The Cardinal Edge

Privacy Policy

Effective July 1, 2026

# Privacy Policy

**Effective date:** July 1, 2026 **Version:** 1.0

1. Information we collect

  • **Account information:** email address, name, and (if using email/password) a hashed password. We never store plaintext passwords.
  • **Social auth:** when you sign in with Google or Apple, we receive your verified email and a unique identifier from that provider. We do not store your Google or Apple password.
  • **League data:** roster, scoring, and league metadata synced from platforms you connect. This data is fetched on your behalf using credentials you provide.
  • **Usage data:** pages visited, features used, timestamps. Used to improve the Service.
  • **Marketing opt-in:** only if you explicitly consent during registration.

2. How we use your information

  • Provide, operate, and improve the Service
  • Authenticate your identity
  • Sync your fantasy league data on your behalf
  • Send product updates if you opted in (unsubscribe anytime)
  • Comply with legal obligations

3. Data sharing

  • We do not sell your personal data. We share data only:
  • With service providers who help operate the Service (e.g., hosting, email)
  • If required by law or to protect the rights of The Cardinal Edge

4. Data retention

Account data is retained as long as your account is active. You may request deletion at any time by contacting us.

5. Security

We use industry-standard encryption in transit (TLS) and at rest. Passwords are hashed with bcrypt. Session tokens are stored as SHA-256 hashes.

6. Cookies

We use a single httpOnly session cookie (`tce_session`) for authentication. We do not use advertising or tracking cookies.

7. Third-party services

We connect to third-party fantasy platforms at your direction. Their privacy practices are governed by their own policies.

7a. ESPN browser helper

For ESPN private leagues, you may install the optional Cardinal Edge ESPN Sync browser extension. It only reads two ESPN session cookies (`SWID` and `espn_s2`) from espn.com while you are already signed into ESPN Fantasy, then hands those values to The Cardinal Edge via a same-origin page so we can sync your leagues. We store them encrypted at rest. The extension does not read your ESPN password, browsing history, or cookies from other sites. You can remove the extension at any time and use the manual cookie-paste fallback on Connections instead.

8. Your rights

You may request access to, correction of, or deletion of your personal data by contacting legal@thecardinaledge.com. Depending on your jurisdiction, additional rights may apply.

9. Children

The Service is not directed to children under 18. We do not knowingly collect data from minors.

10. Changes

We may update this Privacy Policy. Material changes will be communicated via email or in-app notice.

11. Contact

Questions about this Privacy Policy: legal@thecardinaledge.com