Privacy notice

Here is everything Harbor collects and why. We don't sell or share it.

Your account

When you sign up we store your name, email address and a hashed password (never the password itself), or, if you sign in with Google, the name and email Google shares. For each signed-in device we keep the session, its IP address and browser type, which you can see and sign out under Account, Security. We count failed sign-ins to block password guessing.

Your profile and play

Your display name, favorite team, time zone, alert choices and whether your name shows on public leaderboards. The teams, conferences and players you favorite. Your pick'em picks, scores, badges and groups; your leagues, teams, lineups, trades and waiver claims; and live mock draft rooms you join. Other players see your display name where you play with them.

Emails and alerts

Alerts show in the app. Emails we send (confirming your address, alerts you turn on) are kept in an outbox Harbor's admins can see, and go out through our email provider once email is switched on.

Waitlist

If you join the waitlist we store your email address, which list you joined (fantasy leagues or pick'em leagues), the page you signed up from, and the time. We use it only to tell you when that opens.

Analytics

We use Google Analytics 4 to see how Harbor is used: which pages are opened and which features people use (creating a league, making a pick, setting a lineup), counted in aggregate. It sets cookies in your browser so a return visit counts as the same browser. We never send it your name, email, team or group names, anything you type, or your account ID. If you came through a creator's link, we include that creator's code. Google signals and ad personalization are off, and Google Analytics 4 doesn't log or store IP addresses.

We also use Cloudflare Web Analytics, which doesn't use cookies or fingerprinting, to count page views. When something breaks we send a technical error report to Sentry (see Error reports below). Better Stack checks from outside that the site and its scheduled jobs are running; it gets nothing about you.

To opt out of Google Analytics, turn on Global Privacy Control in your browser (Harbor then never loads it), block it with your browser or an extension, or install Google's opt-out add-on.

Error reports

When the site breaks we send a technical error report (page, browser, error details) to Sentry so we can fix it. Reports don't include your email, cookies or anything you typed.

Your browser

The practice draft board, scoring tweaks, which pick'em results you've seen and, while you're signed out, your favorites are saved in your own browser's storage and never leave your device. Signing in moves those favorites to your account.

Deleting your account

Account, Delete account removes your account, profile, favorites, pick'em entries and badges. Your fantasy teams stay in their leagues without an owner, so other managers' seasons still work.

Removing a waitlist email

Email joshbuse@hexbandit.io and we'll delete it.