Your account.
Your connection.

What the extension handles

Only after you explicitly approve inside the extension’s connection window, it reads two ESPN authentication cookies: SWID and espn_s2. They identify your ESPN session and can grant account access. They are authentication information, not ordinary tracking preferences.

The extension sends those cookies over HTTPS directly to the MembersLine origin where you started the connection, together with a short-lived, single-use pairing ticket. The requesting MembersLine webpage receives only a connection ID.

Temporary metadata includes the requesting MembersLine origin, browser tab/document IDs, a pairing ticket, the ESPN tab opened for sign-in, and an expiry time. The extension keeps this metadata in browser-session storage, removes it on completion or cancellation, and rejects requests after five minutes. Expired entries are removed on access or the next connection; closing the browser clears session storage. ESPN cookies are never written to extension storage.

What it does not collect

The extension does not read your ESPN password or login form. Sign-in and verification happen on ESPN-owned pages. It does not collect general browsing history, payment details, personal messages, or health data. It has no advertising or analytics trackers and does not load remotely hosted executable code.

The ESPN return control checks only whether its tab belongs to an active connection request. It does not read ESPN page content, fields, or account information.

How MembersLine uses the connection

MembersLine binds the connection to the signed-in user who started the request and encrypts the session in Supabase Vault. Its server uses the session to discover fantasy football leagues and refresh the leagues and teams you import, including rosters, owners, settings, scoring, matchups and transactions.

Imported league data is saved in your MembersLine account for the dashboard and related fantasy tools. MembersLine’s optional AI features process league/player information when you request a report; ESPN authentication cookies are excluded from AI prompts. The extension itself does not perform AI processing or fantasy write actions.

Sharing and security

Vercel hosts MembersLine’s server functions, and Supabase provides account storage and encrypted secrets. These service providers process data needed to deliver MembersLine. Hosting infrastructure may retain ordinary request metadata, such as IP address, request time, path and response status. Extension and connection code does not intentionally log passwords, authentication cookies, pairing tickets, or request bodies.

ESPN connection data is not sold, used for advertising, or transferred for unrelated purposes. Data access is limited to providing the requested features, security, and user-authorized support. Human access is restricted to the exceptions permitted by the Chrome Web Store’s Limited Use requirements, such as investigating abuse or complying with law.

MembersLine ESPN Connect’s use and transfer of information received from browser APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.

Retention and your controls

The saved ESPN session remains available to your MembersLine account until you disconnect or replace it. ESPN may expire or revoke it earlier; MembersLine then asks you to reconnect. Disconnect removes the active encrypted credential and its matching legacy copies from the application’s live store, while preserving saved league snapshots. Infrastructure backups may follow the hosting provider’s retention schedule.

To disconnect, open MembersLine → Connections → ESPN → Disconnect. To remove a saved team, use Remove league. Uninstalling the extension does not disconnect an existing server connection. To revoke the ESPN session itself, use ESPN’s account controls.

Permissions, explained

• Cookies: read only the two ESPN session cookies after approval.
• Storage: keep temporary pairing metadata while you complete setup.
• ESPN site access: read the approved session for fantasy.espn.com and show a return control on the ESPN fantasy page opened for setup.
• MembersLine site access: detect the extension, receive a user-initiated connection request, and send the approved session to the requesting MembersLine server.

No broad <all_urls>, browsing-history, debugger, or network-interception permission is requested.

Help and updates

Use the connection help page for setup and removal instructions. For additional questions or privacy requests, use the developer contact on the Chrome Web Store listing once published. Never send your ESPN password or session cookies in a support message.

Material changes to data handling will be reflected here and, where required, in an updated permission or consent prompt. MembersLine is independent and is not affiliated with or endorsed by ESPN.