Privacy Policy

This Privacy Policy explains what information Margins ("we," "us," "our"), operated by Latent Data Labs, collects when you use withmargins.com (the "Service"), and how we use it.

1. Information We Collect

Account information — When you sign up, our authentication provider (Clerk) collects your name and email address. We store a copy of this (synced from Clerk) along with your account preferences (default scoring format, plan tier).

Billing information — If you subscribe to a paid plan, our payment processor (Stripe) handles your payment details directly — we never receive or store your full card number. We store only your Stripe customer/subscription IDs and your current plan tier, to know what you're subscribed to.

AI usage data — We log the token count and cost of each AI request you make, to enforce usage allowances and for internal auditing. Your AI conversations in Margins are saved so you can see your chat history. Margins staff can also view them, along with a record of how each answer was produced (including earlier answers you replaced), to provide support, fix problems and improve answers. They're never visible to other users, and they're covered by the deletion request in Section 6 like the rest of your data. The Margins connector, below, works differently.

Margins connector (outside AI apps such as Claude) — If you connect Margins to an outside AI app, that app calls Margins each time it needs your league data, and we send that data back to the app. We log each call: which tool the app used, what it sent us (such as player and league names, and your question when the app includes it), and the reply we sent back. We use this log to see how the connector is used, to fix problems, and to improve its answers. It's visible only to Margins, never to other users, and it's covered by the deletion request in Section 6 like the rest of your data. We never see the AI app's own reply to you; what the app does with your conversation is covered by that app's privacy policy. If you ask the AI app to update your roster, we update it in Margins only after you confirm the change in that app. This changes your roster in Margins only, never in your league on Yahoo, Sleeper, ESPN or any other fantasy platform. We keep a record of each change made this way (the roster before and after, and when) so you can undo it and so we can fix problems. That record is deleted with the league or with your account.

Draft and league data — Draft picks, watchlist notes, draft queue entries, and any leagues you import are stored and tied to your account so the app can function.

Multiplayer draft rooms — When you join a shared draft room (via an invite link from someone else), your Margins account display name is visible to the other participants in that room, so everyone knows who's who. Draft rooms are invite-link only — there's no public directory or matchmaking, so only people you or a fellow participant shared the link with can see this.

Third-party league credentials:

• Sleeper — only a public username/league ID; no credentials.
• ESPN — for private league imports, a bookmark you install reads your ESPN session values (espn_s2, SWID) directly from your own browser while you're already signed into ESPN, or you can paste them directly — either way, we never see or ask for your ESPN password. If you paste your values, we store them, encrypted, so you don't have to repeat this step every time you want to re-sync your league; using the bookmark instead stores nothing. We use them only when you use a feature that reads your ESPN league: for example, a re-sync, opening the league or My Team or Start/Sit, starting a draft from it, or asking the AI assistant (in Margins or in a connected AI app) about it. Never on a schedule or in the background. Saved values cover every ESPN league on your account, including ones you imported with the bookmark. We only use these values to read your league's data (rosters, settings, standings); we do not make any changes to your ESPN league on your behalf. You can disconnect ESPN at any time from account settings, which deletes our stored copy. Unlike Yahoo, ESPN has no official mechanism for us to revoke this credential on ESPN's end — disconnecting here removes our access but does not end your underlying ESPN session; that would require signing out of ESPN itself or changing your ESPN password.
• Yahoo — we store an OAuth refresh token (obtained via Yahoo's official login flow), encrypted, to keep your league connection active, along with your Yahoo account ID (an identifier, not your Yahoo email or name) so we can recognize your team. You can disconnect Yahoo at any time in Margins, which deletes our stored copy of both. Yahoo does not provide us a way to revoke the token on their end directly, but you can independently revoke Margins' access at any time from Yahoo's own account security settings.

Optional free-text note — You may optionally add a short note (max 500 characters) describing your draft strategy or preferences, which gets included in your AI conversations to personalize responses. This is entirely optional and visible only to you.

