Privacy Policy

Last updated: 2026-08-12

Next Man Up LLC, a Wyoming limited liability company ("Next Man Up", "we", "us", or "our") operates the Next Man Up website and web app (the "Service"), an independent fantasy-football assistant that watches the fantasy leagues you connect and tells you what lineup, waiver, or roster move to consider when player news breaks. This Privacy Policy explains what we collect, why, who we share it with, and the choices and rights you have.

We are independent and not affiliated with, endorsed by, or sponsored by the NFL, Sleeper, Yahoo, ESPN, or Apple.

Summary

• We collect the minimum needed to run the Service: your account, the fantasy data you connect, the recommendations we generate for you, and basic diagnostics.
• We connect to fantasy platforms read-only. We never see or store your fantasy-platform password, and we never make roster moves for you.
• We do not sell your personal information or use it for advertising.
• You can access or delete your data at any time.

1. Information we collect

Account information. When you sign up we collect your email address and authentication credentials. Authentication is handled by Supabase; passwords are stored only in hashed form and we never have access to your plaintext password.

Fantasy platform data. When you connect a fantasy platform, what you give us depends on the platform. Sleeper takes a public identifier only (your Sleeper username). ESPN public leagues take a league id; ESPN private leagues additionally require the two ESPN session cookies your own browser holds (ESPN_S2 and SWID), because ESPN publishes no other way to read a private league. Yahoo, where available, uses Yahoo's own OAuth sign-in and gives us an access and refresh token, never your Yahoo password.

Those ESPN cookies and Yahoo tokens are credentials. We store them encrypted at rest, use them only to read the leagues you connected, never share them with anyone, and delete them when you disconnect the platform (Settings → Connected platforms) or delete your account. Every one of these connections is read-only: we do not receive your platform password, and we cannot and do not make moves on your behalf.

Recommendations and alerts. We generate and store the recommendations, lineup-risk assessments, alerts, and related settings we produce for you.

Push notifications. If you enable notifications, we store the web-push subscription and, on iOS, the device push token needed to deliver alerts.

Diagnostics and usage. We collect limited technical data to operate and improve the Service — product analytics (via Vercel Analytics) and error/crash telemetry (via Sentry), such as the page or route visited, timestamps, approximate device or browser type, and error details.

Communications. If you email us for support, we keep your message and contact details so we can respond.

We do not knowingly collect precise location, contacts, photos, health, or biometric data.

2. How we use your information

• Operate the Service: sync your leagues and rosters, generate recommendations, and deliver the alerts you enable.
• Authenticate you and keep your account secure.
• Provide support and respond to your requests.
• Monitor, debug, and improve the Service, including diagnosing errors and understanding usage in aggregate.
• Protect against fraud, abuse, and security incidents, and comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party or cross-context behavioral advertising.

3. How we share information

We share information only with service providers ("subprocessors") that process it on our behalf to run the Service, and only as needed:

We may also disclose information if required by law or legal process, to enforce our Terms, or to protect the rights and safety of our users or the public; and in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Policy.

The Service is currently free and we do not process payments. If we introduce paid features in the future, we will update this Policy to describe any payment processors before charging you.

4. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify the personal data associated with it — including your account, platform connection, recommendations, alerts, and notification subscriptions — except where we must retain something to comply with law, resolve disputes, or enforce our agreements. Residual copies may remain briefly in backups before being overwritten.

5. Security

We use technical and organizational measures designed to protect your information, including encryption in transit (HTTPS), hashed passwords, restricted access to production systems, and database row-level security (RLS) that scopes each user to only their own data. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

6. Your rights and choices

• Access and portability: request a copy of your personal data.
• Correction: ask us to correct inaccurate data.
• Deletion: delete your account and associated personal data at any time (contact us, or use in-app settings where available).
• Disconnect a platform: stop further syncing from a connected fantasy platform.
• Notifications: turn push, email, and SMS alerts off at any time in your device, browser, or account settings.
• Withdraw consent: where we rely on consent, withdraw it at any time.

To exercise any of these, email us at daniel@nycmanufacturing.com. We may need to verify your identity first. We will not discriminate against you for exercising your rights.

GDPR (EEA/UK). If you are in the European Economic Area or the UK, our legal bases for processing are: performance of our contract with you (to provide the Service), our legitimate interests in operating and securing the Service, your consent where required (for example, certain notifications), and compliance with legal obligations. You may also lodge a complaint with your local data-protection authority.

CCPA/CPRA (California). We collect the categories of personal information described in Section 1 for the purposes in Section 2, and disclose them to the subprocessors in Section 3. We do not "sell" or "share" personal information as those terms are defined under California law. California residents may exercise the rights to know, access, correct, and delete described above.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact daniel@nycmanufacturing.com and we will delete it.

8. International users

We operate the Service from the United States, and our subprocessors may process data in other countries. Where required, we rely on appropriate safeguards for international data transfers.

9. Third-party services

The Service connects to third-party platforms (Sleeper, ESPN, and Yahoo) that we do not control. Their handling of information is governed by their own privacy policies; we encourage you to review them.

10. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, for material changes, provide additional notice where appropriate. Your continued use of the Service after changes take effect constitutes acceptance.

11. Contact us

Next Man Up — operated by Next Man Up LLC
Email: daniel@nycmanufacturing.com