EdgeRoster Secure League Connector Privacy

The EdgeRoster Secure League Connector has one purpose: when you explicitly connect an ESPN or Yahoo Fantasy league to EdgeRoster, it transfers only the provider session cookies required for server-side authentication and validation.

Data processed

The connector processes provider authentication session cookies and the short-lived EdgeRoster intake ticket associated with the connection you initiated. Authentication cookies are sensitive authentication information. The connector does not collect general browsing history, location, health, payment, or personal-communications data.

How the data is used

Authentication information is used only to provide, validate, maintain, and secure the provider connection requested in EdgeRoster. The extension does not use this information for advertising, profiling, data brokerage, credit decisions, or unrelated purposes.

Browser handling

Provider cookie values are read only for the selected provider, held transiently in the extension service worker, and sent to EdgeRoster over HTTPS. They are not displayed, logged, placed in URLs, returned to the web page, or persisted in Chrome storage by the extension.

Server-side protection and retention

EdgeRoster handles accepted provider credentials through its server-side credential and Vault lifecycle. Staged credentials require server-side provider validation before activation. Rejected or superseded credentials are handled by that controlled lifecycle; a newly staged credential does not overwrite an accepted active credential before validation.

Sharing and transfer

The connector sends authentication information only to EdgeRoster as necessary to provide the user-requested provider connection. EdgeRoster does not sell this information or transfer it for personalized advertising, retargeting, data brokerage, or unrelated purposes. Any exceptional disclosure is limited to what is required by applicable law, security protection, or a corporate transaction permitted by applicable policy and law.

Chrome Web Store Limited Use

EdgeRoster's use and transfer of data received from Chrome extension permissions complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide, maintain, secure, or support the connector's disclosed single purpose. Human access to sensitive authentication information is not permitted except when specifically authorized by the user for support, required for security, required by law, or otherwise permitted by the Chrome Web Store User Data Policy.

Permissions

The extension uses Chrome's cookies permission and narrowly scoped host access for the supported ESPN and Yahoo authentication hosts plus the canonical EdgeRoster production origin. These permissions are required to perform the user-initiated connection flow.

Changes

If the connector's data practices materially change, this notice and the Chrome Web Store disclosures must be updated before the changed behavior is published.