Privacy Policy

managr · last updated August 8, 2026

The short version. You can use managr without an account. If you make one, we store what you save so it follows you between devices. We measure which pages get used, and we honor Do Not Track. There are no ad networks and no tracking cookies. We do not sell or rent your data to anyone. Email [email protected] and we will delete your account and everything attached to it.

Who we are

managr is a fantasy sports projection and ranking site run by an individual owner. Contact for anything in this policy, including deletion requests: [email protected].

What we store

Your account

Email and password are handled by Supabase, our authentication and database provider. We never see your password. If you never create an account, we hold no profile for you at all.

What the app saves for you

The app keeps your settings, saved notes, imported rosters and league portfolios in your browser's local storage. While you are signed in, those entries also sync to your account so they follow you between devices. If a key exists in both places when you sign in, the copy on your account wins and local entries fill the gaps. Signed out, everything stays in your browser and never reaches us.

League connections

Usage analytics

When you move between sections we record the route you viewed, the workspace it belongs to, how long you stayed, and a randomly generated session id. If you are signed in, those events are linked to your account, so we can see how the product is used by real accounts rather than only as anonymous traffic. Visits while signed out stay unlinked.

We do not record what you type, your search terms, individual clicks, or anything about the contents of your leagues, and we do not store your IP address with these events. They live in our own Supabase database. If your browser sends Do Not Track or Global Privacy Control, we record none of this at all.

Cloudflare Web Analytics

We also run Cloudflare's page-view and page-speed measurement. On each page load its script sends Cloudflare the page address and referring page, the navigation type, a per-page-load id, and load-timing numbers such as first paint and first contentful paint. As with every request your browser makes to any server, Cloudflare receives your IP address, and it uses that to derive a coarse location such as country. It sets no cookies and writes nothing to your browser's storage, and the per-page-load id is regenerated on every load, so it does not follow you between pages or visits. We use it only for traffic counts and load-speed measurement. Cloudflare processes this data under its own privacy policy and retention schedule, which we do not control.

Push notifications

If you turn on browser notifications, we store the push endpoint your browser issues along with the public keys needed to encrypt a message to it. It is saved under a hash of that endpoint rather than under your name, and it is not publicly readable. It is used only to send the alerts you asked for. Turning notifications off, or unsubscribing in your browser settings, removes it.

Feedback form

The feedback form needs no account. When you send it we keep your message, the page you sent it from, and the category and subject if you picked them. Name and email are optional, and we only use an address you give us to reply. Submissions are logged and forwarded to the owner by email.

Server logs and abuse limits

Our host processes ordinary request data such as IP address in the course of serving the site and blocking abuse. Some endpoints are rate-limited, which means a short-lived record of recent request volume.

What we never do

How long we keep it

Your choices

Depending on where you live you may have additional rights over your personal data, including access, correction, deletion and portability. We apply the above to everyone who asks, regardless of location, and we do not charge for it.

Children

managr is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has created an account, email us and we will delete it.

Security

Passwords are handled by Supabase and never reach us. Tokens are held server-side with restricted permissions, and push endpoints are stored so that they are not publicly readable. No service can promise perfect security, and we do not. If we ever discover a breach affecting your data, we will tell affected account holders by email.

Where your data is processed

Supabase and Cloudflare process data on infrastructure that may sit outside your country, including the United States. Using the site means your data may be handled there.

Changes to this policy

If this policy changes materially we will update the date at the top and, for anything that affects what we collect or who receives it, say so in the app. Continuing to use managr after a change means the updated policy applies.

Contact

Questions, corrections and deletion requests: [email protected].

← Back to managr · Terms of Service