Privacy Policy
Last updated 2 September 2026
Roto Dog is a fantasy sports app run by one person at rotodog.com. This page describes exactly what it stores, why it stores it, and how to get rid of it. It is deliberately short, because Roto Dog collects very little.
What we collect
From your Google account, when you sign in. Roto Dog has no passwords — signing in is handled entirely by Google. Google returns, and we store:
- your name and email address
- whether Google has verified that email address
- the URL of your Google profile picture
- your Google account identifier, so we recognise you next time
We request only Google's basic profile and email scopes. Roto Dog cannot read your Gmail, Drive, Calendar or contacts, and never asks for permission to. The access tokens Google issues are encrypted before they are written to our database, so they are not readable by anyone with plain read access to it.
From your browser, to keep you signed in. Each session stores a session token, its expiry, your IP address and your browser's user-agent string. The IP address and user agent exist to rate-limit sign-in attempts and to let you recognise a session that is not yours.
From using the app. The leagues you create or join, your team and roster, draft picks, waiver claims, trades and transactions, and your lineups. This is the app doing its job.
What we do not collect
- No payment information. Roto Dog does not take money and has no payment processor.
- No analytics or tracking. There is no Google Analytics, no advertising pixel, no session recorder and no third-party tracking script anywhere on the site.
- No advertising. Your data is not sold, rented, or shared with advertisers or data brokers. There is no business model here that would involve doing so.
Cookies
Roto Dog sets one cookie: your session cookie, which keeps you signed in and is required for the app to work at all. There are no advertising or tracking cookies to consent to or opt out of.
Who else sees your data
- Other members of your leagues see your display name, team and roster — that is what a fantasy league is.
- Google, because you chose to sign in with it. Their handling is covered by Google's Privacy Policy.
- Railway, which hosts the app and its database, and Cloudflare, which sits in front of it. Both are processors acting on our behalf.
Sports statistics come from MLB's and the NHL's public feeds. Those are requests for game data that contain nothing about you.
Where it is stored, and for how long
Data is held in a PostgreSQL database hosted by Railway in the United States. Sessions expire after seven days. Everything else is kept until you ask us to delete it.
Deleting your data
Email [email protected] and ask. We will delete your account and the personal data attached to it. Deleting your account removes your sessions and your stored Google tokens along with it. Records that other people's leagues depend on — a completed draft, a trade another manager was party to — may be retained in anonymised form so their league history stays intact.
You can also ask us what we hold about you, and we will tell you.
Children
Roto Dog is not directed at children under 13 and we do not knowingly collect their data.
Changes
If this policy changes materially, the date at the top changes and signed-in users are told before the change takes effect.
Contact
Questions about any of this: [email protected].