affected account holders are notified when appropriate. The rules of the road live in the terms of use.
Jonathan Gagnon carrying on business as Read Opton FF
81 Bay Street, Toronto, ON
Email: support@readoptionff.com
Phone: 647-463-4747
Free-profile exclusion requests may also use our public contact page.