managr · last updated October 7, 2026
Terms of ServiceCookies and local storageBack to managr
The short version. You can use managr without an account. If you make one, we store what you save so it follows you between devices. Everyone gets Cloudflare's cookieless page counts. Our own usage measurement runs only if you accept it on your first visit, and never if your browser sends Do Not Track or Global Privacy Control. When advertising appears on managr it is served by Google or Adsterra, which use cookies to do it, and only after you accept; the Advertising section explains how to turn off personalized ads. We do not sell or rent your data to anyone. You can delete your account and everything attached to it from Profile & settings, or email managrsports@gmail.com and we will do it for you.
managr is a fantasy sports projection and ranking site run by Matthew Godinich, 222 W Lane Ave, Columbus, OH, who is responsible for the personal data described in this policy. Contact for anything in this policy, including deletion requests: managrsports@gmail.com.
Email and password are handled by Supabase, our authentication and database provider. We never see your password. If you never create an account, we hold no profile for you at all.
If you sign in with Google, Google confirms who you are and shares your name, email address, profile picture and Google account ID with Supabase, which keeps them with your account. We never see your Google password, and signing in this way gives us no access to your Gmail or anything else in your Google account.
We email you about your account: confirming your address and resetting your password. Other email, such as a newsletter or alerts, is off unless you turn it on in Profile & settings, and you can turn it off there at any time. If you turn it on, your account's email address goes on our mailing list in Supabase, with the time you turned it on; turning it off marks the entry unsubscribed. Any newsletter we send will carry an unsubscribe link.
The app keeps your settings, saved notes, imported rosters and league portfolios in your browser's local storage. While you are signed in, those entries also sync to your account so they follow you between devices. If a key exists in both places when you sign in, the copy on your account wins and local entries fill the gaps. Signed out, everything stays in your browser and never reaches us. Cookies and local storage lists what is stored on your device.
This runs only if you accept it on the consent banner. When it does, we store a random identifier in your browser and record, as you move between sections, the route you viewed, the workspace it belongs to and how long you stayed. While you are signed in, those events are linked to your account, so we can see how the product is used by real accounts rather than only as anonymous traffic. Visits made while signed out are never linked to an account: the identifier is replaced when you sign in and again when you sign out, and it does not sync to your account or follow you to other devices.
We do not record what you type, your search terms, individual clicks, or anything about the contents of your leagues, and we do not store your IP address with these events. They live in our own Supabase database. If you decline, or your browser sends Do Not Track or Global Privacy Control, we record none of this and store no identifier.
We also run Cloudflare's page-view and page-speed measurement. On each page load its script sends Cloudflare the page address and referring page, the navigation type, a per-page-load id, and load-timing numbers such as first paint and first contentful paint. As with every request your browser makes to any server, Cloudflare receives your IP address, and it uses that to derive a coarse location such as country. It sets no cookies and writes nothing to your browser's storage, and the per-page-load id is regenerated on every load, so it does not follow you between pages or visits. We use it only for traffic counts and load-speed measurement. Cloudflare processes this data under its own privacy policy and retention schedule, which we do not control.
If you turn on browser notifications, we store the push endpoint your browser issues along with the public keys needed to encrypt a message to it, and the roster and league you chose alerts for, so the alerts can be about your players. It is saved under a hash of that endpoint rather than under your name, and it is not publicly readable. It is used only to send the alerts you asked for. Turning notifications off in managr, or deleting your account in that browser, removes it; blocking notifications in your browser's settings stops them, and the stored endpoint is dropped once the browser reports it expired.
The feedback form needs no account. When you send it we keep your message, the page you sent it from, and the category and subject if you picked them. Name and email are optional, and we only use an address you give us to reply. Submissions are stored in our Supabase database and are not public.
If the app hits an error in your browser, it sends us a short report so we can fix it: the error message and where it happened, the page you were on, your browser's user-agent string and window size. Nothing from your account, your settings or your leagues is included. Reports are stored with feedback.
Our host processes ordinary request data such as IP address in the course of serving the site and blocking abuse. Some endpoints are rate-limited, which means a short-lived record of recent request volume.
managr itself sets no cookies. It does keep some things in your browser's storage, which works like a cookie that only this site can read:
On your first visit managr asks whether to allow the optional items. Until you choose, they do not run, and declining changes nothing else about the site. You can change your choice at any time from Cookie settings at the bottom of every page.
managr is free to use and is supported by advertising. When ads are shown on managr, they are served by Google AdSense or by Adsterra.
Advertising cookies are set by Google or Adsterra, not by managr. We do not pass your account, your saved settings or your league data to advertisers. Do Not Track and Global Privacy Control govern managr's own usage analytics described above; Google's advertising cookies are controlled from its Ads Settings and the consent choice shown to you.
Depending on where you live you may have additional rights over your personal data, including access, correction, deletion and portability. We apply the above to everyone who asks, regardless of location, and we do not charge for it.
You must be 13 or older to create an account. managr is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has created an account, email us and we will delete it.
Passwords are handled by Supabase and never reach us. Yahoo tokens are stored where only our server can read them, and push endpoints are stored so that they are not publicly readable. No service can promise perfect security, and we do not. If we ever discover a breach affecting your data, we will tell affected account holders by email.
Supabase, Cloudflare and, when ads are shown, Google process data on infrastructure that may sit outside your country, including the United States. Using the site means your data may be handled there.
If this policy changes materially we will update the date at the top and, for anything that affects what we collect or who receives it, say so in the app. Continuing to use managr after a change means the updated policy applies.
Questions, corrections and deletion requests: managrsports@gmail.com, or by mail to Matthew Godinich, 222 W Lane Ave, Columbus, OH.