Privacy Policy
Effective August 31, 2026
This policy explains how TacoBot uses information to operate fantasy-football hubs, provider synchronization, draft tools, league discussions, participation analytics, and TacoCoin games.
Information we collect
We may store account details such as your name, email address, phone number, authentication identifier, league hub memberships, fantasy-team selections, saved draft boards and settings, draft tags, contest activity, announcements, replies, reactions, TacoCoin balance and wagers, and data you choose to synchronize from supported fantasy providers. We also record the type, time, account, and hub associated with certain actions to measure onboarding and participation. These internal records are account-linked; they are not anonymous.
How we use information
We use this information to provide and secure the service, synchronize league data, calculate contest and TacoCoin results, support users, prevent abuse, measure participation, improve TacoBot, and prepare aggregated, de-identified statistics for content as described below.
Chrome extension and ESPN synchronization
TacoBot offers a Chrome extension that synchronizes fantasy-football information from supported fantasy providers such as ESPN Fantasy. The extension operates using the existing signed-in ESPN session in your browser. It does not request, collect, store, or transmit your ESPN username or password, and it does not directly read or transmit your ESPN authentication cookie values to TacoBot. Requests made to ESPN may use that browser session, so your browser may automatically send ESPN's own cookies directly to ESPN as part of authenticated requests; ESPN authentication cookies and credentials are not sent to TacoBot. Depending on the synchronization action you choose, the extension may read fantasy league IDs; fantasy team names and team IDs; player names, player IDs, and positions; roster information; league roster and scoring settings; draft order; historical and live draft selections; weekly lineups; matchup information; fantasy scores; standings; and historical league results. It may also read public NFL schedule information from ESPN when TacoBot features need matchup timing. Pairing exchanges a one-time TacoBot code for a revocable Live Draft or League Data account connection credential. Each connection works across ESPN leagues the user is currently permitted to sync; current membership and role are checked for each operation. The credential, account display name and identifier, and available league details remain in local extension storage on that browser, restricted to trusted extension contexts, until removed. They are not synced to other devices. TacoBot stores credential hashes. Signing out of TacoBot does not disconnect the extension; use Disconnect in TacoBot or the extension, especially on shared devices.
Synchronized fantasy data
Fantasy data you select for synchronization is transmitted to TacoBot over HTTPS and stored as part of the relevant TacoBot league or league season. TacoBot uses it to provide league synchronization, draft tools, contest scoring, league history, and related functionality, and to prepare aggregated, de-identified statistics for content as described below. TacoBot does not sell synchronized fantasy data. Synced league information may be visible to other members of the same TacoBot league hub when it is part of shared league functionality, and TacoBot may process it through hosting, storage, authentication, analytics, and other service providers needed to operate the application. You control when fantasy-provider information is synchronized through TacoBot's sync workflows. TacoBot is not affiliated with or endorsed by ESPN.
Aggregated league statistics and content
We may combine fantasy-league data across multiple leagues and use aggregated, de-identified statistics to create and publish fantasy-football analysis, draft trends, educational articles, charts, social posts, and other TacoBot content. Examples include overall draft tendencies, roster patterns, and scoring trends. Before using statistics publicly, we remove account and contact identifiers, league and team names and identifiers, and other details that could reasonably identify a person or private league. We combine or omit small groups and unusual combinations and review the risk that published information could be linked back to a person or private league. We use the term anonymous only when the resulting information cannot reasonably be used to identify a person; removing names alone is not sufficient. This content use does not include publishing private announcements, replies, opinions, or other free-text contributions without separate permission. We do not attempt to re-identify people from these statistics. Recaps and results shared inside your own hub are a separate feature and may include team names and league details visible to authorized members.
Sharing
We do not sell personal information. Information may be processed by hosting, authentication, analytics, and communication providers that help operate TacoBot. League hub activity, display names, announcements, replies, reactions, wagers, and results may be visible to other members with access to the applicable hub or contest. Hub owners and admins may moderate replies. We may publish aggregated, de-identified statistics in the content described below; this does not make your underlying account records or private league content public.
Data retention and choices
We retain information while it is needed to operate the service, meet legal obligations, resolve disputes, or prevent abuse. You may request access, correction, or deletion by contacting the site operator; some records may be retained where required for security or legal reasons. Removing a reply or reaction does not automatically remove an internal record that an action occurred; those activity records do not contain reply text. Aggregated statistics that no longer identify or relate to an identifiable person may be retained separately. Contact info@mail.tacobotff.com with privacy requests or questions.
Security and children
We use reasonable safeguards, but no online service can guarantee absolute security. TacoBot is not directed to children under 13.
Updates
We may update this policy as the service changes. Material revisions will be identified by a new effective date.