Privacy policy

• Account information, including your email address, password hash, login-provider identifier, and session records.
• Fantasy league information you connect or import, including league settings, teams, rosters, transactions, and your selected team.
• Credentials you choose to save for ESPN, Sleeper, Groq, The Odds API, or another supported service. Hot Route encrypts saved credentials and personal API keys at rest.
• Rankings you upload, mock-draft results, lineup choices, and other product settings needed to provide your account features.
• Basic technical records produced by the web server, such as request time, requested path, IP address, browser information, and errors.

When you choose Continue with Google, Hot Route requests only OpenID identity, email, and basic profile scopes. Hot Route uses the Google account identifier and verified email address to create an account, sign you in, or link Google login to an existing Hot Route account with the same verified email.

Hot Route does not request access to Gmail messages, contacts, Drive files, calendars, or other Google services. It does not sell Google user data or use it for advertising. Hot Route stores the Google account identifier and email for authentication and does not share them except with service providers that operate the application, when required by law, or when needed to protect users and the service.

• Authenticate your account and keep your data available across devices.
• Import and refresh connected fantasy leagues.
• Generate rankings, projections, lineup analysis, waiver analysis, trade suggestions, and research you request.
• Prevent abuse, diagnose errors, secure accounts, and maintain the service.

Hot Route sends information to a third-party service only when needed for a feature you use. These services may include Google or Apple for sign-in, ESPN or Sleeper for league connections, Groq for requested AI-generated text, The Odds API for betting-market data, and infrastructure providers that host and deliver Hot Route. Those providers process information under their own terms and privacy policies.

Hot Route does not sell personal information. It may disclose information if required by law, to investigate fraud or abuse, or as part of a business transfer where the recipient agrees to protect the information.

Hot Route uses an HttpOnly session cookie to keep you signed in and short-lived cookies to protect Google and Apple sign-in attempts. Local browser storage remembers display and draft settings. Passwords are hashed. Connected-service credentials and personal API keys are encrypted at rest. No storage or transmission system can guarantee absolute security.

Hot Route keeps account information while your account remains open and may retain limited records when required for security, legal compliance, or backups. You can remove individual leagues and credentials in Hot Route. You can delete your account from the Security page, which removes the account and associated active data from the production database.

You may also ask to access, correct, or delete your personal information by contacting support@hotroutefantasy.com.

Hot Route is not directed to children under 13, and it does not knowingly collect personal information from children under 13. This policy may change as the service changes. The date at the top will identify the latest version.