Privacy Policy

Front Office is a private chat app for a single fantasy football league. It is operated by Sean Craig as an individual, not by a company. This policy describes what the app stores and who can see it. It is written plainly because the app is small and the answers are short.

What the app stores

When you create an account, the app stores your email address and the display name you choose. When you send a message, the app stores the message text, who sent it, and when. When you enable notifications, the app stores a push token for that device so notifications can be delivered to it.

The app also stores fantasy league data pulled from ESPN — rosters, transactions, matchups, and scores. This is league information, not personal information about you beyond your participation in the league.

ESPN credentials

Front Office reads the league from ESPN using the operator’s own ESPN session credentials, stored as a server-side secret. The app does not ask for, collect, or store ESPN credentials belonging to any other league member. You never enter an ESPN password or session cookie into this app.

Who can see your messages

Other members of the league can see everything you post. The operator can also read all messages directly through the database administration tools, the same way the owner of any small app can. The app does not use end-to-end encryption. Messages are encrypted in transit and at rest by the hosting provider, but they are not private from the operator. Do not post anything in Front Office that you would not want read.

How long things are kept

Messages are kept indefinitely, because scrolling back through the season is most of the point. Push tokens are deleted when you sign out or when the notification service reports the device is no longer reachable. If you ask for your account and messages to be deleted, they will be.

Who else receives data

The app runs on Supabase, which hosts the database and authentication, and uses Expo’s push notification service to deliver notifications. Both receive data in the course of operating the app. The website you are reading is hosted on Vercel. Nothing is sold, shared with advertisers, or used for marketing. There is no analytics or tracking in the app.

Children

Front Office is invitation-only and intended for adults in a private league. It is not directed at children.

Changes and contact

If this policy changes in a way that affects what is collected or who can see it, the change will be noted here with a new date. Questions, or requests to delete your data, go to sean@front-office.app.