Effective Date: June 16, 2026
Last Updated: August 20, 2026

Flock Fantasy ("we", "us", "our") operates the Flock Fantasy Draft Overlay Chrome extension. This policy describes what data the extension collects, how it is used, and how it is stored.


The extension supports fantasy football draft rooms on Underdog Fantasy, DraftKings, ESPN Fantasy, Yahoo Fantasy Sports, and Sleeper. The extension only uses host access on these services to provide draft overlay, rankings, draft analysis, sync/import, and grading features.


| Data | Purpose | Stored Where |
| -------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------- |
| Flock account credentials (username/email and password) for email sign-in | Transmitted over HTTPS to Flock Fantasy authentication servers (api.flockfantasy.com) solely to sign you in; the password is never stored by the extension | Not stored; sent only during sign-in |
| Google / Apple sign-in data (OAuth authorization code; email address and basic profile from the provider) | Federated sign-in through Amazon Cognito; used to create or match your Flock Fantasy account. The extension never sees your Google or Apple password | Authorization code exchanged with Flock Fantasy servers over HTTPS; resulting email stored locally to show the signed-in account |
| Flock authentication token and user ID | Authenticate API requests to Flock Fantasy servers | Locally on your device via chrome.storage.local |
| Consent/disclosure state | Remember whether you accepted the extension data disclosure | Locally on your device via chrome.storage.local |
| Draft page URL and draft identifiers | Detect supported draft rooms and associate data with the correct draft, league, contest, or entry | In memory during the draft session; sync/import identifiers may be sent to Flock Fantasy servers |
| Draft page content (player names, teams, positions, draft order, rosters, lineups, player pools, pick history, and draft settings) | Display rankings, draft recommendations, stack highlights, ADP deltas, roster construction tools, ownership/exposure insights, draft grades, and completed draft reviews | In memory during the draft session; some draft data may be sent to Flock Fantasy servers for sync/import, portfolio, analysis, and grading features |
| Live draft events from WebSocket, fetch, or XHR traffic on supported draft sites | Track picks and draft state in real time | In memory during the draft session; relevant draft events may be sent to Flock Fantasy servers for user-requested sync/import and analysis features |
| Overlay preferences (toggle settings for deltas, stacks, ownership, display options, and selected creators) | Remember your display preferences across sessions | Locally on your device via chrome.storage.local |
| Draft sync status and cursors | Track import progress and avoid re-importing the same completed drafts | Locally on your device via chrome.storage.local; synced draft data may be stored on Flock Fantasy servers |
| Generated Underdog device identifier | Make authorized Underdog API requests needed for Underdog draft sync when Underdog requires a client device identifier | Locally on your device via chrome.storage.local |

Draft Data may include draft results, draft history, players drafted, selection order, rosters, lineups, roster construction, player exposures, contest identifiers, league identifiers, entry identifiers, draft formats, timestamps, draft settings, and usernames or account identifiers on the connected fantasy service. Draft Data does not include payment card numbers or government identifiers.

• Your Google or Apple account password
• Browsing history outside supported fantasy draft sites
• Financial or payment information from fantasy sites
• Government identifiers
• Health information
• Location data
• Keystrokes, clicks, or mouse movements unrelated to using extension controls

We use collected data only to operate, provide, maintain, secure, troubleshoot, and improve Flock Fantasy draft tools. This includes rankings, draft recommendations, roster analysis, stack highlights, ADP deltas, ownership and exposure insights, sync/import, portfolio features, draft grading, and completed draft reviews.

Sign-in credentials are used only to authenticate you: email sign-in transmits your username/email and password over HTTPS to Flock Fantasy servers, and Google/Apple sign-in exchanges an OAuth authorization code with Flock Fantasy servers via Amazon Cognito. Authentication tokens are sent only to Flock Fantasy servers to authenticate account-based API requests. Draft Data may be sent to Flock Fantasy servers when needed to provide sync/import, portfolio, analysis, and grading features. Data is not used for unrelated advertising.


We do not sell or rent user data. We may share data with service providers who process data on our behalf, when required by law, to protect our rights or users, or in aggregated or de-identified form that does not identify you personally.

• Local extension data is stored using Chrome's chrome.storage.local API.
• Draft session data used only for the live overlay is held in memory and cleared when you close or navigate away from the draft page.
• API communication uses HTTPS encryption in transit.
• Synced or imported Draft Data may be retained on Flock Fantasy servers as needed to provide account features.

Local extension data persists until you sign out, uninstall the extension, clear extension data, or reset the relevant feature. Draft Data synced or imported to Flock Fantasy servers is retained as needed to provide the Service and for legitimate business or legal purposes, unless deletion is required by law or requested through a verified deletion request.

• Do not consent: If you do not accept the extension disclosure, do not use the extension.
• Disable features: Use the overlay settings panel to turn off optional display features.
• Sign out: Click the extension icon and log out to stop authenticated Flock API communication.
• Uninstall: Removing the extension deletes locally stored extension data from your browser.
• Data requests: Contact us to request access to, correction of, or deletion of your personal Draft Data.

This extension is not directed at children under 18. We do not knowingly collect Draft Data from individuals under 18.


We may update this policy from time to time. Changes will be reflected by updating the "Last Updated" date above. Continued use of the extension after changes constitutes acceptance.


If you have questions about this policy, contact us at support@flockfantasy.com.