Privacy

What Fade stores, why it stores it, and what happens when you delete your account.

This describes what the software actually does, checked against the database schema. It has not been reviewed by a lawyer.

What Fade stores about you

Email address: To sign you in. Fade has no passwords — signing in sends a single-use link to this address.
Sessions: One row per signed-in browser, so you stay signed in. You can end all of them from Account.
Provider connections: For a league you connect, the provider's own identifiers for you and your team. For providers that use OAuth, a refresh token — held so Fade can re-read your league without asking you to sign in again.
Leagues and their rules: Scoring rules, roster positions, waiver settings — read from the provider, stored as the provider states them.
Roster snapshots: What your roster was at a point in time. This is what makes a past recommendation reproducible: without it there is no way to show what Fade could see when it spoke.
Recommendations Fade made: What was recommended, when, and on what evidence.

Passwords: There are none. Sign-in is a link to your address.
Payment details: There is no billing in this build — no payment provider, no stored card, no metering.
Your provider password: Fade never asks for it and could not use it.
Your address in the rate limiter: Sign-in attempts are counted against a one-way hash, so the counting table cannot identify anyone.

Removed: Your account and email, every session, connected provider accounts and their tokens, your league connections, any unused sign-in link — and the rosters of leagues nobody else is connected to.
Kept: Recommendations Fade made, with your account id removed. This is the record Fade grades itself against, and letting it be erased by deleting an account would mean a bad recommendation could be deleted along with the person who received it.
Also kept: Leagues someone else is still connected to, and their rosters — that data is theirs as much as yours.
How: Account → Delete account. It asks you to type your address, and there is no undo.

Your fantasy provider: Fade reads from them. It sends them nothing about you beyond the identifiers needed to read your own leagues.
Email delivery: Sign-in links are sent through an email provider, which necessarily sees your address and the message.
Nobody else: Fade does not sell data, and there is no advertising or third-party analytics on the signed-in product.

Questions, or want your data removed a different way? Account settings has deletion, or reply to any Fade email.