what we collect
Sign-in identity. When you sign in with Google we receive your name, email address, and profile photo — we never see your Google password and we do not request access to your Gmail, Drive, contacts, or any other Google data. When you sign in with email, we store the address you verify via a one-time link or code; we do not set a password on your account.
League data. The Sleeper league IDs you link, the roster you select in each league, and preferences such as your Strato-Strategy window. League rosters, players, and transactions are read from Sleeper’s public API; we never ask for and cannot store your Sleeper password.
Billing. Payments are processed entirely by Stripe. We store your subscription status and Stripe customer reference — never your card number.
Operational logs. Standard server logs (IP address, request timing, errors) used to keep the service running and secure.
how we use it
To run StratoSports: sign you in, build analytics for your linked leagues, process subscriptions, and answer support requests. That’s it.
We do not sell your personal data, share it for advertising, or use third-party advertising or cross-site tracking cookies. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
cookies & analytics
A secure session cookie keeps you signed in, and a small preference cookie stores choices such as your Strato-Strategy window. We use first-party analytics (including Vercel Analytics and Speed Insights) to understand performance and reliability. Advertising measurement scripts (for example Google Ads or Meta) load only when those campaigns are configured. We do not sell your personal data.
who we share with
Only the processors required to operate the service: Google (authentication), Stripe (payments), and our US cloud hosting and database providers. Each receives only what it needs to do its job. We may also disclose information if required by law.
retention & deletion
We keep your account data while your account exists. Email support@strato-sport.com from your account address and we will delete your account and associated data — linked leagues, roster selections, and preferences. Some billing records may be retained where tax or accounting law requires it.
security
Data is encrypted in transit, access is limited to what the service needs, and we do not store account passwords — authentication uses Google OAuth or a one-time email link/code. No system is perfectly secure, but we keep the attack surface deliberately small.
children
StratoSports is not directed to children under 13, and we do not knowingly collect personal information from them.
changes & contact
If this policy changes materially we will update the effective date at the top of this page. Questions: support@strato-sport.com. Brocone Companies LLC · United States. See also our Terms of Service.