Skip to content
CounterShift
RankingsDraft CompanionContactLaunch plan

Privacy

Privacy at CounterShift

This notice explains how CounterShift handles information for its public site, pre-release access, and the public fantasy football decision-support product.

Updated September 28, 2026

Launch notice. CounterShift is preparing for public release with limited initial enrollment. Features and provider availability may change as the product develops.

Who operates this service

CounterShift operates this service from New Jersey, United States, and is responsible for the practices described here. Privacy and deletion requests can be sent to support@countershift.io.

Public-site information

The public site does not display connected league, roster, or account data. Hosting and security providers may process limited technical information such as IP address, request time, browser type, referring page, and security events to deliver and protect the site. The current public release does not use advertising cookies or cross-site behavioral profiles.

Information you provide

CounterShift may receive information you provide directly, including your name, email address, invitation status, account status, and support communications. Do not send passwords, authentication codes, session cookies, or provider credentials through support channels.

Yahoo connections

If Yahoo access is approved and enabled, authorization occurs on Yahoo’s own OAuth screen. CounterShift does not receive or store your Yahoo password. It requests only approved scopes and processes Yahoo information only for the features you authorize.

Yahoo user data obtained through Yahoo APIs is refreshed or removed within 24 hours unless Yahoo expressly identifies that data as permitted for longer storage. Yahoo GUIDs and authenticated token values may be retained only as permitted by Yahoo’s API terms. Access and refresh tokens are stored server-side and protected as credentials.

Sleeper connections

Sleeper provides a documented read-only API and does not require CounterShift to collect your Sleeper password or an API token. If a Sleeper feature is enabled, CounterShift may use a user identifier, league identifier, and documented league information you ask it to analyze. CounterShift does not use the Sleeper API to modify your Sleeper account or league.

League information

Depending on the provider and enabled feature, CounterShift may request league identifiers and settings; teams, rosters, and lineups; schedules and matchups; standings; transactions; draft context; and other league information made available through permitted read-only access.

How information is used

CounterShift uses authorized information to connect the correct league, normalize league context, operate and secure the service, troubleshoot support issues, and produce independent analytics and informational recommendations. The provider remains the system of record.

Read-only boundary

CounterShift does not submit lineup changes, waiver claims, adds or drops, trades, bids, nominations, or draft selections. Users make decisions and any resulting changes directly on the provider platform.

Service providers and disclosure

CounterShift may use providers for hosting, data storage, authentication, security, and operational email. They may process information only to provide those services. CounterShift does not sell personal information or disclose connected provider data for advertising.

Retention, disconnection, and deletion

Provider information is retained only for as long as permitted by the provider and needed for an enabled feature, reliability, security, or troubleshooting. Provider-specific limits take priority over general operational retention. When a connection is disconnected, CounterShift stops future authorized requests and removes or revokes credentials as required. Limited security logs and backups expire on bounded schedules unless law requires otherwise.

You may revoke provider access through the provider’s controls and request account disconnection or deletion by emailing support@countershift.io. We will verify the request and respond within 30 days, while honoring any shorter provider-mandated deletion period.

Security

CounterShift is designed around least-privilege access, server-side credential handling, encrypted transport, access controls, session protection, input validation, and separation between this public review site and any connected product environment. No storage or transmission method is completely secure.

Contact

For privacy questions or requests, email support@countershift.io.

CounterShift

Independent fantasy football decision support.

PrivacyTermsCookie PolicyContact