Skip to content
Kitchen Labs
All apps
Gridiron

Gridiron Privacy Policy

Last updated: 2 October 2026

Gridiron is made by Kitchen Labs. It's a private fantasy-football dashboard with one owner: it reads the owner's leagues on Sleeper and ESPN and puts every roster, draft and alert on one screen. Anyone can open the demo. This page says, in plain English, what happens to information in each case.

The short version

  • The demo stores nothing about you. It sets one cookie that says "show the demo" and runs on made-up leagues.
  • The real app has one account, the owner's. It keeps the owner's leagues, rosters and alerts in Kitchen Labs' database so the dashboard works.
  • Only public NFL news (headlines and short excerpts) is sent to an AI service. No personal information is.
  • There are no ads, no analytics and no tracking.

The demo

Try the demo sets one cookie, gridiron_demo, for up to 24 hours. It only switches the app to sample data; it holds no ID and nothing is stored about your visit. Everything you see in the demo is invented (the leagues, managers, team names, drafts and alerts) or is public NFL information (players, teams, the schedule, projections and news headlines). Nothing you click in the demo is saved, and the demo can't reach the real data. Exit the demo deletes the cookie.

The light or dark setting you pick is kept in your browser (local storage) so it sticks between visits. It never leaves your device.

The owner's account

Gridiron has no sign-up. The one account belongs to the owner and signs in with an email address and password through Kitchen Labs' Supabase database, which also stores:

  • League data read from Sleeper and ESPN: league settings, team names as the league's managers set them, rosters, standings, matchups, transactions and drafts. This is what the leagues already show to their members. Gridiron only reads it; it never changes anything on Sleeper or ESPN.
  • The owner's Sleeper username, to find the leagues. Sleeper's API is public and read-only.
  • ESPN sign-in cookies, only for private ESPN leagues. They are encrypted (AES-256-GCM) before they are saved, are never sent to a browser, a log or this site's pages, and Delete cookies on the ESPN settings page removes them.
  • Alerts the app writes about the owner's players, and the owner's settings.

If the owner turns on Discord or Telegram alerts, the alert text is sent to the owner's own Discord channel or Telegram chat.

AI

Gridiron uses a third-party AI service to label NFL news and to write short player news summaries. What is sent is public news only: the publisher, the headline, up to 280 characters of the article's excerpt (never the article), and the names of the players it mentions. A player summary sends the same for that player's latest six headlines. No account details, league data, usernames or cookies are ever sent. Kitchen Labs keeps the labels and summaries so each headline is processed once. Our AI provider does not use what we send to train its models, and may keep it for up to 30 days for abuse monitoring. The demo never calls the AI service; its summaries were written in advance from real public headlines.

Other services

  • Hosting: Vercel serves the site and keeps standard server logs (such as IP address and pages requested) for a short time to run and protect the service.
  • Pictures: in the owner's app, player photos and team logos load directly from ESPN's and Sleeper's image servers, so those servers see a request from the browser. The demo shows no photos or logos (initials and team abbreviations instead), so it loads nothing from them.
  • Data sources: Gridiron's servers read public data from Sleeper, ESPN, nflverse, Fantasy Football Calculator, FantasyCalc, DynastyProcess, NOAA and Open-Meteo. Your browser doesn't contact them.

What we don't do

No advertising, no analytics SDKs, no tracking across apps or websites, no selling or sharing of data. Gridiron doesn't ask a demo visitor for anything at all.

Children

Gridiron is not directed at children under 13 and collects no personal information from them.

Changes and contact

If this policy changes, we'll update the date above. Questions? Get in touch through our contact page.