Your data, explained.
Last updated September 13, 2026
What we collect and why
Sunday Desk stores the name and email you provide for your account, a hashed account password, and sign-in sessions. It also stores the fantasy accounts and leagues you choose, roster and matchup data used by your dashboard, and notes and review checkmarks you save. We use this information to provide your private fantasy football workspace.
Connecting ESPN
The browser connector or native mobile connector reads only the espn_s2 and SWID cookies applicable to ESPN Fantasy after you choose to continue connecting. These cookies identify and authenticate your ESPN session; they can grant account access. Sunday Desk uses them to read your leagues. It does not collect your ESPN password, change lineups, submit waivers, or make trades.
Import sends these session values over HTTPS to Sunday Desk to discover and verify your leagues. The preview returns league details and an encrypted, account-bound ticket that expires after 10 minutes. Discovery does not replace or save an ESPN connection in your workspace. If you confirm, the selected leagues and session values are saved encrypted for future dashboard refreshes.
The extension does not store credentials, collect general browsing history, use analytics, or continuously monitor ESPN cookies. A guided sign-in temporarily stores a random connection token, its expiration, and the requesting tab or Sunday Desk account. It does not store ESPN credentials in that token. Returning to setup resumes only the sign-in you explicitly started; otherwise opening setup does not import an account.
The native mobile connector opens ESPN in a separate browser view without a Sunday Desk scripting bridge. Its Continue button reads the session only for the requesting setup screen. iOS uses a non-persistent provider browser. Android uses an isolated provider browser and clears its cookies, cache, and web storage before and after sign-in. Your Sunday Desk login remains in the app until you sign out. Native apps are currently in development and are not yet available in app stores.
Where data is processed
Vercel hosts the application and processes requests. Supabase PostgreSQL stores account, session, connection, note, and cache data. These providers may process operational logs and network information needed to run their services. ESPN and Sleeper receive requests needed to load the leagues you connect. We do not intentionally log ESPN session values.
Access and retention
Private records are associated with your authenticated Sunday Desk account. ESPN session values are encrypted and never included in normal dashboard or connection responses. Dashboard caches expire after seven days; connecting or disconnecting an account clears its private cache. Account information and notes remain while your Sunday Desk account is retained. Hosting providers may retain backup copies according to their backup policies.
Your controls
Disconnect ESPN in setup to delete its saved session from the active database and clear your private dashboard cache. Uninstalling the extension stops future browser imports but does not delete a previously saved server connection. Sign out to revoke your Sunday Desk session. Manage your ESPN sign-in directly on ESPN.
Limited use
Sunday Desk and the ESPN Connector comply with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use collected information only to provide and improve the stated fantasy account connection and dashboard features. We do not sell it, use it for advertising, or transfer it for unrelated purposes. Human access is limited to your explicit support consent or necessary security and legal obligations.
Questions and requests
Contact the publisher through Sunday Desk support for privacy questions or an account deletion request. Do not post passwords, session cookies, or private league details in a public support request.
Sunday Desk is an independent project and is not affiliated with or endorsed by ESPN, Disney, or Sleeper.