2. Information We Do NOT Collect

We don't run any third-party advertising or tracking scripts on the Service — no ad pixels, no cross-site trackers of any kind, and we don't sell or share your data with ad networks. We do use privacy-preserving, first-party analytics (Vercel Analytics for aggregate traffic, and a first-party cookie recording which of our own marketing channels a new signup arrived from — see Section 5) to understand what's working; see below for specifics.

3. How We Use Your Information

• To provide and operate the Service (account access, draft rooms, league imports, AI responses)
• To process payments and manage subscriptions
• To enforce usage limits and prevent abuse
• To send you account emails (for example, a welcome email, billing issues, and material changes to these terms)
• To send you occasional product updates, tips, offers, and referral-reward news by email. You can stop these at any time with the unsubscribe link in any of them or with the Marketing emails switch in your account menu; account emails continue.
• To improve the Service (e.g., understanding which features are used, at an aggregate level)

4. Third Parties We Share Data With

We use the following third-party services, each of which processes some of your data on our behalf, governed by their own privacy policies:

We source public NFL player data (rankings, projections, stats, news) from Sleeper, ESPN, Fantasy Nerds, and nflverse; that data flows one way, into Margins. When you import or use a league, we also send that platform what it needs to return your league: your Sleeper username or league ID, or your ESPN league ID along with your saved ESPN session values if you pasted them in (Section 1). If you've only ever used the bookmark and never pasted your values in, your own browser fetches your league and we send ESPN nothing. Fantasy Nerds and nflverse never receive any of your data.

We do not sell your personal information to anyone.

5. Cookies

Margins uses first-party cookies for three purposes: a session cookie set by Clerk to keep you signed in; a temporary cookie (up to 30 days) that remembers a referral code if you arrive via a friend's referral link, so we can credit both of you if you sign up; and a temporary cookie (up to 90 days) that remembers which of our own marketing channels — e.g. a specific social platform or campaign link — a visitor first arrived from, so we can measure which of our channels actually drive signups. We also use Vercel Analytics, a first-party, cookieless tool, for aggregate page-view and referrer traffic data. None of this involves advertising, cross-site tracking, or sharing this data with any third party beyond Vercel operating the analytics tool on our behalf. Because these cookies are required for the features they support, there's no cookie preference toggle.

6. Data Retention

We retain your account data for as long as your account exists — canceling a paid subscription does not delete your account or data. Cancellation just ends billing and reverts you to the Free plan; your draft history, watchlist, and account settings are unaffected. Deletion only happens if you explicitly request it. If you do, we delete your personal data within 30 days of a verified request, except where retention is required for legal/tax purposes (e.g., billing records — largely retained by Stripe on our behalf, not by Margins directly).

7. Your Rights

You can:

• Access and update your account information from your account settings
• Disconnect third-party league imports (Yahoo, ESPN) at any time
• Request deletion of your account and associated data by contacting us at legal@withmargins.com

If you're located in the EU/UK: Margins does not block or restrict signups from any region, so these additional rights apply under GDPR (EU) and the UK GDPR. You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how we process your data in certain circumstances
• Portability — receive your data in a portable format
• Object — object to processing based on legitimate interests

Our legal basis for processing your data is primarily performance of a contract (providing the Service you signed up for) and legitimate interest for security/fraud prevention and for product-update emails, which you can turn off at any time. Latent Data Labs acts as the data controller for this processing; contact legal@withmargins.com to exercise any of these rights.

If you're a California resident: you have rights under the CCPA to know what personal information we collect, request its deletion, and opt out of its "sale" — Margins does not sell personal information, so there's nothing to opt out of.

8. Children's Privacy

Margins is not directed at anyone under 18. We do not knowingly collect information from children.

9. Data Security

We take reasonable measures to protect your information, including relying on our infrastructure providers' (Vercel, Neon, Clerk, Stripe) own security practices. Third-party league credentials that we store (your ESPN session values and Yahoo refresh token) are encrypted at rest. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the app or email.

11. Contact

Questions about this Privacy Policy or your data: legal@withmargins.com

---

Cookie Notice

Margins uses cookies to keep you signed in, to credit referral links, and to see which of our own marketing channels a visitor came from — no advertising, no third-party tracking, no data sharing.