Help Center / Account and privacy
Protect invitations and browser connections
Pairing tokens authorize a saved browser connection. Treat them and the saved credentials as secrets.
How it works
- 1Send invitation links only to their intended recipients.
- 2Use Connect League Data or Connect Live Draft only on a browser you trust. Pairing tokens expire after 10 minutes and work once.
- 3Never post pairing tokens in public chats, screenshots, streams, or support messages.
- 4To switch computers, copy the token again in TacoBot. Your current browser stays connected until the other computer uses it.
- 5Disconnect an exposed connection in TacoBot. Do not rely on the original pairing token expiring once a browser has paired.
- 6Stop Live Draft after the draft. Stop pauses syncing; Disconnect revokes the saved connection.
- 7On a shared device, disconnect both browser connections before leaving. Signing out of TacoBot alone does not disconnect the extension.
Keep in mind
League Data and Live Draft credentials are saved only in local extension storage, restricted to trusted extension contexts. They are not synced to other devices. TacoBot stores credential hashes. Leaving a hub or becoming a Viewer removes sync access to that hub immediately. Your account connections still work for your other eligible leagues.
Related articles
Was this article helpful?