Privacy Policy
Last updated: July 11, 2026
This Privacy Policy explains what information Margins ("we," "us," "our"), operated by Latent Data Labs, collects when you use marginsff.com (the "Service"), and how we use it.
1. Information We Collect
Account information — When you sign up, our authentication provider (Clerk) collects your name and email address. We store a copy of this (synced from Clerk) along with your account preferences (default scoring format, plan tier).
Billing information — If you subscribe to a paid plan, our payment processor (Stripe) handles your payment details directly — we never receive or store your full card number. We store only your Stripe customer/subscription IDs and your current plan tier, to know what you're subscribed to.
AI usage data — We log the token count and cost of each AI request you make, to enforce usage allowances and for internal auditing. We do not log the full content of your AI conversations for any purpose beyond displaying your own chat history back to you.
Draft and league data — Draft picks, watchlist notes, draft queue entries, and any leagues you import are stored and tied to your account so the app can function.
Multiplayer draft rooms — When you join a shared draft room (via an invite link from someone else), your Margins account display name is visible to the other participants in that room, so everyone knows who's who. Draft rooms are invite-link only — there's no public directory or matchmaking, so only people you or a fellow participant shared the link with can see this.
Third-party league credentials:
- Sleeper — only a public username/league ID; no credentials.
- ESPN — for private league imports, you provide your own ESPN session values (
espn_s2,SWID). These are sent to ESPN's API for that one import request only and are not stored by us. - Yahoo — we store an OAuth refresh token (obtained via Yahoo's official login flow) to keep your league connection active. You can disconnect Yahoo at any time from account settings, which deletes this token.
Optional free-text note — You may optionally add a short note (max 500 characters) describing your draft strategy or preferences, which gets included in your AI conversations to personalize responses. This is entirely optional and visible only to you.
2. Information We Do NOT Collect
We don't run any analytics, advertising, or tracking scripts on the Service — no Google Analytics, no ad pixels, no third-party trackers of any kind.
3. How We Use Your Information
- To provide and operate the Service (account access, draft rooms, league imports, AI responses)
- To process payments and manage subscriptions
- To enforce usage limits and prevent abuse
- To communicate with you about your account (e.g., billing issues, material changes to these terms)
- To improve the Service (e.g., understanding which features are used, at an aggregate level)
4. Third Parties We Share Data With
We use the following third-party services, each of which processes some of your data on our behalf, governed by their own privacy policies:
| Service | What it's used for | What it sees |
|---|---|---|
| Clerk | Authentication | Your email, name, login credentials |
| Stripe | Payment processing | Your payment details, billing email |
| Anthropic | AI assistant | Your draft/league activity and optional note — not your name or email |
| Vercel | Hosting | Standard request logs (IP, timestamps) as part of normal web hosting |
| Neon | Database hosting | All of the above, at rest |
| Cloudflare | Domain/DNS | Standard DNS/CDN request handling |
| Yahoo Fantasy | League import (opt-in) | Nothing of yours beyond the OAuth handshake |
We source public NFL player data (rankings, projections, stats, news) from Sleeper, ESPN, Fantasy Nerds, and nflverse — none of these receive any of your personal data; that data flow is one-directional (public sports data → Margins).
We do not sell your personal information to anyone.
5. Cookies
Margins uses only strictly necessary cookies — specifically, session cookies set by Clerk to keep you signed in. We do not use cookies for advertising, analytics, or cross-site tracking. Because these cookies are required for the Service to function, there's no cookie preference toggle.
6. Data Retention
We retain your account data for as long as your account exists — canceling a paid subscription does not delete your account or data. Cancellation just ends billing and reverts you to the Free plan; your draft history, watchlist, and account settings are unaffected. Deletion only happens if you explicitly request it. If you do, we delete your personal data within 30 days of a verified request, except where retention is required for legal/tax purposes (e.g., billing records — largely retained by Stripe on our behalf, not by Margins directly).
7. Your Rights
You can:
- Access and update your account information from your account settings
- Disconnect third-party league imports (Yahoo) at any time
- Request deletion of your account and associated data by contacting us at legal@marginsff.com
If you're located in the EU/UK: Margins does not block or restrict signups from any region, so these additional rights apply under GDPR (EU) and the UK GDPR. You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — limit how we process your data in certain circumstances
- Portability — receive your data in a portable format
- Object — object to processing based on legitimate interests
Our legal basis for processing your data is primarily performance of a contract (providing the Service you signed up for) and, for security/fraud prevention, legitimate interest. Latent Data Labs acts as the data controller for this processing; contact legal@marginsff.com to exercise any of these rights.
If you're a California resident: you have rights under the CCPA to know what personal information we collect, request its deletion, and opt out of its "sale" — Margins does not sell personal information, so there's nothing to opt out of.
8. Children's Privacy
Margins is not directed at anyone under 18. We do not knowingly collect information from children.
9. Data Security
We take reasonable measures to protect your information, including relying on our infrastructure providers' (Vercel, Neon, Clerk, Stripe) own security practices. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the app or email.
11. Contact
Questions about this Privacy Policy or your data: legal@marginsff.com
Cookie Notice
Margins uses only strictly necessary cookies to keep you signed in — no tracking, no analytics, no ads.