Privacy policy

The short version

• We collect only what Ruxin needs to manage your leagues: your account, your leagues, and the sign-ins you choose to give it.
• Platform sign-ins (Sleeper, ESPN, Yahoo) are encrypted, used only to act in your own leagues, and never shown again.
• We don't sell your data, show ads, or share it with advertisers or data brokers.
• You can disconnect a platform or delete your account at any time.

What Ruxin collects

• Account: your email address, an optional name, and your password (stored only as a secure hash by our sign-in provider).
• Waiting list: the name and email you enter on the landing page.
• League data: for the leagues you connect, the information the platform shows you as a member: rosters, lineups, matchups, standings, transactions and league settings, plus the usernames of your Sleeper, ESPN or Yahoo accounts.
• What Ruxin does for you: the moves it suggests or makes, their reasons and results, your settings and guardrails, and any feedback you give (for example, why you denied a move) or problems you report.
• Usage: which pages are viewed, the referring site, device type and country (from the request), so we can see what's used and fix what isn't. We don't use third-party analytics or advertising trackers.
• Cookies and local storage: sign-in cookies that keep you signed in, and small settings kept in your browser (for example, where you are in the walkthrough). No advertising cookies.

Fantasy platform sign-ins

To read private leagues and make moves for you, Ruxin needs to act as you on each platform. It never asks for your Sleeper, ESPN or Yahoo password:

• Sleeper: the session sleeper.com keeps for your own sign-in, sent by you with the Send to Ruxin bookmark or the extension.
• ESPN: the two sign-in cookies ESPN sets for you (espn_s2 and SWID), pasted by you or sent by the extension.
• Yahoo: access granted through Yahoo's own sign-in page, which you can revoke in your Yahoo account.

These are encrypted in Supabase Vault as soon as they arrive. Only Ruxin's server can read them, they are never shown to anyone (including you) again, and they are used only to read and act in the leagues you connected, within the permissions and guardrails you set. Removing a platform in Settings > Account deletes its saved sign-in.

The Ruxin Connect extension

The Ruxin Connect browser extension exists for one purpose: to hand your Sleeper and ESPN sign-ins to Ruxin in one click.

• It reads the ESPN sign-in cookies (espn_s2 and SWID) and the Sleeper session from your browser, and nothing else.
• It does so only when you press Connect on a Ruxin page.
• It sends them only to Ruxin (ruxinai.com), over an encrypted connection, where they're handled as described above.
• It does not read your browsing history, other sites' cookies, page contents, or anything you type.
• It has no ads, analytics or trackers, and it doesn't sell or transfer data to anyone.

Its use of this information is limited to providing that single feature, and it complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

How Ruxin uses it

• To run the service: read your leagues, plan and explain moves, and make the moves you allowed.
• To email you: your invitation, account messages, and the alerts you turn on (all alerts start off).
• To improve Ruxin: denied moves and problem reports help us fix its decisions.
• To keep it secure and working, and when the law requires it.

When two managers in the same league both use Ruxin, neither one's suggestions use the other's data, settings, claims or votes.

Who else sees it

Only the services that run Ruxin, each for its own part:

• Supabase: database, sign-in and encrypted storage.
• Vercel: hosting the website and app.
• Resend: sending email.
• Sleeper, ESPN and Yahoo: Ruxin sends them the requests that read your leagues and make your moves, as you.
• FantasyPros: provides player projections; Ruxin doesn't send it anything about you.

We share data beyond these only if the law requires it, or with your consent. Ruxin isn't affiliated with Sleeper, ESPN or Yahoo.

How long it's kept

As long as your account is open. Platform sign-ins are deleted when you disconnect the platform. When you delete your account, we delete its data within 30 days, except where we must keep something by law.

Your choices

• Disconnect a platform or remove a league in Settings > Account.
• Turn emails on or off in Settings > Notifications.
• Ask for a copy of your data, a correction, or deletion of your account by emailing team@ruxinai.com.

Security

Connections are encrypted, platform sign-ins are encrypted at rest, and each account can see only its own data. No system is perfectly secure; if something happens that affects your data, we'll tell you.

Changes and contact

If this policy changes in a way that matters, we'll update the date above and tell signed-in users. Ruxin isn't meant for children under 13. Questions: team@ruxinai.com.