What we keep, and why.

An account is optional. Identity is handled by Clerk: signing up, logging in, your password, signing in with Google, verifying your email and keeping you signed in all happen inside Clerk. Juke's own code never sees or stores your password. Clerk processes that for us under its own privacy policy.

What Juke's own database keeps about you is small:

Who you are

The id Clerk gives your account, your plan, and when the account was made and last used. Not your name. Your email address only while email alerts are on, so we can send them.

Your drafts

The draft in progress, and one row for each draft you finish: the picks, the league shape and the grade.

Leagues you connect

The platform, the league's id, which team is yours, and a cached copy of the league's name, season and size.

What you bought

Your plan, the date and amount of each payment, any refund, and Stripe's id for you as a customer. Never a card number. See "Paying".

Your free week

When it started and when it ends, so we can remind you before it charges. One per person.

League Pass

If you bought one: the league, the number of seats, the invite code, and which seats have been claimed. If you claimed a seat: which pass covers you.

Alert settings

Which alerts you want and where: email, your phone, or both. For your phone, the push address your browser gives us for each device.

Sign-ins for private leagues

Only if you connect a private ESPN league or any CBS league. Encrypted before it is stored. See "Connecting a league".

That is all of it. No profile of what you look at, and nothing about you beyond the drafts you ran, the leagues you asked us to read, and what you bought.

Payments run on Stripe. You type your card into Stripe's own page, and it goes to Stripe, not to us. Juke never sees or stores a card number. Stripe processes it under its own privacy policy, and sets its own cookies on its own page.

From Stripe we keep what a receipt says: what you bought, when, how much, and whether it was refunded. We need that to know your plan, to honor a refund, and because tax law says we must keep sales records. Stripe keeps its own copy for the same reason.

If you start a free week, Stripe keeps your card on file so it can charge at the end of the week unless you cancel. Cancelling removes the charge. See the Terms for how the free week works.

Connecting a league lets Juke read it: teams, rosters, settings, schedule and results. Juke only ever reads. Nothing we hold can set a lineup, make a claim or propose a trade.

Most leagues need nothing secret. A Sleeper league needs a username, and a public ESPN league needs its id.

A private ESPN league, and every CBS league, are different. Neither offers third parties a read-only key, so the only way to read one is with the sign-in value your own browser already uses: two cookies for ESPN, one for CBS. You can paste them in yourself, or let the Juke app or the Juke browser extension read them for you: you sign in to ESPN or CBS the normal way, and it hands Juke the cookie your browser already holds — only for those two sites, only when you press Connect. No password is ever involved, and the extension keeps nothing and sends it nowhere but to Juke. However it reaches us, we encrypt it before storing it, tie it to your account and that one league so it is useless anywhere else, and never send it back to your browser or show it on any screen. It is used for one thing: reading that league. ESPN's cookies expire on their own. CBS's is set to last until 2037, so disconnecting the league, removing the extension, or deleting your account is what ends it.

A commissioner can buy Season Pass for their whole league. What each side sees is kept small on purpose:

• The commissioner sees each team's name, and whether that seat has been claimed. Never the manager's email or account.
• A manager who claims a seat is told which league's pass covers them. Nothing about the commissioner's payment.
• The invite link only claims seats in that one league, and only as many as were paid for.

Email. If you turn email on, we send the weekly email and the alerts you chose to the address on your account, through Resend, an email delivery service that sends on our behalf. Every email has a link to change what we send. Turning email off stops it at once.

Your phone. Phone alerts use your browser's own push service (Apple, Google or Mozilla, depending on the device). When you allow alerts, your browser gives us a push address for that device. We keep it to send the alerts you chose and nothing else, and delete it when you turn phone alerts off or your browser tells us it has expired. An alert carries its message, like "Lock your lineup, kickoff in 1 hour", and nothing else about you.

The app. Juke installs from the browser. There is no separate app to download and no store account involved. Installing keeps a copy of the site's own files on your device so it opens fast. That copy is files, not data about you.

An invite link creates a shared room, which is the one kind of draft that needs a server, because everyone in it has to agree on what happened. While it is open it holds:

• who sits in which seat, and the name each person typed in
• every pick made
• the chat, including any GIF, voice note, photo or poll someone posts

Joining a room needs no account. Your browser makes a random id the first time you join, and that is how the room tells you from the next seat. The room is never told your email or real name, only the name you type.

Once everyone has been gone for six hours, the room and everything in it is deleted. Photos and voice notes are stored at an address nobody can guess or list.

A few things load straight from someone else's server, the way a web font or an embedded video does. That server sees the request come from your browser, including your IP address:

Player photos

Sleeper's image server, linked rather than copied.

Live scores

ESPN's public scoreboard, only while games are being played.

Fonts

Google Fonts. Some faces are served from our own domain instead.

Sign-in

Clerk, while you sign up, log in or are signed in. Its bot check (Cloudflare Turnstile) loads the same way.

Checkout

Stripe, only when you pay. You leave Juke for Stripe's page and come back.

Error reports

Sentry, only when something on the page breaks. A report carries the error, your browser and system, the page you were on with everything after a "?" removed, and the last few things the page did. Never what you typed, your account id, or anything from your drafts or leagues.

Besides your account, two things go through our server so the provider's key never sits in a page:

• Player news headlines, from Tank01, when you open a player. Cached for fifteen minutes.
• GIF search in a draft room, from GIPHY, only if you search.

Our server is the visible caller, not your browser, and neither provider is told anything beyond the one request: a player id or a search term.

The site is hosted on Cloudflare, which sees the standard request details any host sees: your IP address, browser and the page asked for. Cloudflare also adds its own Web Analytics beacon to measure load times. It sets no cookies and does not follow you to other sites.

Juke also counts, per day and per page, how many signed-out visitors view a page, how many press a sign-up button on it, and how many accounts are created from it. Each count is a bare number. No cookie, account, IP address or device is attached to it, so it cannot be traced back to you.

• Your card. It goes to Stripe, never to Juke.
• Your password. It goes to Clerk and stays there.
• Advertising trackers. None. Nothing here is sold or shared for marketing.
• Your location, beyond the rough, IP-level location any web request carries.
• What you browse. We keep the drafts you run and the leagues you connect, not the players you look at or how long you stay.

Juke's own code sets no cookies. Your drafts and settings live in local storage, which is not a cookie and is never sent to a server on its own.

Signing in sets Clerk's cookies, which keep you signed in and nothing more. Signing out clears them. Paying sets Stripe's cookies on Stripe's page. Signed out and never signed in, this site sets no cookies at all.

Removing a draft deletes it from your account too. Disconnecting a league deletes any sign-in we held for it. Turning alerts off deletes the push address for that device.

Deleting your account (Account, then Manage sign-in, then Security) deletes everything above: drafts, leagues, sign-ins, alert settings and push addresses. The one exception is the record of what you paid, which tax law says we must keep, and which is kept with nothing else about you.

Juke is for adults who play fantasy football. Sign-up does not ask for an age, so this is who the site is for rather than a gate. Buying a plan needs a card and an adult. If you think a child has made an account, write to us and we will remove it.

When what the app does changes, this page changes with it, and the date at the top moves. If a change affects what we keep about you, we will tell signed-in users by email before it applies.

Questions, or a request to delete what we hold: [email protected].