Last updated: August 31, 2026
Roster Vault (“the app”, “we”, “us”) is a draft- and roster-management companion for ESPN fantasy football, developed by Forge Motion. This policy explains what information the app handles, why, and the choices you have. Roster Vault is an independent tool and is not affiliated with, endorsed by, or sponsored by ESPN or FantasyPros.
ESPN authentication cookies. When you connect a league, you supply your ESPN espn_s2 and SWID cookies. These are stored locally in your device’s secure storage (Keychain on iOS; encrypted storage on the web). They are transmitted over HTTPS to our Cloud Functions proxy for the sole purpose of authenticating requests to ESPN on your behalf so we can fetch your league. We do not write these cookies to our database.
ESPN league data. Once connected, we sync data ESPN returns for your league — including league settings, teams, rosters, draft picks, and the names or handles of managers in your league as provided by ESPN — and cache it in our backend database (Google Firebase Firestore) to display standings, keepers, and mock drafts. Because this reflects your ESPN league, it may include information about other members of that league.
Public sports data. The app uses consensus player rankings and average draft position sourced from FantasyPros, plus general NFL player information. This is public sports data and is not personal to you.
App configuration. Basic, non-identifying preferences (such as your selected league and season, and any keeper or mock-draft adjustments you make) are stored to make the app work.
To understand how the app is used and where to improve it, Roster Vault records usage analytics through Google Analytics for Firebase. This covers events such as which screens you view, when the app is opened, and in-app actions like connecting a league or running a mock draft. It also includes the standard technical data Google Analytics collects automatically — app version, device model and operating system, and a coarse, IP-derived location (typically country or region; Google does not retain your full IP address).
These analytics are not tied to your identity. We never send your ESPN credentials, and we do not attach your name, email, or your league and team identifiers to any analytics event.
Your choice. Analytics are on by default. You can turn them off at any time in Settings → Privacy → Usage analytics; while off, no analytics events are collected or sent.
Your ESPN cookies live in your device’s secure storage and are never persisted on our servers. All network traffic between the app, our backend, and ESPN uses HTTPS. Cached league and rankings data stored in Firebase is encrypted at rest by the provider. No method of transmission or storage is 100% secure, but we limit what we retain and how long we keep it.
Roster Vault is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children.
We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Continued use of the app after an update constitutes acceptance of the revised policy.
Questions or requests? Email rostervault@forgemotion.com.