Sideline Leagues privacy policy

Last updated November 6, 2026

Sideline Leagues, made by JM Software Developments LLC (“JM Software Developments” or “we”), hosts fantasy football leagues. This explains what it keeps about you, who sees it, who helps run it, and how to delete it.

What we keep

Your account: the email address you sign in with (with Sign in with Apple, the address Apple shares, which can be a private relay address), your phone number if you sign in by text or add one, your display name, your profile picture and any team pictures if you add them, and when you joined.

Sign in with Apple: Apple tells us your verified email address and, the first time, your name if you choose to share it. We keep a token from Apple, encrypted, only so we can revoke it when you delete your account.

Sessions: one for each device you’re signed in on, for up to a year. We don’t store your IP address or device details with them.

Leagues: the leagues you’re in, your team and role, and what happens in them (rosters, lineups, scores, moves and trades).

Chat: the messages you post in a league’s chat, a direct message or a group chat (with the photos you send, which the app shrinks and strips of their location and camera details before sending, and links to the GIFs you pick), when you sent them, your edits, emoji reactions, polls, votes and pins, how far you’ve read and whether you muted it, and who’s in each direct message and group chat (and a group’s name). A league chat’s messages are kept for as long as the league is, a direct message’s and a group’s for as long as someone is in it; deleting one removes its text, and its photo, for everyone.

Reports and blocks: if you report a message, we keep a copy of it with the reason and who reported it until we’ve reviewed it, then delete the copy. We keep the list of people you block; they aren’t told.

Screenshots you import: a commissioner who brings a league over uploads screenshots of it. We delete them once they’re read (each league’s are read once), when the import is dropped before then, or a week after they were last changed if they’re never read. What was read from them (team names, managers’ names as shown, rosters and settings) is kept with the import until it’s confirmed or the league is deleted, and the confirmed teams, rosters and settings become the league. Crop out anything private before uploading.

What other managers see

People in your leagues see your display name, your profile picture, your team and its picture, and what you post in the league’s chat (and whether you’re typing). People in a direct message or group chat with you see your display name, profile picture and what you post there; anyone in your leagues can start one with you, and anyone in a group can add people from their own leagues, who see what’s posted from then on. They don’t see your email address or phone number. Anyone signed in with a league’s invite code sees the league’s name and its teams, with their managers’ display names and pictures, before joining.

Profile pictures

You can add a profile picture, and a picture for your team in each league. You choose a photo from your library. The app crops and shrinks it on your phone, and the server removes its hidden details (such as where and with what camera it was taken) before storing it. A picture is kept at a web address that is hard to guess, and anyone who has that address can view it. Changing or removing your picture deletes the old one.

Limits against abuse

To stop floods of sign-in codes, we count the codes sent to each email address or phone number, stored as a one-way hash rather than the address or number itself, for up to a day. We also count requests from each IP address for a short time. Request logs are off.

Who helps run it

Cloudflare hosts the server, its database and the pictures (cloudflare.com). Resend sends sign-in emails, so it receives your email address and the code (resend.com). Texted codes are delivered through AWS Notify (Amazon Web Services, aws.amazon.com), so it receives your phone number and the code; AWS doesn’t share phone numbers with third parties for their marketing; message and data rates may apply. Apple handles Sign in with Apple. Google reads screenshots a commissioner imports with its Gemini API, to turn them into teams, rosters and settings (ai.google.dev); it receives only those screenshots, and its terms let it use them to improve its products. Klipy provides the GIFs in chat (klipy.com): when you open the GIF picker, your phone asks Klipy for trending GIFs or sends it what you search for, and loads the GIFs from Klipy, so Klipy receives your searches and your IP address, not your name or account. Notifications go through Expo’s push service (expo.dev) to Apple or Google, which deliver them to your phone; a chat notification includes who wrote and the start of the message. We share with them only what each needs for that.

We don’t sell your data. No mobile numbers are shared with third parties or affiliates for marketing or promotional purposes, text-message opt-in data and consent aren’t shared with any third parties, and we text you only sign-in codes. The app has no advertising, analytics or tracking.

What stays on your phone

Your session is kept in your phone’s secure storage, and your account and league data are cached so the app opens quickly. Signing out removes them.

Deleting your account

Account → Delete account deletes your account, your sessions, your profile picture and your league memberships, the text and photos of your chat messages, your reactions and your votes (your messages then show as deleted), and revokes Sign in with Apple. Your teams stay in their leagues without you, for the commissioner to hand to someone else, and past results and moves stay part of each league’s history. In a league where you’re the only commissioner, the member who joined first after you becomes commissioner; a league with nobody else in it is deleted. Code counters expire within a day.

You can also ask us to delete your account by writing to support@sidelinefantasyfootball.com from the email address you sign in with.

Children

Sideline Leagues is not meant for children under 13, and we don’t knowingly keep their data.

Contact

Questions about this policy: support@sidelinefantasyfootball.com.

Changes

If this policy changes, the new version will appear here with a new date.