Hot Route

Security & privacy

Your accounts stay yours. Hot Route only uses the data and services you choose to connect.

What we protect

  • Passwords are hashed and never stored in plain text.
  • Connected league credentials are encrypted at rest.
  • Hot Route never asks for your ESPN password.
  • You can remove imported leagues and their credentials from Leagues.

Your personal API keys

  • Your AI and Odds API keys are encrypted in your Hot Route account.
  • Hot Route sends a key to its provider only when you request the related service.
  • Both keys are optional; core league tools work without them.
  • Groq and The Odds API apply their own limits and policies.

ESPN connection

ESPN does not offer normal third-party login. Hot Route opens ESPN in your browser, and the connector sends your ESPN session credentials to Hot Route only after you choose leagues to import. Hot Route encrypts those credentials so it can refresh those leagues; it never receives your ESPN password.

You can remove connected leagues and account data from Leagues and this page.